// AUTO-GENERATED by scripts/generate.ts from .generated-specs. Do not edit. import * as S from "@distilled.cloud/core/schema"; import * as API from "@distilled.cloud/core/api"; import * as T from "../traits.ts"; import { CloudflareProtocol, CloudflarePaginatedProtocol, type CloudflareOpError, type CloudflareOpContext, } from "../protocol.ts"; import { cloudflarePaginate, ResultInfo } from "../pagination.ts"; import { CloudflareError, CloudflareRateLimited } from "../errors.ts"; import * as Retry from "../retry.ts"; export type { CloudflareOpError, CloudflareOpContext }; /** Fallback camelCase→wire mapping for opaque content (mined from the distilled SDK). */ const KEY_DICTIONARY: Record> = { acId: "ac_id", accessClientId: "access_client_id", accessClientSecret: "access_client_secret", accessSeat: "access_seat", accessTokenLifetime: "access_token_lifetime", accountId: "account_id", accountName: "account_name", accountTag: "account_tag", accountType: "account_type", activeDeviceCount: "active_device_count", activeRegistrations: "active_registrations", activeThreats: "active_threats", activityLog: "activity_log", addHeaders: "add_headers", addinIdentifierToken: "addin_identifier_token", aiContextAnalysis: "ai_context_analysis", aiContextAvailable: "ai_context_available", aiContextEnabled: "ai_context_enabled", allowAllHeaders: "allow_all_headers", allowAllMethods: "allow_all_methods", allowAllOrigins: "allow_all_origins", allowAnyOnLocalhost: "allow_any_on_localhost", allowAnyOnLoopback: "allow_any_on_loopback", allowAuthenticateViaWarp: "allow_authenticate_via_warp", allowChildBypass: "allow_child_bypass", allowCodeMode: "allow_code_mode", allowCredentials: "allow_credentials", allowEmailAlias: "allow_email_alias", allowIframe: "allow_iframe", allowModeSwitch: "allow_mode_switch", allowPkceWithoutClientSecret: "allow_pkce_without_client_secret", allowUpdates: "allow_updates", allowedAuthenticators: "allowed_authenticators", allowedClipboardLocalToRemoteFormats: "allowed_clipboard_local_to_remote_formats", allowedClipboardRemoteToLocalFormats: "allowed_clipboard_remote_to_local_formats", allowedHeaders: "allowed_headers", allowedIdps: "allowed_idps", allowedMatchCount: "allowed_match_count", allowedMethods: "allowed_methods", allowedMicrosoftOrganizations: "allowed_microsoft_organizations", allowedOrigins: "allowed_origins", allowedToLeave: "allowed_to_leave", allowedUris: "allowed_uris", amrMatchingSessionDuration: "amr_matching_session_duration", anyValidServiceToken: "any_valid_service_token", apiEndpoints: "api_endpoints", apiUrl: "api_url", appCount: "app_count", appDomain: "app_domain", appLauncherLogoUrl: "app_launcher_logo_url", appLauncherUrl: "app_launcher_url", appLauncherVisible: "app_launcher_visible", appState: "app_state", appUid: "app_uid", applicationConfidenceScore: "application_confidence_score", applicationScoreComposition: "application_score_composition", applicationSource: "application_source", applicationType: "application_type", applicationTypeDescription: "application_type_description", applicationTypeId: "application_type_id", approvalGroups: "approval_groups", approvalRequired: "approval_required", approvalsNeeded: "approvals_needed", appsDomain: "apps_domain", associatedHostnames: "associated_hostnames", attributeName: "attribute_name", attributeValue: "attribute_value", auditSsh: "audit_ssh", authContext: "auth_context", authCredentials: "auth_credentials", authDomain: "auth_domain", authMethod: "auth_method", authRequirements: "auth_requirements", authState: "auth_state", authStatus: "auth_status", authType: "auth_type", authUrl: "auth_url", authorizationServerId: "authorization_server_id", authorizationUrl: "authorization_url", autoConnect: "auto_connect", autoRedirectToIdentity: "auto_redirect_to_identity", backgroundColor: "background_color", bgColor: "bg_color", bindingStatus: "binding_status", bisoAdminControls: "biso_admin_controls", blockPage: "block_page", blockPageEnabled: "block_page_enabled", blockReason: "block_reason", bodyDevices: "body_devices", bodyScanning: "body_scanning", browserIsolation: "browser_isolation", buttonColor: "button_color", buttonTextColor: "button_text_color", bypassParentRule: "bypass_parent_rule", captivePortal: "captive_portal", caseSensitive: "case_sensitive", centrifyAccount: "centrify_account", centrifyAppId: "centrify_app_id", certIssuerDn: "cert_issuer_dn", certIssuerSki: "cert_issuer_ski", certPresented: "cert_presented", certSerial: "cert_serial", certificateId: "certificate_id", certsUrl: "certs_url", cfResourceId: "cf_resource_id", checkPrivateKey: "check_private_key", checkSession: "check_session", chinaNetwork: "china_network", claimName: "claim_name", claimValue: "claim_value", clientCertificateForwarding: "client_certificate_forwarding", clientDefault: "client_default", clientId: "client_id", clientKey: "client_key", clientSecret: "client_secret", clientSecretVersion: "client_secret_version", clientVersion: "client_version", cloudflareAccountMember: "cloudflare_account_member", coloName: "colo_name", commandLogging: "command_logging", commonName: "common_name", completedDate: "completed_date", complianceStatus: "compliance_status", conditionalAccessEnabled: "conditional_access_enabled", confidenceThreshold: "confidence_threshold", configName: "config_name", configSrc: "config_src", configVersion: "config_version", configurationVersion: "configuration_version", connectionId: "connection_id", connectionRules: "connection_rules", connsActiveAt: "conns_active_at", connsInactiveAt: "conns_inactive_at", consumerServiceUrl: "consumer_service_url", contextAwareness: "context_awareness", corsHeaders: "cors_headers", countryCode: "country_code", countryIso: "country_iso", cpuPct: "cpu_pct", createdAt: "created_at", createdBy: "created_by", createdDate: "created_date", currentCertificate: "current_certificate", customAttributes: "custom_attributes", customCertificate: "custom_certificate", customClaims: "custom_claims", customDenyMessage: "custom_deny_message", customDenyUrl: "custom_deny_url", customHtml: "custom_html", customNonIdentityDenyUrl: "custom_non_identity_deny_url", customPages: "custom_pages", customerId: "customer_id", dataClasses: "data_classes", dataTags: "data_tags", daysUntilNextRotation: "days_until_next_rotation", deactivateOnDelete: "deactivate_on_delete", defaultDisabled: "default_disabled", defaultRelayState: "default_relay_state", deletedAt: "deleted_at", denyUnmatchedRequests: "deny_unmatched_requests", denyUnmatchedRequestsExemptedZoneNames: "deny_unmatched_requests_exempted_zone_names", deviceId: "device_id", devicePosture: "device_posture", deviceRegistration: "device_registration", deviceSessions: "device_sessions", deviceType: "device_type", dexTests: "dex_tests", directoryId: "directory_id", disableAutoFallback: "disable_auto_fallback", disableForTime: "disable_for_time", dnsDestinationIpsId: "dns_destination_ips_id", dnsDestinationIpv6BlockId: "dns_destination_ipv6_block_id", dnsResolvers: "dns_resolvers", dnsSearchSuffixes: "dns_search_suffixes", dnsServer: "dns_server", dohJwtDuration: "doh_jwt_duration", dohSubdomain: "doh_subdomain", dynamicClientRegistration: "dynamic_client_registration", eagerRedirectCookieSetting: "eager_redirect_cookie_setting", ecsSupport: "ecs_support", eidLastSeen: "eid_last_seen", emailAddresses: "email_addresses", emailAttributeName: "email_attribute_name", emailClaimName: "email_claim_name", emailDomain: "email_domain", emailList: "email_list", emailListUuid: "email_list_uuid", enableBindingCookie: "enable_binding_cookie", enableEncryption: "enable_encryption", enabledDownloadPhase: "enabled_download_phase", enabledEntries: "enabled_entries", enabledUploadPhase: "enabled_upload_phase", encodingVersion: "encoding_version", entryId: "entry_id", entryName: "entry_name", errorDescription: "error_description", errorDetails: "error_details", evaluateUrl: "evaluate_url", eventCount: "event_count", eventDetails: "event_details", excludeOfficeIps: "exclude_office_ips", executionContext: "execution_context", expiresAt: "expires_at", expiresOn: "expires_on", extendedEmailMatching: "extended_email_matching", extendedKeyUsage: "extended_key_usage", externalEmergencySignalEnabled: "external_emergency_signal_enabled", externalEmergencySignalFingerprint: "external_emergency_signal_fingerprint", externalEmergencySignalInterval: "external_emergency_signal_interval", externalEmergencySignalUrl: "external_emergency_signal_url", externalEvaluation: "external_evaluation", failClosed: "fail_closed", fallbackAction: "fallback_action", fallbackDomains: "fallback_domains", fileTypes: "file_types", fnrId: "fnr_id", footerLinks: "footer_links", footerText: "footer_text", forensicCopy: "forensic_copy", friendlyName: "friendly_name", gatewayDeviceId: "gateway_device_id", gatewayProxyEnabled: "gateway_proxy_enabled", gatewaySeat: "gateway_seat", gatewayTag: "gateway_tag", gatewayUdpProxyEnabled: "gateway_udp_proxy_enabled", gatewayUniqueId: "gateway_unique_id", genAiScore: "gen_ai_score", githubOrganization: "github-organization", globalAcceleration: "global_acceleration", grantTypes: "grant_types", groupFilterRegex: "group_filter_regex", groupId: "group_id", haMode: "ha_mode", haStatus: "ha_status", hardwareId: "hardware_id", headerAttributes: "header_attributes", headerBgColor: "header_bg_color", headerName: "header_name", headerText: "header_text", hostSelector: "host_selector", httpOnlyCookieAttribute: "http_only_cookie_attribute", humanId: "human_id", hybridAndImplicitOptions: "hybrid_and_implicit_options", icmpProxyEnabled: "icmp_proxy_enabled", identityDenied: "identity_denied", identityProviderId: "identity_provider_id", identityUpdateBehavior: "identity_update_behavior", idpEntityId: "idp_entity_id", idpId: "idp_id", idpPublicCerts: "idp_public_certs", idpResourceId: "idp_resource_id", idpUid: "idp_uid", ignoreCnameCategoryMatches: "ignore_cname_category_matches", imageUrl: "image_url", inUse: "in_use", includeContext: "include_context", insecureDisableDnssecValidation: "insecure_disable_dnssec_validation", inspectionMode: "inspection_mode", integrationType: "integration_type", integrationUid: "integration_uid", intelId: "intel_id", ipAddr: "ip_addr", ipAddress: "ip_address", ipCategories: "ip_categories", ipIndicatorFeeds: "ip_indicator_feeds", ipList: "ip_list", ipSubnets: "ip_subnets", ipv4Destination: "ipv4_destination", ipv4DestinationBackup: "ipv4_destination_backup", ipv4Fallback: "ipv4_fallback", isActive: "is_active", isCurrent: "is_current", isDefault: "is_default", isDefaultNetwork: "is_default_network", isGateway: "is_gateway", isPendingReconnect: "is_pending_reconnect", isSharedOauthCallbackEnabled: "is_shared_oauth_callback_enabled", isUiReadOnly: "is_ui_read_only", isUpstream: "is_upstream", isWarp: "is_warp", isolationRequired: "isolation_required", issueCount: "issue_count", issuerOrg: "issuer_org", issuerRaw: "issuer_raw", issuerUrl: "issuer_url", keyRotationIntervalDays: "key_rotation_interval_days", keyType: "key_type", keysUrl: "keys_url", l4Protocol: "l4_protocol", lanAllowMinutes: "lan_allow_minutes", lanAllowSubnetSize: "lan_allow_subnet_size", landingPageDesign: "landing_page_design", lastEvent: "last_event", lastKeyRotationAt: "last_key_rotation_at", lastResetTime: "last_reset_time", lastSeen: "last_seen", lastSeenAt: "last_seen_at", lastSeenRegistration: "last_seen_registration", lastSeenUser: "last_seen_user", lastSuccessfulLogin: "last_successful_login", lastSuccessfulSync: "last_successful_sync", lastSynced: "last_synced", levelId: "level_id", levelIds: "level_ids", linkedAppToken: "linked_app_token", logAll: "log_all", logBlocks: "log_blocks", loggedAt: "logged_at", loginDesign: "login_design", loginMethod: "login_method", logoPath: "logo_path", logoUrl: "logo_url", macAddress: "mac_address", mailtoAddress: "mailto_address", mailtoSubject: "mailto_subject", maskingLevel: "masking_level", masqueEndpoints: "masque_endpoints", maxAge: "max_age", maxCells: "max_cells", maxCustomRegexEntries: "max_custom_regex_entries", maxDatasetCells: "max_dataset_cells", maxDocumentFingerprints: "max_document_fingerprints", maxFileSizeMb: "max-file-size-mb", maxMatchBytes: "max_match_bytes", maxRiskLevel: "max_risk_level", mcpCode: "mcp_code", mcpServerId: "mcp_server_id", mfaConfig: "mfa_config", mfaDisabled: "mfa_disabled", mfaPivKeyRequirements: "mfa_piv_key_requirements", mfaRequiredForAllApps: "mfa_required_for_all_apps", modifiedAt: "modified_at", modifiedBy: "modified_by", mtlsAuth: "mtls_auth", nameByIdp: "name_by_idp", nameFormat: "name_format", nameIdFormat: "name_id_format", nameIdTransformJsonata: "name_id_transform_jsonata", networkId: "network_id", networkStatus: "network_status", newPriorities: "new_priorities", nonIdentityEnabled: "non_identity_enabled", notAfter: "not_after", notificationSettings: "notification_settings", numCells: "num_cells", oauthConfiguration: "oauth_configuration", ocrEnabled: "ocr_enabled", offrampWarpEnabled: "offramp_warp_enabled", oktaAccount: "okta_account", onBehalf: "on_behalf", oneloginAccount: "onelogin_account", openAccess: "open_access", openedAt: "opened_at", operatingSystem: "operating_system", operationalState: "operational_state", optionsPreflightBypass: "options_preflight_bypass", originIp: "origin_ip", osDistroName: "os_distro_name", osDistroRevision: "os_distro_revision", osVersion: "os_version", osVersionExtra: "os_version_extra", overrideHost: "override_host", overrideIps: "override_ips", packetSizeBytes: "packet-size-bytes", pathCookieAttribute: "path_cookie_attribute", payloadLog: "payload_log", payloadLogging: "payload_logging", perPage: "per_page", percentApproved: "percent_approved", percentBlocked: "percent_blocked", percentErrored: "percent_errored", percentUsersProcessed: "percent_users_processed", pinPolicy: "pin_policy", pingEnvId: "ping_env_id", pkceEnabled: "pkce_enabled", policyId: "policy_id", policyIds: "policy_ids", portProtocols: "port_protocols", portRange: "port_range", portalAlias: "portal_alias", portalDescription: "portal_description", preservePathAndQuery: "preserve_path_and_query", previousCertificate: "previous_certificate", previousClientSecretExpiresAt: "previous_client_secret_expires_at", profileId: "profile_id", protocolDetection: "protocol_detection", providerName: "provider_name", publicCertificate: "public_certificate", publicIp: "public_ip", publicKey: "public_key", purposeJustificationPrompt: "purpose_justification_prompt", purposeJustificationRequired: "purpose_justification_required", quotaUsage: "quota_usage", ramUsedPct: "ram_used_pct", rayId: "ray_id", readOnly: "read_only", readServiceTokensFromHeader: "read_service_tokens_from_header", redactPii: "redact_pii", redirectUris: "redirect_uris", redirectUrl: "redirect_url", referenceId: "reference_id", refreshTokenOptions: "refresh_token_options", registerInterfaceIpWithDns: "register_interface_ip_with_dns", registrationId: "registration_id", remoteConfig: "remote_config", remoteUri: "remote_uri", requestBody: "request_body", requestMethod: "request_method", requireFipsDevice: "require_fips_device", requireToken: "require_token", requiredAaguids: "required_aaguids", resetTime: "reset_time", resolveDnsInternally: "resolve_dns_internally", resolveDnsThroughCloudflare: "resolve_dns_through_cloudflare", resourceGroupName: "resource_group_name", resourceType: "resource_type", resourceUserEmail: "resource_user_email", restrictToAccountMembers: "restrict_to_account_members", resultInfo: "result_info", returnAccessTokenFromAuthorizationEndpoint: "return_access_token_from_authorization_endpoint", returnIdTokenFromAuthorizationEndpoint: "return_id_token_from_authorization_endpoint", revokedAt: "revoked_at", riskLevel: "risk_level", rootCertificateInstallationEnabled: "root_certificate_installation_enabled", routeThroughPrivateNetwork: "route_through_private_network", ruleId: "rule_id", ruleSettings: "rule_settings", runAt: "run_at", saasApp: "saas_app", sameSiteCookieAttribute: "same_site_cookie_attribute", samlAttributeTransformJsonata: "saml_attribute_transform_jsonata", samlCertificateSet: "saml_certificate_set", samlCertificateSetId: "saml_certificate_set_id", sccmVpnBoundarySupport: "sccm_vpn_boundary_support", scimBaseUrl: "scim_base_url", scimConfig: "scim_config", seatDeprovision: "seat_deprovision", seatUid: "seat_uid", secureWebGateway: "secure_web_gateway", seedId: "seed_id", selfHostedDomains: "self_hosted_domains", sensitivityLevels: "sensitivity_levels", sensorConfig: "sensor_config", serialNumber: "serial_number", serverAlias: "server_alias", serverDescription: "server_description", serverId: "server_id", serviceAuth_401Redirect: "service_auth_401_redirect", serviceModeV2: "service_mode_v2", serviceToken: "service_token", serviceTokenId: "service_token_id", serviceTokenStatus: "service_token_status", sessionDuration: "session_duration", settingsByRuleType: "settings_by_rule_type", sharedEntries: "shared_entries", signRequest: "sign_request", skipAppLauncherLoginPage: "skip_app_launcher_login_page", skipInterstitial: "skip_interstitial", sourceAccount: "source_account", sourceName: "source_name", spEntityId: "sp_entity_id", sshKeySize: "ssh_key_size", sshKeyType: "ssh_key_type", ssoEndpoint: "sso_endpoint", ssoTargetUrl: "sso_target_url", stateIso: "state_iso", statusCode: "status_code", subjectAlternativeNames: "subject_alternative_names", subnetId: "subnet_id", subnetType: "subnet_type", supportDomains: "support_domains", supportGroups: "support_groups", supportUrl: "support_url", suppressFooter: "suppress_footer", switchLocked: "switch_locked", targetAttributes: "target_attributes", targetCriteria: "target_criteria", targetEnvironment: "target_environment", targetIds: "target_ids", targetPolicies: "target_policies", targetTests: "target_tests", targetUri: "target_uri", targetedTests: "targeted_tests", templateId: "template_id", tenantUrl: "tenant_url", testAllRoutes: "test-all-routes", testId: "test_id", testResultId: "test_result_id", textColor: "text_color", timeLimitMin: "time-limit-min", timeStart: "time_start", timeZone: "time_zone", tlsDecrypt: "tls_decrypt", tlsSockaddr: "tls_sockaddr", tokenId: "token_id", tokenUrl: "token_url", topicType: "topic_type", totalCount: "total_count", totalScore: "total_score", totalUsers: "total_users", touchPolicy: "touch_policy", transformJsonata: "transform_jsonata", trustStores: "trust_stores", tunType: "tun_type", tunnelId: "tunnel_id", tunnelName: "tunnel_name", tunnelProtocol: "tunnel_protocol", tunnelSecret: "tunnel_secret", tunnelType: "tunnel_type", uiReadOnlyToggleReason: "ui_read_only_toggle_reason", untrustedCert: "untrusted_cert", updateWindowDays: "update_window_days", updatedAt: "updated_at", updatedPrompts: "updated_prompts", updatedTools: "updated_tools", uploadStatus: "upload_status", uploadedOn: "uploaded_on", urlBrowserIsolationEnabled: "url_browser_isolation_enabled", useClientlessIsolationAppLauncherUrl: "use_clientless_isolation_app_launcher_url", useZtVirtualIp: "use_zt_virtual_ip", usedCustomRegexEntries: "used_custom_regex_entries", usedDatasetCells: "used_dataset_cells", usedDocumentFingerprints: "used_document_fingerprints", userDeprovision: "user_deprovision", userEmail: "user_email", userId: "user_id", userIdentity: "user_identity", userRiskScore: "user_risk_score", userSeatExpirationInactiveTime: "user_seat_expiration_inactive_time", userUid: "user_uid", userUuid: "user_uuid", usersApproved: "users_approved", usersBlocked: "users_blocked", usersErrored: "users_errored", validityPeriodDays: "validity_period_days", versionConfig: "version_config", viewId: "view_id", vipsPrevious: "vips_previous", virtualIpv4: "virtual_ipv4", virtualIpv6: "virtual_ipv6", virtualNetworkId: "virtual_network_id", virtualNetworkName: "virtual_network_name", virtualNetworks: "virtual_networks", vnetId: "vnet_id", warningStatus: "warning_status", warpAuthSessionDuration: "warp_auth_session_duration", warpSessionReauth: "warp_session_reauth", wellKnownUrl: "well_known_url", wireguardEndpoints: "wireguard_endpoints", wmId: "wm_id", wordList: "word_list", workerId: "worker_id", }; export class AccessApplicationNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "AccessApplicationNotFound", { code: S.Number, message: S.String, }, ), [{ status: 404, message: { includes: "unknown_application" } }], ) {} export class AccessBookmarkNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "AccessBookmarkNotFound", { code: S.Number, message: S.String, }, ), [{ code: 12045 }, { code: 12135 }, { code: 11021 }], ) {} export class AccessCertificateNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "AccessCertificateNotFound", { code: S.Number, message: S.String, }, ), [{ code: 12135 }], ) {} export class AccessCertificateQuotaExceeded extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "AccessCertificateQuotaExceeded", { code: S.Number, message: S.String, }, ), [{ code: 12130, message: { includes: "maximum number of certificates" } }], ) {} export class AccessCustomPageNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "AccessCustomPageNotFound", { code: S.Number, message: S.String, }, ), [{ code: 12135 }], ) {} export class AccessCustomPagesNotEntitled extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "AccessCustomPagesNotEntitled", { code: S.Number, message: S.String, }, ), [ { code: 12133, message: { includes: "does not have permission for custom pages" }, }, ], ) {} export class AccessDestinationConflict extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "AccessDestinationConflict", { code: S.Number, message: S.String, }, ), [{ message: { includes: "destination belongs to another application" } }], ) {} export class AccessGroupNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("AccessGroupNotFound", { code: S.Number, message: S.String, }), [{ code: 12152 }], ) {} export class AccessIdentityProviderNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "AccessIdentityProviderNotFound", { code: S.Number, message: S.String, }, ), [{ code: 12135 }], ) {} export class AccessReferenceNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "AccessReferenceNotFound", { code: S.Number, message: S.String, }, ), [{ status: 400, message: { includes: "not found" } }], ) {} export class AccessServiceTokenNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "AccessServiceTokenNotFound", { code: S.Number, message: S.String, }, ), [{ code: 12135 }], ) {} export class AccessTagNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("AccessTagNotFound", { code: S.Number, message: S.String, }), [{ code: 12135 }], ) {} export class CannotDeleteDefaultGatewayLocation extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "CannotDeleteDefaultGatewayLocation", { code: S.Number, message: S.String, }, ), [{ code: 1217 }], ) {} export class CannotDemoteDefaultGatewayLocation extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "CannotDemoteDefaultGatewayLocation", { code: S.Number, message: S.String, }, ), [{ code: 1216 }], ) {} export class DeviceNetworkNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "DeviceNetworkNotFound", { code: S.Number, message: S.String, }, ), [{ code: 2053 }], ) {} export class DevicePolicyNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "DevicePolicyNotFound", { code: S.Number, message: S.String, }, ), [{ code: 2052 }], ) {} export class DevicePostureIntegrationNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "DevicePostureIntegrationNotFound", { code: S.Number, message: S.String, }, ), [{ status: 404 }], ) {} export class DexTestNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("DexTestNotFound", { code: S.Number, message: S.String, }), [{ status: 404 }], ) {} export class DlpEntryNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("DlpEntryNotFound", { code: S.Number, message: S.String, }), [{ status: 404 }], ) {} export class DlpProfileNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("DlpProfileNotFound", { code: S.Number, message: S.String, }), [{ status: 404 }], ) {} export class DuplicateTunnelName extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("DuplicateTunnelName", { code: S.Number, message: S.String, }), [{ code: 1013 }], ) {} export class Forbidden extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("Forbidden", { code: S.Number, message: S.String, }), [{ status: 403 }], ) {} export class GatewayCertificateInUse extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "GatewayCertificateInUse", { code: S.Number, message: S.String, }, ), [{ code: 2118 }], ) {} export class GatewayCertificateNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "GatewayCertificateNotFound", { code: S.Number, message: S.String, }, ), [{ code: 2027 }], ) {} export class GatewayCertificateQuotaReached extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "GatewayCertificateQuotaReached", { code: S.Number, message: S.String, }, ), [ { status: 400, message: { includes: "Up to 3 certificates may be created in a 24 hour period", }, }, ], ) {} export class GatewayListNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("GatewayListNotFound", { code: S.Number, message: S.String, }), [{ code: 2218 }], ) {} export class GatewayLocationNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "GatewayLocationNotFound", { code: S.Number, message: S.String, }, ), [{ code: 1103 }], ) {} export class HostnameRouteAlreadyRouted extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "HostnameRouteAlreadyRouted", { code: S.Number, message: S.String, }, ), [ { status: 409, message: { includes: "already routed to another tunnel" }, }, ], ) {} export class HostnameRouteNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "HostnameRouteNotFound", { code: S.Number, message: S.String, }, ), [{ status: 404 }], ) {} export class InvalidPostureIntegrationConfig extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "InvalidPostureIntegrationConfig", { code: S.Number, message: S.String, }, ), [ { status: 400, message: { includes: "invalid posture integration request" }, }, ], ) {} export class IpProxyEndpointsRequireEnterprise extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "IpProxyEndpointsRequireEnterprise", { code: S.Number, message: S.String, }, ), [{ code: 2009 }], ) {} export class McpPortalHostnameInUse extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "McpPortalHostnameInUse", { code: S.Number, message: S.String, }, ), [ { status: 400, message: { includes: "already in use in a different MCP Portal" }, }, ], ) {} export class McpPortalNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("McpPortalNotFound", { code: S.Number, message: S.String, }), [{ status: 404 }], ) {} export class OrganizationAlreadyExists extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "OrganizationAlreadyExists", { code: S.Number, message: S.String, }, ), [{ code: 11002 }], ) {} export class OrganizationNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "OrganizationNotFound", { code: S.Number, message: S.String, }, ), [{ status: 404 }], ) {} export class PostureRuleNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("PostureRuleNotFound", { code: S.Number, message: S.String, }), [{ code: 6024 }], ) {} export class ProxyEndpointNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "ProxyEndpointNotFound", { code: S.Number, message: S.String, }, ), [{ code: 2002 }], ) {} export class RiskScoringIntegrationNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "RiskScoringIntegrationNotFound", { code: S.Number, message: S.String, }, ), [{ status: 404 }], ) {} export class TargetNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("TargetNotFound", { code: S.Number, message: S.String, }), [{ status: 404 }], ) {} export class TunnelConfigurationNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "TunnelConfigurationNotFound", { code: S.Number, message: S.String, }, ), [{ code: 1055 }], ) {} export class TunnelNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("TunnelNotFound", { code: S.Number, message: S.String, }), [{ code: 1002 }, { status: 404 }], ) {} export class TunnelTokenNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()("TunnelTokenNotFound", { code: S.Number, message: S.String, }), [{ code: 1054 }], ) {} export class VirtualNetworkConflict extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "VirtualNetworkConflict", { code: S.Number, message: S.String, }, ), [{ code: 1014 }], ) {} export class VirtualNetworkNotFound extends /*@__PURE__*/ T.applyErrorMatchers( /*@__PURE__*/ S.TaggedError()( "VirtualNetworkNotFound", { code: S.Number, message: S.String, }, ), [{ code: 1046 }], ) {} export interface ActivateGatewayCertificateRequest { accountId: string; /** Identify the certificate with a UUID. */ certificateId: string; } export const ActivateGatewayCertificateRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), certificateId: S.String.pipe(T.Label("certificate_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/gateway/certificates/{certificate_id}/activate", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ActivateGatewayCertificateRequest", }) as any as S.Schema; export type GatewayCertificatesActivateResponseBindingStatus = | "pending_deployment" | "available" | "pending_deletion" | "inactive"; export const GatewayCertificatesActivateResponseBindingStatus = /*@__PURE__*/ S.String; export type GatewayCertificatesActivateResponseType = | "custom" | "gateway_managed"; export const GatewayCertificatesActivateResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ActivateGatewayCertificateResponse { /** Identify the certificate with a UUID. */ id?: string | null; /** Indicate the read-only deployment status of the certificate on Cloudflare's edge. Gateway TLS interception can use certificates in the 'available' (previously called 'active') state. */ bindingStatus?: GatewayCertificatesActivateResponseBindingStatus | null; /** Provide the CA certificate (read-only). */ certificate?: string | null; createdAt?: string | null; expiresOn?: string | null; /** Provide the SHA256 fingerprint of the certificate (read-only). */ fingerprint?: string | null; /** Indicate whether Gateway TLS interception uses this certificate (read-only). You cannot set this value directly. To configure interception, use the Gateway configuration setting named `certificate` (read-only). */ inUse?: boolean | null; /** Indicate the organization that issued the certificate (read-only). */ issuerOrg?: string | null; /** Provide the entire issuer field of the certificate (read-only). */ issuerRaw?: string | null; /** Indicate the read-only certificate type, BYO-PKI (custom) or Gateway-managed. */ type?: GatewayCertificatesActivateResponseType | null; updatedAt?: string | null; uploadedOn?: string | null; } export const ActivateGatewayCertificateResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), bindingStatus: S.optional( S.NullOr(GatewayCertificatesActivateResponseBindingStatus).pipe( T.Body("binding_status"), ), ), certificate: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), expiresOn: S.optional(S.NullOr(S.String).pipe(T.Body("expires_on"))), fingerprint: S.optional(S.NullOr(S.String)), inUse: S.optional(S.NullOr(S.Boolean).pipe(T.Body("in_use"))), issuerOrg: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_org"))), issuerRaw: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_raw"))), type: S.optional(S.NullOr(GatewayCertificatesActivateResponseType)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), uploadedOn: S.optional(S.NullOr(S.String).pipe(T.Body("uploaded_on"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ActivateGatewayCertificateResponse", }) as any as S.Schema; export interface BulkDeleteAccessInfrastructureTargetsRequest { /** Account identifier */ accountId: string; } export const BulkDeleteAccessInfrastructureTargetsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/infrastructure/targets/batch", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "BulkDeleteAccessInfrastructureTargetsRequest", }) as any as S.Schema; export interface BulkDeleteAccessInfrastructureTargetsResponse {} export const BulkDeleteAccessInfrastructureTargetsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "BulkDeleteAccessInfrastructureTargetsResponse", }) as any as S.Schema; export type DevicesRegistrationsBulkDeleteRequestIdList = Array; export const DevicesRegistrationsBulkDeleteRequestIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface BulkDeleteDeviceRegistrationsRequest { accountId: string; /** A list of registration IDs to delete. */ id: DevicesRegistrationsBulkDeleteRequestIdList; } export const BulkDeleteDeviceRegistrationsRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: DevicesRegistrationsBulkDeleteRequestIdList.pipe(T.Query()), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/devices/registrations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "BulkDeleteDeviceRegistrationsRequest", }) as any as S.Schema; export type BulkDeleteDeviceRegistrationsResponse = unknown; export const BulkDeleteDeviceRegistrationsResponse = /*@__PURE__*/ S.suspend( () => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "BulkDeleteDeviceRegistrationsResponse", }) as any as S.Schema; export type AccessInfrastructureTargetsBulkDeleteV2RequestTargetIdsList = Array; export const AccessInfrastructureTargetsBulkDeleteV2RequestTargetIdsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface BulkDeleteV2AccessInfrastructureTargetsRequest { /** Account identifier */ accountId: string; /** List of target IDs to bulk delete */ targetIds: AccessInfrastructureTargetsBulkDeleteV2RequestTargetIdsList; } export const BulkDeleteV2AccessInfrastructureTargetsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), targetIds: AccessInfrastructureTargetsBulkDeleteV2RequestTargetIdsList.pipe( T.Body("target_ids"), ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/infrastructure/targets/batch_delete", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "BulkDeleteV2AccessInfrastructureTargetsRequest", }) as any as S.Schema; export interface BulkDeleteV2AccessInfrastructureTargetsResponse {} export const BulkDeleteV2AccessInfrastructureTargetsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "BulkDeleteV2AccessInfrastructureTargetsResponse", }) as any as S.Schema; export type DlpEmailRulesBulkEditRequestNewPrioritiesMap = { [key: string]: number | undefined; }; export const DlpEmailRulesBulkEditRequestNewPrioritiesMap = /*@__PURE__*/ S.Record( S.String, S.Number, ) as any as S.Schema; export interface BulkPatchDlpEmailRulesRequest { accountId: string; newPriorities: DlpEmailRulesBulkEditRequestNewPrioritiesMap; } export const BulkPatchDlpEmailRulesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), newPriorities: DlpEmailRulesBulkEditRequestNewPrioritiesMap.pipe( T.Body("new_priorities"), ), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/dlp/email/rules", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "BulkPatchDlpEmailRulesRequest", }) as any as S.Schema; export type DlpEmailRulesBulkEditResponseActionAction = "Block"; export const DlpEmailRulesBulkEditResponseActionAction = /*@__PURE__*/ S.String; export interface DlpEmailRulesBulkEditResponseAction { action: DlpEmailRulesBulkEditResponseActionAction; message?: string | null; } export const DlpEmailRulesBulkEditResponseAction = /*@__PURE__*/ S.suspend(() => S.Struct({ action: DlpEmailRulesBulkEditResponseActionAction, message: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEmailRulesBulkEditResponseAction", }) as any as S.Schema; export type DlpEmailRulesBulkEditResponseConditionsItemOperator = | "InList" | "NotInList" | "MatchRegex" | "NotMatchRegex"; export const DlpEmailRulesBulkEditResponseConditionsItemOperator = /*@__PURE__*/ S.String; export type DlpEmailRulesBulkEditResponseConditionsItemSelector = | "Recipients" | "Sender" | "DLPProfiles"; export const DlpEmailRulesBulkEditResponseConditionsItemSelector = /*@__PURE__*/ S.String; export type DlpEmailRulesBulkEditResponseConditionsItemValueCase0List = Array; export const DlpEmailRulesBulkEditResponseConditionsItemValueCase0List = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpEmailRulesBulkEditResponseConditionsItemValue = | string | DlpEmailRulesBulkEditResponseConditionsItemValueCase0List; export const DlpEmailRulesBulkEditResponseConditionsItemValue = /*@__PURE__*/ S.Unknown.pipe(T.UnionCases([[], []])); export interface DlpEmailRulesBulkEditResponseConditionsItem { operator: DlpEmailRulesBulkEditResponseConditionsItemOperator; selector: DlpEmailRulesBulkEditResponseConditionsItemSelector; value: DlpEmailRulesBulkEditResponseConditionsItemValue; } export const DlpEmailRulesBulkEditResponseConditionsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ operator: DlpEmailRulesBulkEditResponseConditionsItemOperator, selector: DlpEmailRulesBulkEditResponseConditionsItemSelector, value: DlpEmailRulesBulkEditResponseConditionsItemValue, }), ).annotate({ identifier: "DlpEmailRulesBulkEditResponseConditionsItem", }) as any as S.Schema; export type DlpEmailRulesBulkEditResponseConditionsList = Array; export const DlpEmailRulesBulkEditResponseConditionsList = /*@__PURE__*/ S.Array( DlpEmailRulesBulkEditResponseConditionsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface BulkPatchDlpEmailRulesResponse { action: DlpEmailRulesBulkEditResponseAction; /** Triggered if all conditions match. */ conditions: DlpEmailRulesBulkEditResponseConditionsList; createdAt: string; enabled: boolean; name: string; priority: number; ruleId: string; updatedAt: string; description?: string | null; } export const BulkPatchDlpEmailRulesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ action: DlpEmailRulesBulkEditResponseAction, conditions: DlpEmailRulesBulkEditResponseConditionsList, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, priority: S.Number, ruleId: S.String.pipe(T.Body("rule_id")), updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "BulkPatchDlpEmailRulesResponse", }) as any as S.Schema; export interface AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4 { /** IP address of the target */ ipAddr?: string; /** (optional) Private virtual network identifier for the target. If omitted, the default virtual network ID will be used. */ virtualNetworkId?: string; } export const AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4 = /*@__PURE__*/ S.suspend(() => S.Struct({ ipAddr: S.optional(S.String.pipe(T.Body("ip_addr"))), virtualNetworkId: S.optional(S.String.pipe(T.Body("virtual_network_id"))), }), ).annotate({ identifier: "AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4", }) as any as S.Schema; export type AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv6 = AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4; export const AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv6 = AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4; export interface AccessInfrastructureTargetsBulkUpdateRequestBodyItemIp { /** The target's IPv4 address */ ipv4?: AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4; /** The target's IPv6 address */ ipv6?: AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4; } export const AccessInfrastructureTargetsBulkUpdateRequestBodyItemIp = /*@__PURE__*/ S.suspend(() => S.Struct({ ipv4: S.optional( AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4, ), ipv6: S.optional( AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4, ), }), ).annotate({ identifier: "AccessInfrastructureTargetsBulkUpdateRequestBodyItemIp", }) as any as S.Schema; export interface AccessInfrastructureTargetsBulkUpdateRequestBodyItem { /** A non-unique field that refers to a target. Case insensitive, maximum */ hostname: string; /** The IPv4/IPv6 address that identifies where to reach a target */ ip: AccessInfrastructureTargetsBulkUpdateRequestBodyItemIp; } export const AccessInfrastructureTargetsBulkUpdateRequestBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({ hostname: S.String, ip: AccessInfrastructureTargetsBulkUpdateRequestBodyItemIp, }), ).annotate({ identifier: "AccessInfrastructureTargetsBulkUpdateRequestBodyItem", }) as any as S.Schema; export type AccessInfrastructureTargetsBulkUpdateRequestBodyList = Array; export const AccessInfrastructureTargetsBulkUpdateRequestBodyList = /*@__PURE__*/ S.Array( AccessInfrastructureTargetsBulkUpdateRequestBodyItem, ) as any as S.Schema; export interface BulkPutAccessInfrastructureTargetsRequest { /** Account identifier */ accountId: string; body: AccessInfrastructureTargetsBulkUpdateRequestBodyList; } export const BulkPutAccessInfrastructureTargetsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), body: AccessInfrastructureTargetsBulkUpdateRequestBodyList.pipe( T.HttpBody(), ), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/infrastructure/targets/batch", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "BulkPutAccessInfrastructureTargetsRequest", }) as any as S.Schema; export interface AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4 { /** IP address of the target */ ipAddr?: string | null; /** (optional) Private virtual network identifier for the target. If omitted, the default virtual network ID will be used. */ virtualNetworkId?: string | null; } export const AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4 = /*@__PURE__*/ S.suspend(() => S.Struct({ ipAddr: S.optional(S.NullOr(S.String).pipe(T.Body("ip_addr"))), virtualNetworkId: S.optional( S.NullOr(S.String).pipe(T.Body("virtual_network_id")), ), }), ).annotate({ identifier: "AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4", }) as any as S.Schema; export type AccessInfrastructureTargetsBulkUpdateResultItemIpIpv6 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export const AccessInfrastructureTargetsBulkUpdateResultItemIpIpv6 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export interface AccessInfrastructureTargetsBulkUpdateResultItemIp { /** The target's IPv4 address */ ipv4?: AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4 | null; /** The target's IPv6 address */ ipv6?: AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4 | null; } export const AccessInfrastructureTargetsBulkUpdateResultItemIp = /*@__PURE__*/ S.suspend(() => S.Struct({ ipv4: S.optional( S.NullOr(AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4), ), ipv6: S.optional( S.NullOr(AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4), ), }), ).annotate({ identifier: "AccessInfrastructureTargetsBulkUpdateResultItemIp", }) as any as S.Schema; export interface AccessInfrastructureTargetsBulkUpdateResultItem { /** Target identifier */ id: string; /** Date and time at which the target was created */ createdAt: string; /** A non-unique field that refers to a target */ hostname: string; /** The IPv4/IPv6 address that identifies where to reach a target */ ip: AccessInfrastructureTargetsBulkUpdateResultItemIp; /** Date and time at which the target was modified */ modifiedAt: string; } export const AccessInfrastructureTargetsBulkUpdateResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), hostname: S.String, ip: AccessInfrastructureTargetsBulkUpdateResultItemIp, modifiedAt: S.String.pipe(T.Body("modified_at")), }), ).annotate({ identifier: "AccessInfrastructureTargetsBulkUpdateResultItem", }) as any as S.Schema; export type AccessInfrastructureTargetsBulkUpdateResultList = Array; export const AccessInfrastructureTargetsBulkUpdateResultList = /*@__PURE__*/ S.Array( AccessInfrastructureTargetsBulkUpdateResultItem, ) as any as S.Schema; export interface BulkPutAccessInfrastructureTargetsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessInfrastructureTargetsBulkUpdateResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const BulkPutAccessInfrastructureTargetsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessInfrastructureTargetsBulkUpdateResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "BulkPutAccessInfrastructureTargetsResponse", }) as any as S.Schema; export interface AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem { name: string; alias?: string; description?: string; enabled?: boolean; } export const AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.String, alias: S.optional(S.String), description: S.optional(S.String), enabled: S.optional(S.Boolean), }), ).annotate({ identifier: "AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem", }) as any as S.Schema; export type AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsList = Array; export const AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem, ) as any as S.Schema; export type AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedToolsItem = AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem; export const AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedToolsItem = AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem; export type AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedToolsList = Array; export const AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem, ) as any as S.Schema; export interface AccessAiControlsMcpPortalsCreateRequestServersItem { /** server id */ serverId: string; defaultDisabled?: boolean; onBehalf?: boolean; updatedPrompts?: AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsList; updatedTools?: AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedToolsList; } export const AccessAiControlsMcpPortalsCreateRequestServersItem = /*@__PURE__*/ S.suspend(() => S.Struct({ serverId: S.String.pipe(T.Body("server_id")), defaultDisabled: S.optional(S.Boolean.pipe(T.Body("default_disabled"))), onBehalf: S.optional(S.Boolean.pipe(T.Body("on_behalf"))), updatedPrompts: S.optional( AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsList.pipe( T.Body("updated_prompts"), ), ), updatedTools: S.optional( AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedToolsList.pipe( T.Body("updated_tools"), ), ), }), ).annotate({ identifier: "AccessAiControlsMcpPortalsCreateRequestServersItem", }) as any as S.Schema; export type AccessAiControlsMcpPortalsCreateRequestServersList = Array; export const AccessAiControlsMcpPortalsCreateRequestServersList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateRequestServersItem, ) as any as S.Schema; export interface CreateAccessAiControlMcpPortalRequest { accountId: string; /** portal id */ id: string; hostname: string; name: string; /** Allow remote code execution in Dynamic Workers (beta) */ allowCodeMode?: boolean; description?: string; /** Route outbound MCP traffic through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean; servers?: AccessAiControlsMcpPortalsCreateRequestServersList; } export const CreateAccessAiControlMcpPortalRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String, hostname: S.String, name: S.String, allowCodeMode: S.optional(S.Boolean.pipe(T.Body("allow_code_mode"))), description: S.optional(S.String), secureWebGateway: S.optional( S.Boolean.pipe(T.Body("secure_web_gateway")), ), servers: S.optional(AccessAiControlsMcpPortalsCreateRequestServersList), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/ai-controls/mcp/portals", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessAiControlMcpPortalRequest", }) as any as S.Schema; export type AccessAiControlsMcpPortalsCreateResponseServersItemAuthType = | "oauth" | "bearer" | "unauthenticated"; export const AccessAiControlsMcpPortalsCreateResponseServersItemAuthType = /*@__PURE__*/ S.String; export type AccessAiControlsMcpPortalsCreateResponseServersItemPromptsItemMap = { [key: string]: unknown | undefined }; export const AccessAiControlsMcpPortalsCreateResponseServersItemPromptsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpPortalsCreateResponseServersItemPromptsList = Array; export const AccessAiControlsMcpPortalsCreateResponseServersItemPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateResponseServersItemPromptsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpPortalsCreateResponseServersItemToolsItemMap = { [key: string]: unknown | undefined; }; export const AccessAiControlsMcpPortalsCreateResponseServersItemToolsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpPortalsCreateResponseServersItemToolsList = Array; export const AccessAiControlsMcpPortalsCreateResponseServersItemToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateResponseServersItemToolsItemMap, ) as any as S.Schema; export interface AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails { /** Underlying error message */ cause?: string | null; /** True = MCP server returned an error. False = couldn't reach the server */ isUpstream?: boolean | null; /** MCP protocol error code */ mcpCode?: number | null; /** Whether the error is transient and worth retrying */ retryable?: boolean | null; /** HTTP status code from the server */ statusCode?: number | null; } export const AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails = /*@__PURE__*/ S.suspend(() => S.Struct({ cause: S.optional(S.NullOr(S.String)), isUpstream: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_upstream"))), mcpCode: S.optional(S.NullOr(S.Number).pipe(T.Body("mcp_code"))), retryable: S.optional(S.NullOr(S.Boolean)), statusCode: S.optional(S.NullOr(S.Number).pipe(T.Body("status_code"))), }), ).annotate({ identifier: "AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails", }) as any as S.Schema; export interface AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem { name: string; enabled?: boolean | null; portalAlias?: string | null; portalDescription?: string | null; serverAlias?: string | null; serverDescription?: string | null; } export const AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.String, enabled: S.optional(S.NullOr(S.Boolean)), portalAlias: S.optional(S.NullOr(S.String).pipe(T.Body("portal_alias"))), portalDescription: S.optional( S.NullOr(S.String).pipe(T.Body("portal_description")), ), serverAlias: S.optional(S.NullOr(S.String).pipe(T.Body("server_alias"))), serverDescription: S.optional( S.NullOr(S.String).pipe(T.Body("server_description")), ), }), ).annotate({ identifier: "AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem", }) as any as S.Schema; export type AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsList = Array; export const AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem, ) as any as S.Schema; export type AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedToolsItem = AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem; export const AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedToolsItem = AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem; export type AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedToolsList = Array; export const AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem, ) as any as S.Schema; export interface AccessAiControlsMcpPortalsCreateResponseServersItem { /** server id */ id: string; authType: AccessAiControlsMcpPortalsCreateResponseServersItemAuthType; hostname: string; name: string; prompts: AccessAiControlsMcpPortalsCreateResponseServersItemPromptsList; /** server id */ serverId: string; tools: AccessAiControlsMcpPortalsCreateResponseServersItemToolsList; createdAt?: string | null; createdBy?: string | null; defaultDisabled?: boolean | null; description?: string | null; error?: string | null; errorDetails?: AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails | null; /** When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true. Effective behavior is gated by the gateway worker's per-env rollout mode KV key. */ isSharedOauthCallbackEnabled?: boolean | null; lastSuccessfulSync?: string | null; lastSynced?: string | null; modifiedAt?: string | null; modifiedBy?: string | null; onBehalf?: boolean | null; /** Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean | null; status?: string | null; updatedPrompts?: AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsList | null; updatedTools?: AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedToolsList | null; } export const AccessAiControlsMcpPortalsCreateResponseServersItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, authType: AccessAiControlsMcpPortalsCreateResponseServersItemAuthType.pipe( T.Body("auth_type"), ), hostname: S.String, name: S.String, prompts: AccessAiControlsMcpPortalsCreateResponseServersItemPromptsList, serverId: S.String.pipe(T.Body("server_id")), tools: AccessAiControlsMcpPortalsCreateResponseServersItemToolsList, createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), createdBy: S.optional(S.NullOr(S.String).pipe(T.Body("created_by"))), defaultDisabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("default_disabled")), ), description: S.optional(S.NullOr(S.String)), error: S.optional(S.NullOr(S.String)), errorDetails: S.optional( S.NullOr( AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails, ).pipe(T.Body("error_details")), ), isSharedOauthCallbackEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_shared_oauth_callback_enabled")), ), lastSuccessfulSync: S.optional( S.NullOr(S.String).pipe(T.Body("last_successful_sync")), ), lastSynced: S.optional(S.NullOr(S.String).pipe(T.Body("last_synced"))), modifiedAt: S.optional(S.NullOr(S.String).pipe(T.Body("modified_at"))), modifiedBy: S.optional(S.NullOr(S.String).pipe(T.Body("modified_by"))), onBehalf: S.optional(S.NullOr(S.Boolean).pipe(T.Body("on_behalf"))), secureWebGateway: S.optional( S.NullOr(S.Boolean).pipe(T.Body("secure_web_gateway")), ), status: S.optional(S.NullOr(S.String)), updatedPrompts: S.optional( S.NullOr( AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsList, ).pipe(T.Body("updated_prompts")), ), updatedTools: S.optional( S.NullOr( AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedToolsList, ).pipe(T.Body("updated_tools")), ), }), ).annotate({ identifier: "AccessAiControlsMcpPortalsCreateResponseServersItem", }) as any as S.Schema; export type AccessAiControlsMcpPortalsCreateResponseServersList = Array; export const AccessAiControlsMcpPortalsCreateResponseServersList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateResponseServersItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessAiControlMcpPortalResponse { /** portal id */ id: string; hostname: string; name: string; servers: AccessAiControlsMcpPortalsCreateResponseServersList; /** Allow remote code execution in Dynamic Workers (beta) */ allowCodeMode?: boolean | null; createdAt?: string | null; createdBy?: string | null; description?: string | null; modifiedAt?: string | null; modifiedBy?: string | null; /** Route outbound MCP traffic through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean | null; } export const CreateAccessAiControlMcpPortalResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, hostname: S.String, name: S.String, servers: AccessAiControlsMcpPortalsCreateResponseServersList, allowCodeMode: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_code_mode")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), createdBy: S.optional(S.NullOr(S.String).pipe(T.Body("created_by"))), description: S.optional(S.NullOr(S.String)), modifiedAt: S.optional(S.NullOr(S.String).pipe(T.Body("modified_at"))), modifiedBy: S.optional(S.NullOr(S.String).pipe(T.Body("modified_by"))), secureWebGateway: S.optional( S.NullOr(S.Boolean).pipe(T.Body("secure_web_gateway")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessAiControlMcpPortalResponse", }) as any as S.Schema; export type AccessAiControlsMcpServersCreateRequestAuthType = | "oauth" | "bearer" | "unauthenticated"; export const AccessAiControlsMcpServersCreateRequestAuthType = /*@__PURE__*/ S.String; export type AccessAiControlsMcpServersCreateRequestUpdatedPromptsItem = AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem; export const AccessAiControlsMcpServersCreateRequestUpdatedPromptsItem = AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem; export type AccessAiControlsMcpServersCreateRequestUpdatedPromptsList = Array; export const AccessAiControlsMcpServersCreateRequestUpdatedPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem, ) as any as S.Schema; export type AccessAiControlsMcpServersCreateRequestUpdatedToolsItem = AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem; export const AccessAiControlsMcpServersCreateRequestUpdatedToolsItem = AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem; export type AccessAiControlsMcpServersCreateRequestUpdatedToolsList = Array; export const AccessAiControlsMcpServersCreateRequestUpdatedToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem, ) as any as S.Schema; export interface CreateAccessAiControlMcpServerRequest { accountId: string; /** server id */ id: string; authType: AccessAiControlsMcpServersCreateRequestAuthType | (string & {}); hostname: string; name: string; authCredentials?: string; description?: string; /** When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true. Effective behavior is gated by the gateway worker's per-env rollout mode KV key. */ isSharedOauthCallbackEnabled?: boolean; /** Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean; updatedPrompts?: AccessAiControlsMcpServersCreateRequestUpdatedPromptsList; updatedTools?: AccessAiControlsMcpServersCreateRequestUpdatedToolsList; } export const CreateAccessAiControlMcpServerRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String, authType: AccessAiControlsMcpServersCreateRequestAuthType.pipe( T.Body("auth_type"), ), hostname: S.String, name: S.String, authCredentials: S.optional(S.String.pipe(T.Body("auth_credentials"))), description: S.optional(S.String), isSharedOauthCallbackEnabled: S.optional( S.Boolean.pipe(T.Body("is_shared_oauth_callback_enabled")), ), secureWebGateway: S.optional( S.Boolean.pipe(T.Body("secure_web_gateway")), ), updatedPrompts: S.optional( AccessAiControlsMcpServersCreateRequestUpdatedPromptsList.pipe( T.Body("updated_prompts"), ), ), updatedTools: S.optional( AccessAiControlsMcpServersCreateRequestUpdatedToolsList.pipe( T.Body("updated_tools"), ), ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/ai-controls/mcp/servers", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessAiControlMcpServerRequest", }) as any as S.Schema; export type AccessAiControlsMcpServersCreateResponseAuthType = | "oauth" | "bearer" | "unauthenticated"; export const AccessAiControlsMcpServersCreateResponseAuthType = /*@__PURE__*/ S.String; export type AccessAiControlsMcpServersCreateResponsePromptsItemMap = { [key: string]: unknown | undefined; }; export const AccessAiControlsMcpServersCreateResponsePromptsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpServersCreateResponsePromptsList = Array; export const AccessAiControlsMcpServersCreateResponsePromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersCreateResponsePromptsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpServersCreateResponseToolsItemMap = { [key: string]: unknown | undefined; }; export const AccessAiControlsMcpServersCreateResponseToolsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpServersCreateResponseToolsList = Array; export const AccessAiControlsMcpServersCreateResponseToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersCreateResponseToolsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpServersCreateResponseErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export const AccessAiControlsMcpServersCreateResponseErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export interface AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem { name: string; alias?: string | null; description?: string | null; enabled?: boolean | null; } export const AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.String, alias: S.optional(S.NullOr(S.String)), description: S.optional(S.NullOr(S.String)), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem", }) as any as S.Schema; export type AccessAiControlsMcpServersCreateResponseUpdatedPromptsList = Array; export const AccessAiControlsMcpServersCreateResponseUpdatedPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem, ) as any as S.Schema; export type AccessAiControlsMcpServersCreateResponseUpdatedToolsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export const AccessAiControlsMcpServersCreateResponseUpdatedToolsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export type AccessAiControlsMcpServersCreateResponseUpdatedToolsList = Array; export const AccessAiControlsMcpServersCreateResponseUpdatedToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessAiControlMcpServerResponse { /** server id */ id: string; authType: AccessAiControlsMcpServersCreateResponseAuthType; hostname: string; name: string; prompts: AccessAiControlsMcpServersCreateResponsePromptsList; tools: AccessAiControlsMcpServersCreateResponseToolsList; createdAt?: string | null; createdBy?: string | null; description?: string | null; error?: string | null; errorDetails?: AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails | null; /** When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true. Effective behavior is gated by the gateway worker's per-env rollout mode KV key. */ isSharedOauthCallbackEnabled?: boolean | null; lastSuccessfulSync?: string | null; lastSynced?: string | null; modifiedAt?: string | null; modifiedBy?: string | null; /** Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean | null; status?: string | null; updatedPrompts?: AccessAiControlsMcpServersCreateResponseUpdatedPromptsList | null; updatedTools?: AccessAiControlsMcpServersCreateResponseUpdatedToolsList | null; } export const CreateAccessAiControlMcpServerResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, authType: AccessAiControlsMcpServersCreateResponseAuthType.pipe( T.Body("auth_type"), ), hostname: S.String, name: S.String, prompts: AccessAiControlsMcpServersCreateResponsePromptsList, tools: AccessAiControlsMcpServersCreateResponseToolsList, createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), createdBy: S.optional(S.NullOr(S.String).pipe(T.Body("created_by"))), description: S.optional(S.NullOr(S.String)), error: S.optional(S.NullOr(S.String)), errorDetails: S.optional( S.NullOr( AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails, ).pipe(T.Body("error_details")), ), isSharedOauthCallbackEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_shared_oauth_callback_enabled")), ), lastSuccessfulSync: S.optional( S.NullOr(S.String).pipe(T.Body("last_successful_sync")), ), lastSynced: S.optional(S.NullOr(S.String).pipe(T.Body("last_synced"))), modifiedAt: S.optional(S.NullOr(S.String).pipe(T.Body("modified_at"))), modifiedBy: S.optional(S.NullOr(S.String).pipe(T.Body("modified_by"))), secureWebGateway: S.optional( S.NullOr(S.Boolean).pipe(T.Body("secure_web_gateway")), ), status: S.optional(S.NullOr(S.String)), updatedPrompts: S.optional( S.NullOr( AccessAiControlsMcpServersCreateResponseUpdatedPromptsList, ).pipe(T.Body("updated_prompts")), ), updatedTools: S.optional( S.NullOr(AccessAiControlsMcpServersCreateResponseUpdatedToolsList).pipe( T.Body("updated_tools"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessAiControlMcpServerResponse", }) as any as S.Schema; export interface CreateAccessApplicationCaForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ appId: string; } export const CreateAccessApplicationCaForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), appId: S.String.pipe(T.Label("app_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/apps/{app_id}/ca", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessApplicationCaForAccountRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessApplicationCaResponse { /** The ID of the CA. */ id?: string | null; /** The Application Audience (AUD) tag. Identifies the application associated with the CA. */ aud?: string | null; /** The public key to add to your SSH server configuration. */ publicKey?: string | null; } export const CreateAccessApplicationCaResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), aud: S.optional(S.NullOr(S.String)), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessApplicationCaResponse", }) as any as S.Schema; export interface CreateAccessApplicationCaForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ appId: string; } export const CreateAccessApplicationCaForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), appId: S.String.pipe(T.Label("app_id")), }) .pipe( T.Http({ method: "POST", uri: "/zones/{zone_id}/access/apps/{app_id}/ca", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessApplicationCaForZoneRequest", }) as any as S.Schema; export type AccessApplicationsCreateRequestTypeSelfHostedApplication = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsCreateRequestTypeSelfHostedApplication = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestTypeBrowserSSHApplication = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsCreateRequestTypeBrowserSSHApplication = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestType = | AccessApplicationsCreateRequestTypeSelfHostedApplication | (string & {}) | AccessApplicationsCreateRequestTypeBrowserSSHApplication | (string & {}); export const AccessApplicationsCreateRequestType = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([[], []]), ); export type AccessApplicationsCreateRequestAllowedIdpsList = Array; export const AccessApplicationsCreateRequestAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedHeadersList = Array; export const AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedHeadersList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedMethodsItem = | "GET" | "POST" | "HEAD" | "PUT" | "DELETE" | "CONNECT" | "OPTIONS" | "TRACE" | "PATCH"; export const AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedMethodsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedMethodsList = Array< | AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedMethodsItem | (string & {}) >; export const AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedMethodsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedMethodsItem, ) as any as S.Schema; export type AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedOriginsList = Array; export const AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedOriginsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export interface AccessApplicationsCreateRequestCorsHeadersSelfHostedApplication { /** Allows all HTTP request headers. */ allowAllHeaders?: boolean; /** Allows all HTTP request methods. */ allowAllMethods?: boolean; /** Allows all origins. */ allowAllOrigins?: boolean; /** When set to `true`, includes credentials (cookies, authorization headers, or TLS client certificates) with requests. */ allowCredentials?: boolean; /** Allowed HTTP request headers. */ allowedHeaders?: AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedHeadersList; /** Allowed HTTP request methods. */ allowedMethods?: AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedMethodsList; /** Allowed origins. */ allowedOrigins?: AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedOriginsList; /** The maximum number of seconds the results of a preflight request can be cached. */ maxAge?: number; } export const AccessApplicationsCreateRequestCorsHeadersSelfHostedApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAllHeaders: S.optional(S.Boolean.pipe(T.Body("allow_all_headers"))), allowAllMethods: S.optional(S.Boolean.pipe(T.Body("allow_all_methods"))), allowAllOrigins: S.optional(S.Boolean.pipe(T.Body("allow_all_origins"))), allowCredentials: S.optional(S.Boolean.pipe(T.Body("allow_credentials"))), allowedHeaders: S.optional( AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedHeadersList.pipe( T.Body("allowed_headers"), ), ), allowedMethods: S.optional( AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedMethodsList.pipe( T.Body("allowed_methods"), ), ), allowedOrigins: S.optional( AccessApplicationsCreateRequestCorsHeadersSelfHostedApplicationAllowedOriginsList.pipe( T.Body("allowed_origins"), ), ), maxAge: S.optional(S.Number.pipe(T.Body("max_age"))), }), ).annotate({ identifier: "AccessApplicationsCreateRequestCorsHeadersSelfHostedApplication", }) as any as S.Schema; export type AccessApplicationsCreateRequestCustomPagesList = Array; export const AccessApplicationsCreateRequestCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateRequestDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsCreateRequestDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestDestinationsItemPublicDestination { type?: | AccessApplicationsCreateRequestDestinationsItemPublicDestinationType | (string & {}); /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string; } export const AccessApplicationsCreateRequestDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( AccessApplicationsCreateRequestDestinationsItemPublicDestinationType, ), uri: S.optional(S.String), }), ).annotate({ identifier: "AccessApplicationsCreateRequestDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsCreateRequestDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsCreateRequestDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsCreateRequestDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: | AccessApplicationsCreateRequestDestinationsItemPrivateDestinationL4Protocol | (string & {}); /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string; type?: | AccessApplicationsCreateRequestDestinationsItemPrivateDestinationType | (string & {}); /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string; } export const AccessApplicationsCreateRequestDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.String), hostname: S.optional(S.String), l4Protocol: S.optional( AccessApplicationsCreateRequestDestinationsItemPrivateDestinationL4Protocol.pipe( T.Body("l4_protocol"), ), ), portRange: S.optional(S.String.pipe(T.Body("port_range"))), type: S.optional( AccessApplicationsCreateRequestDestinationsItemPrivateDestinationType, ), vnetId: S.optional(S.String.pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsCreateRequestDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsCreateRequestDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsCreateRequestDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string; type?: | AccessApplicationsCreateRequestDestinationsItemViaMcpServerPortalDestinationType | (string & {}); } export const AccessApplicationsCreateRequestDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.String.pipe(T.Body("mcp_server_id"))), type: S.optional( AccessApplicationsCreateRequestDestinationsItemViaMcpServerPortalDestinationType, ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsCreateRequestDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsCreateRequestDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestDestinationsItemWorkerDestination { type: AccessApplicationsCreateRequestDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsCreateRequestDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateRequestDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsCreateRequestDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsCreateRequestDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsCreateRequestDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestDestinationsItemPreviewWorkerDestination { type: AccessApplicationsCreateRequestDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsCreateRequestDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateRequestDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsCreateRequestDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsCreateRequestDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsCreateRequestDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestDestinationsItemAllWorkersDestination { type: AccessApplicationsCreateRequestDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsCreateRequestDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateRequestDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsCreateRequestDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsCreateRequestDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsCreateRequestDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsCreateRequestDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsCreateRequestDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateRequestDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsCreateRequestDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsCreateRequestDestinationsItem = | AccessApplicationsCreateRequestDestinationsItemPublicDestination | AccessApplicationsCreateRequestDestinationsItemPrivateDestination | AccessApplicationsCreateRequestDestinationsItemViaMcpServerPortalDestination | AccessApplicationsCreateRequestDestinationsItemWorkerDestination | AccessApplicationsCreateRequestDestinationsItemPreviewWorkerDestination | AccessApplicationsCreateRequestDestinationsItemAllWorkersDestination | AccessApplicationsCreateRequestDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsCreateRequestDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsCreateRequestDestinationsList = Array; export const AccessApplicationsCreateRequestDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestDestinationsItem, ) as any as S.Schema; export type AccessApplicationsCreateRequestMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateRequestMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestMfaConfigAllowedAuthenticatorsList = Array< | AccessApplicationsCreateRequestMfaConfigAllowedAuthenticatorsItem | (string & {}) >; export const AccessApplicationsCreateRequestMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateRequestMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateRequestMfaConfigAllowedAuthenticatorsList; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string; } export const AccessApplicationsCreateRequestMfaConfig = /*@__PURE__*/ S.suspend( () => S.Struct({ allowedAuthenticators: S.optional( AccessApplicationsCreateRequestMfaConfigAllowedAuthenticatorsList.pipe( T.Body("allowed_authenticators"), ), ), mfaDisabled: S.optional(S.Boolean.pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "AccessApplicationsCreateRequestMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateRequestOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsCreateRequestOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateRequestOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsCreateRequestOauthConfigurationDynamicClientRegistrationAllowedUrisList; /** Whether dynamic client registration is enabled. */ enabled?: boolean; } export const AccessApplicationsCreateRequestOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.Boolean.pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.Boolean.pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( AccessApplicationsCreateRequestOauthConfigurationDynamicClientRegistrationAllowedUrisList.pipe( T.Body("allowed_uris"), ), ), enabled: S.optional(S.Boolean), }), ).annotate({ identifier: "AccessApplicationsCreateRequestOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export interface AccessApplicationsCreateRequestOauthConfigurationGrant { /** The lifetime of the access token. Must be in the format `300ms` or `2h45m`. Valid time units are ns, us (or µs), ms, s, m, h. */ accessTokenLifetime?: string; /** The duration of the OAuth session. Must be in the format `300ms` or `2h45m`. Valid time units are ns, us (or µs), ms, s, m, h. */ sessionDuration?: string; } export const AccessApplicationsCreateRequestOauthConfigurationGrant = /*@__PURE__*/ S.suspend(() => S.Struct({ accessTokenLifetime: S.optional( S.String.pipe(T.Body("access_token_lifetime")), ), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "AccessApplicationsCreateRequestOauthConfigurationGrant", }) as any as S.Schema; export interface AccessApplicationsCreateRequestOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsCreateRequestOauthConfigurationDynamicClientRegistration; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateRequestOauthConfigurationGrant; } export const AccessApplicationsCreateRequestOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( AccessApplicationsCreateRequestOauthConfigurationDynamicClientRegistration.pipe( T.Body("dynamic_client_registration"), ), ), enabled: S.optional(S.Boolean), grant: S.optional(AccessApplicationsCreateRequestOauthConfigurationGrant), }), ).annotate({ identifier: "AccessApplicationsCreateRequestOauthConfiguration", }) as any as S.Schema; export interface AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemAccessAppPolicyLink { /** The UUID of the policy */ id?: string; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number; } export const AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemAccessAppPolicyLink = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.String), precedence: S.optional(S.Number), }), ).annotate({ identifier: "AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemAccessAppPolicyLink", }) as any as S.Schema; export type AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItemEmailAddressesList; /** The UUID of an re-usable email list. */ emailListUuid?: string; } export const AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItemEmailAddressesList.pipe( T.Body("email_addresses"), ), ), emailListUuid: S.optional(S.String.pipe(T.Body("email_list_uuid"))), }), ).annotate({ identifier: "AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsList = Array; export const AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array< | AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem | (string & {}) >; export const AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array< | AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem | (string & {}) >; export const AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList; } export const AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList.pipe( T.Body("allowed_clipboard_local_to_remote_formats"), ), ), allowedClipboardRemoteToLocalFormats: S.optional( AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList.pipe( T.Body("allowed_clipboard_remote_to_local_formats"), ), ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdp; } export const AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdp, ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRules", }) as any as S.Schema; export type AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsList = Array< | AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsItem | (string & {}) >; export const AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2MfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsList; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string; } export const AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2MfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsList.pipe( T.Body("allowed_authenticators"), ), ), mfaDisabled: S.optional(S.Boolean.pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2MfaConfig", }) as any as S.Schema; export interface AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2 { /** The UUID of the policy */ id?: string; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsList; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRules; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2MfaConfig; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string; } export const AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.String), approvalGroups: S.optional( AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsList.pipe( T.Body("approval_groups"), ), ), approvalRequired: S.optional(S.Boolean.pipe(T.Body("approval_required"))), connectionRules: S.optional( AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRules.pipe( T.Body("connection_rules"), ), ), isolationRequired: S.optional( S.Boolean.pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2MfaConfig.pipe( T.Body("mfa_config"), ), ), precedence: S.optional(S.Number), purposeJustificationPrompt: S.optional( S.String.pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.Boolean.pipe(T.Body("purpose_justification_required")), ), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2", }) as any as S.Schema; export type AccessPoliciesCreateRequestDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessPoliciesCreateRequestDecision = /*@__PURE__*/ S.String; export interface AccessPoliciesCreateRequestIncludeItemGroupRuleGroup { /** The ID of a previously created Access group. */ id: string; } export const AccessPoliciesCreateRequestIncludeItemGroupRuleGroup = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemGroupRuleGroup", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemGroupRule { group: AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; } export const AccessPoliciesCreateRequestIncludeItemGroupRule = /*@__PURE__*/ S.suspend(() => S.Struct({ group: AccessPoliciesCreateRequestIncludeItemGroupRuleGroup, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemGroupRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule { /** An empty object which matches on all service tokens. */ anyValidServiceToken: unknown; } export const AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule = /*@__PURE__*/ S.suspend(() => S.Struct({ anyValidServiceToken: S.Unknown.pipe(T.Body("any_valid_service_token")), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext { /** The ID of an Authentication context. */ id: string; /** The ACID of an Authentication context. */ acId: string; /** The ID of your Azure identity provider. */ identityProviderId: string; } export const AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, acId: S.String.pipe(T.Body("ac_id")), identityProviderId: S.String.pipe(T.Body("identity_provider_id")), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule { authContext: AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; } export const AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule = /*@__PURE__*/ S.suspend(() => S.Struct({ authContext: AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext.pipe( T.Body("auth_context"), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod { /** The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2. */ authMethod: string; } export const AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod = /*@__PURE__*/ S.suspend(() => S.Struct({ authMethod: S.String.pipe(T.Body("auth_method")), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule { authMethod: AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; } export const AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule = /*@__PURE__*/ S.suspend(() => S.Struct({ authMethod: AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod.pipe( T.Body("auth_method"), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD { /** The ID of an Azure group. */ id: string; /** The ID of your Azure identity provider. */ identityProviderId: string; } export const AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, identityProviderId: S.String.pipe(T.Body("identity_provider_id")), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAzureGroupRule { azureAD: AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; } export const AccessPoliciesCreateRequestIncludeItemAzureGroupRule = /*@__PURE__*/ S.suspend(() => S.Struct({ azureAD: AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAzureGroupRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemCertificateRule { certificate: unknown; } export const AccessPoliciesCreateRequestIncludeItemCertificateRule = /*@__PURE__*/ S.suspend(() => S.Struct({ certificate: S.Unknown, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemCertificateRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName { /** The common name to match. */ commonName: string; } export const AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName = /*@__PURE__*/ S.suspend(() => S.Struct({ commonName: S.String.pipe(T.Body("common_name")), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule { commonName: AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; } export const AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule = /*@__PURE__*/ S.suspend(() => S.Struct({ commonName: AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName.pipe( T.Body("common_name"), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemCountryRuleGeo { /** The country code that should be matched. */ countryCode: string; } export const AccessPoliciesCreateRequestIncludeItemCountryRuleGeo = /*@__PURE__*/ S.suspend(() => S.Struct({ countryCode: S.String.pipe(T.Body("country_code")), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemCountryRuleGeo", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemCountryRule { geo: AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; } export const AccessPoliciesCreateRequestIncludeItemCountryRule = /*@__PURE__*/ S.suspend(() => S.Struct({ geo: AccessPoliciesCreateRequestIncludeItemCountryRuleGeo, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemCountryRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture { /** The ID of a device posture integration. */ integrationUid: string; } export const AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture = /*@__PURE__*/ S.suspend(() => S.Struct({ integrationUid: S.String.pipe(T.Body("integration_uid")), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule { devicePosture: AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; } export const AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule = /*@__PURE__*/ S.suspend(() => S.Struct({ devicePosture: AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture.pipe( T.Body("device_posture"), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain { /** The email domain to match. */ domain: string; } export const AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemDomainRule { emailDomain: AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; } export const AccessPoliciesCreateRequestIncludeItemDomainRule = /*@__PURE__*/ S.suspend(() => S.Struct({ emailDomain: AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain.pipe( T.Body("email_domain"), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemDomainRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList { /** The ID of a previously created email list. */ id: string; } export const AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemEmailListRule { emailList: AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; } export const AccessPoliciesCreateRequestIncludeItemEmailListRule = /*@__PURE__*/ S.suspend(() => S.Struct({ emailList: AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList.pipe( T.Body("email_list"), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemEmailListRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemEmailRuleEmail { /** The email of the user. */ email: string; } export const AccessPoliciesCreateRequestIncludeItemEmailRuleEmail = /*@__PURE__*/ S.suspend(() => S.Struct({ email: S.String, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemEmailRuleEmail", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemEmailRule { email: AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; } export const AccessPoliciesCreateRequestIncludeItemEmailRule = /*@__PURE__*/ S.suspend(() => S.Struct({ email: AccessPoliciesCreateRequestIncludeItemEmailRuleEmail, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemEmailRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemEveryoneRule { /** An empty object which matches on all users. */ everyone: unknown; } export const AccessPoliciesCreateRequestIncludeItemEveryoneRule = /*@__PURE__*/ S.suspend(() => S.Struct({ everyone: S.Unknown, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemEveryoneRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation { /** The API endpoint containing your business logic. */ evaluateUrl: string; /** The API endpoint containing the key that Access uses to verify that the response came from your API. */ keysUrl: string; } export const AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation = /*@__PURE__*/ S.suspend(() => S.Struct({ evaluateUrl: S.String.pipe(T.Body("evaluate_url")), keysUrl: S.String.pipe(T.Body("keys_url")), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule { externalEvaluation: AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; } export const AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule = /*@__PURE__*/ S.suspend(() => S.Struct({ externalEvaluation: AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation.pipe( T.Body("external_evaluation"), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization { /** The ID of your Github identity provider. */ identityProviderId: string; /** The name of the organization. */ name: string; /** The name of the team */ team?: string; } export const AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization = /*@__PURE__*/ S.suspend(() => S.Struct({ identityProviderId: S.String.pipe(T.Body("identity_provider_id")), name: S.String, team: S.optional(S.String), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule { githubOrganization: AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization; } export const AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule = /*@__PURE__*/ S.suspend(() => S.Struct({ githubOrganization: AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization.pipe( T.Body("github-organization"), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite { /** The email of the Google Workspace group. */ email: string; /** The ID of your Google Workspace identity provider. */ identityProviderId: string; } export const AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite = /*@__PURE__*/ S.suspend(() => S.Struct({ email: S.String, identityProviderId: S.String.pipe(T.Body("identity_provider_id")), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule { gsuite: AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; } export const AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule = /*@__PURE__*/ S.suspend(() => S.Struct({ gsuite: AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod { /** The ID of an identity provider. */ id: string; } export const AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule { loginMethod: AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; } export const AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule = /*@__PURE__*/ S.suspend(() => S.Struct({ loginMethod: AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod.pipe( T.Body("login_method"), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemIPListRuleIpList { /** The ID of a previously created IP list. */ id: string; } export const AccessPoliciesCreateRequestIncludeItemIPListRuleIpList = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemIPListRuleIpList", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemIPListRule { ipList: AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; } export const AccessPoliciesCreateRequestIncludeItemIPListRule = /*@__PURE__*/ S.suspend(() => S.Struct({ ipList: AccessPoliciesCreateRequestIncludeItemIPListRuleIpList.pipe( T.Body("ip_list"), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemIPListRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemIPRuleIp { /** An IPv4 or IPv6 CIDR block. */ ip: string; } export const AccessPoliciesCreateRequestIncludeItemIPRuleIp = /*@__PURE__*/ S.suspend(() => S.Struct({ ip: S.String, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemIPRuleIp", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemIPRule { ip: AccessPoliciesCreateRequestIncludeItemIPRuleIp; } export const AccessPoliciesCreateRequestIncludeItemIPRule = /*@__PURE__*/ S.suspend(() => S.Struct({ ip: AccessPoliciesCreateRequestIncludeItemIPRuleIp, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemIPRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta { /** The ID of your Okta identity provider. */ identityProviderId: string; /** The name of the Okta group. */ name: string; } export const AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta = /*@__PURE__*/ S.suspend(() => S.Struct({ identityProviderId: S.String.pipe(T.Body("identity_provider_id")), name: S.String, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemOktaGroupRule { okta: AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; } export const AccessPoliciesCreateRequestIncludeItemOktaGroupRule = /*@__PURE__*/ S.suspend(() => S.Struct({ okta: AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemOktaGroupRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml { /** The name of the SAML attribute. */ attributeName: string; /** The SAML attribute value to look for. */ attributeValue: string; /** The ID of your SAML identity provider. */ identityProviderId: string; } export const AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml = /*@__PURE__*/ S.suspend(() => S.Struct({ attributeName: S.String.pipe(T.Body("attribute_name")), attributeValue: S.String.pipe(T.Body("attribute_value")), identityProviderId: S.String.pipe(T.Body("identity_provider_id")), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemSAMLGroupRule { saml: AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; } export const AccessPoliciesCreateRequestIncludeItemSAMLGroupRule = /*@__PURE__*/ S.suspend(() => S.Struct({ saml: AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemSAMLGroupRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc { /** The name of the OIDC claim. */ claimName: string; /** The OIDC claim value to look for. */ claimValue: string; /** The ID of your OIDC identity provider. */ identityProviderId: string; } export const AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc = /*@__PURE__*/ S.suspend(() => S.Struct({ claimName: S.String.pipe(T.Body("claim_name")), claimValue: S.String.pipe(T.Body("claim_value")), identityProviderId: S.String.pipe(T.Body("identity_provider_id")), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule { oidc: AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; } export const AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule = /*@__PURE__*/ S.suspend(() => S.Struct({ oidc: AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc, }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken { /** The ID of a Service Token. */ tokenId: string; } export const AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ tokenId: S.String.pipe(T.Body("token_id")), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemServiceTokenRule { serviceToken: AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; } export const AccessPoliciesCreateRequestIncludeItemServiceTokenRule = /*@__PURE__*/ S.suspend(() => S.Struct({ serviceToken: AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken.pipe( T.Body("service_token"), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemServiceTokenRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken { /** The ID of an Access OIDC SaaS application */ appUid: string; } export const AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken = /*@__PURE__*/ S.suspend(() => S.Struct({ appUid: S.String.pipe(T.Body("app_uid")), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule { linkedAppToken: AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; } export const AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule = /*@__PURE__*/ S.suspend(() => S.Struct({ linkedAppToken: AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken.pipe( T.Body("linked_app_token"), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule", }) as any as S.Schema; export type AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array< | AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem | (string & {}) >; export const AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRule { userRiskScore: AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember { /** Identifier. */ accountId?: string; } export const AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.optional(S.String.pipe(T.Body("account_id"))), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember", }) as any as S.Schema; export interface AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule { cloudflareAccountMember: AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; } export const AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule = /*@__PURE__*/ S.suspend(() => S.Struct({ cloudflareAccountMember: AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember.pipe( T.Body("cloudflare_account_member"), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule", }) as any as S.Schema; export type AccessPoliciesCreateRequestIncludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessPoliciesCreateRequestIncludeItemAccessUserRiskScoreRule | AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesCreateRequestIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesCreateRequestIncludeList = Array; export const AccessPoliciesCreateRequestIncludeList = /*@__PURE__*/ S.Array( AccessPoliciesCreateRequestIncludeItem, ) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemGroupRule { group?: unknown; } export const AccessPoliciesCreateRequestExcludeItemGroupRule = /*@__PURE__*/ S.suspend(() => S.Struct({ group: S.optional(S.Unknown), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemGroupRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule { anyValidServiceToken?: unknown; } export const AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule = /*@__PURE__*/ S.suspend(() => S.Struct({ anyValidServiceToken: S.optional( S.Unknown.pipe(T.Body("any_valid_service_token")), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule { authContext?: unknown; } export const AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule = /*@__PURE__*/ S.suspend(() => S.Struct({ authContext: S.optional(S.Unknown.pipe(T.Body("auth_context"))), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule { authMethod?: unknown; } export const AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule = /*@__PURE__*/ S.suspend(() => S.Struct({ authMethod: S.optional(S.Unknown.pipe(T.Body("auth_method"))), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemAzureGroupRule { azureAD?: unknown; } export const AccessPoliciesCreateRequestExcludeItemAzureGroupRule = /*@__PURE__*/ S.suspend(() => S.Struct({ azureAD: S.optional(S.Unknown), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemAzureGroupRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemCertificateRule { certificate?: unknown; } export const AccessPoliciesCreateRequestExcludeItemCertificateRule = /*@__PURE__*/ S.suspend(() => S.Struct({ certificate: S.optional(S.Unknown), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemCertificateRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule { commonName?: unknown; } export const AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule = /*@__PURE__*/ S.suspend(() => S.Struct({ commonName: S.optional(S.Unknown.pipe(T.Body("common_name"))), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemCountryRule { geo?: unknown; } export const AccessPoliciesCreateRequestExcludeItemCountryRule = /*@__PURE__*/ S.suspend(() => S.Struct({ geo: S.optional(S.Unknown), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemCountryRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule { devicePosture?: unknown; } export const AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule = /*@__PURE__*/ S.suspend(() => S.Struct({ devicePosture: S.optional(S.Unknown.pipe(T.Body("device_posture"))), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemDomainRule { emailDomain?: unknown; } export const AccessPoliciesCreateRequestExcludeItemDomainRule = /*@__PURE__*/ S.suspend(() => S.Struct({ emailDomain: S.optional(S.Unknown.pipe(T.Body("email_domain"))), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemDomainRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemEmailListRule { emailList?: unknown; } export const AccessPoliciesCreateRequestExcludeItemEmailListRule = /*@__PURE__*/ S.suspend(() => S.Struct({ emailList: S.optional(S.Unknown.pipe(T.Body("email_list"))), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemEmailListRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemEmailRule { email?: unknown; } export const AccessPoliciesCreateRequestExcludeItemEmailRule = /*@__PURE__*/ S.suspend(() => S.Struct({ email: S.optional(S.Unknown), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemEmailRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemEveryoneRule { everyone?: unknown; } export const AccessPoliciesCreateRequestExcludeItemEveryoneRule = /*@__PURE__*/ S.suspend(() => S.Struct({ everyone: S.optional(S.Unknown), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemEveryoneRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule { externalEvaluation?: unknown; } export const AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule = /*@__PURE__*/ S.suspend(() => S.Struct({ externalEvaluation: S.optional( S.Unknown.pipe(T.Body("external_evaluation")), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule { "github-organization"?: unknown; } export const AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule = /*@__PURE__*/ S.suspend(() => S.Struct({ "github-organization": S.optional(S.Unknown), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule { gsuite?: unknown; } export const AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule = /*@__PURE__*/ S.suspend(() => S.Struct({ gsuite: S.optional(S.Unknown), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule { loginMethod?: unknown; } export const AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule = /*@__PURE__*/ S.suspend(() => S.Struct({ loginMethod: S.optional(S.Unknown.pipe(T.Body("login_method"))), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemIPListRule { ipList?: unknown; } export const AccessPoliciesCreateRequestExcludeItemIPListRule = /*@__PURE__*/ S.suspend(() => S.Struct({ ipList: S.optional(S.Unknown.pipe(T.Body("ip_list"))), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemIPListRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemIPRule { ip?: unknown; } export const AccessPoliciesCreateRequestExcludeItemIPRule = /*@__PURE__*/ S.suspend(() => S.Struct({ ip: S.optional(S.Unknown), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemIPRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemOktaGroupRule { okta?: unknown; } export const AccessPoliciesCreateRequestExcludeItemOktaGroupRule = /*@__PURE__*/ S.suspend(() => S.Struct({ okta: S.optional(S.Unknown), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemOktaGroupRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemSAMLGroupRule { saml?: unknown; } export const AccessPoliciesCreateRequestExcludeItemSAMLGroupRule = /*@__PURE__*/ S.suspend(() => S.Struct({ saml: S.optional(S.Unknown), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemSAMLGroupRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule { oidc?: unknown; } export const AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule = /*@__PURE__*/ S.suspend(() => S.Struct({ oidc: S.optional(S.Unknown), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemServiceTokenRule { serviceToken?: unknown; } export const AccessPoliciesCreateRequestExcludeItemServiceTokenRule = /*@__PURE__*/ S.suspend(() => S.Struct({ serviceToken: S.optional(S.Unknown.pipe(T.Body("service_token"))), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemServiceTokenRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule { linkedAppToken?: unknown; } export const AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule = /*@__PURE__*/ S.suspend(() => S.Struct({ linkedAppToken: S.optional(S.Unknown.pipe(T.Body("linked_app_token"))), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule { userRiskScore?: unknown; } export const AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: S.optional(S.Unknown.pipe(T.Body("user_risk_score"))), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export interface AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule { cloudflareAccountMember?: unknown; } export const AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule = /*@__PURE__*/ S.suspend(() => S.Struct({ cloudflareAccountMember: S.optional( S.Unknown.pipe(T.Body("cloudflare_account_member")), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule", }) as any as S.Schema; export type AccessPoliciesCreateRequestExcludeItem = | AccessPoliciesCreateRequestExcludeItemGroupRule | AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule | AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestExcludeItemAzureGroupRule | AccessPoliciesCreateRequestExcludeItemCertificateRule | AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule | AccessPoliciesCreateRequestExcludeItemCountryRule | AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestExcludeItemDomainRule | AccessPoliciesCreateRequestExcludeItemEmailListRule | AccessPoliciesCreateRequestExcludeItemEmailRule | AccessPoliciesCreateRequestExcludeItemEveryoneRule | AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule | AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule | AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestExcludeItemIPListRule | AccessPoliciesCreateRequestExcludeItemIPRule | AccessPoliciesCreateRequestExcludeItemOktaGroupRule | AccessPoliciesCreateRequestExcludeItemSAMLGroupRule | AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestExcludeItemServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule | AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule | AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesCreateRequestExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesCreateRequestExcludeList = Array; export const AccessPoliciesCreateRequestExcludeList = /*@__PURE__*/ S.Array( AccessPoliciesCreateRequestExcludeItem, ) as any as S.Schema; export type AccessPoliciesCreateRequestRequireItemGroupRule = AccessPoliciesCreateRequestExcludeItemGroupRule; export const AccessPoliciesCreateRequestRequireItemGroupRule = AccessPoliciesCreateRequestExcludeItemGroupRule; export type AccessPoliciesCreateRequestRequireItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule; export const AccessPoliciesCreateRequestRequireItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule; export type AccessPoliciesCreateRequestRequireItemAccessAuthContextRule = AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule; export const AccessPoliciesCreateRequestRequireItemAccessAuthContextRule = AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule; export type AccessPoliciesCreateRequestRequireItemAuthenticationMethodRule = AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule; export const AccessPoliciesCreateRequestRequireItemAuthenticationMethodRule = AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule; export type AccessPoliciesCreateRequestRequireItemAzureGroupRule = AccessPoliciesCreateRequestExcludeItemAzureGroupRule; export const AccessPoliciesCreateRequestRequireItemAzureGroupRule = AccessPoliciesCreateRequestExcludeItemAzureGroupRule; export type AccessPoliciesCreateRequestRequireItemCertificateRule = AccessPoliciesCreateRequestExcludeItemCertificateRule; export const AccessPoliciesCreateRequestRequireItemCertificateRule = AccessPoliciesCreateRequestExcludeItemCertificateRule; export type AccessPoliciesCreateRequestRequireItemAccessCommonNameRule = AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule; export const AccessPoliciesCreateRequestRequireItemAccessCommonNameRule = AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule; export type AccessPoliciesCreateRequestRequireItemCountryRule = AccessPoliciesCreateRequestExcludeItemCountryRule; export const AccessPoliciesCreateRequestRequireItemCountryRule = AccessPoliciesCreateRequestExcludeItemCountryRule; export type AccessPoliciesCreateRequestRequireItemAccessDevicePostureRule = AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule; export const AccessPoliciesCreateRequestRequireItemAccessDevicePostureRule = AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule; export type AccessPoliciesCreateRequestRequireItemDomainRule = AccessPoliciesCreateRequestExcludeItemDomainRule; export const AccessPoliciesCreateRequestRequireItemDomainRule = AccessPoliciesCreateRequestExcludeItemDomainRule; export type AccessPoliciesCreateRequestRequireItemEmailListRule = AccessPoliciesCreateRequestExcludeItemEmailListRule; export const AccessPoliciesCreateRequestRequireItemEmailListRule = AccessPoliciesCreateRequestExcludeItemEmailListRule; export type AccessPoliciesCreateRequestRequireItemEmailRule = AccessPoliciesCreateRequestExcludeItemEmailRule; export const AccessPoliciesCreateRequestRequireItemEmailRule = AccessPoliciesCreateRequestExcludeItemEmailRule; export type AccessPoliciesCreateRequestRequireItemEveryoneRule = AccessPoliciesCreateRequestExcludeItemEveryoneRule; export const AccessPoliciesCreateRequestRequireItemEveryoneRule = AccessPoliciesCreateRequestExcludeItemEveryoneRule; export type AccessPoliciesCreateRequestRequireItemExternalEvaluationRule = AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule; export const AccessPoliciesCreateRequestRequireItemExternalEvaluationRule = AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule; export type AccessPoliciesCreateRequestRequireItemGitHubOrganizationRule = AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule; export const AccessPoliciesCreateRequestRequireItemGitHubOrganizationRule = AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule; export type AccessPoliciesCreateRequestRequireItemGSuiteGroupRule = AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule; export const AccessPoliciesCreateRequestRequireItemGSuiteGroupRule = AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule; export type AccessPoliciesCreateRequestRequireItemAccessLoginMethodRule = AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule; export const AccessPoliciesCreateRequestRequireItemAccessLoginMethodRule = AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule; export type AccessPoliciesCreateRequestRequireItemIPListRule = AccessPoliciesCreateRequestExcludeItemIPListRule; export const AccessPoliciesCreateRequestRequireItemIPListRule = AccessPoliciesCreateRequestExcludeItemIPListRule; export type AccessPoliciesCreateRequestRequireItemIPRule = AccessPoliciesCreateRequestExcludeItemIPRule; export const AccessPoliciesCreateRequestRequireItemIPRule = AccessPoliciesCreateRequestExcludeItemIPRule; export type AccessPoliciesCreateRequestRequireItemOktaGroupRule = AccessPoliciesCreateRequestExcludeItemOktaGroupRule; export const AccessPoliciesCreateRequestRequireItemOktaGroupRule = AccessPoliciesCreateRequestExcludeItemOktaGroupRule; export type AccessPoliciesCreateRequestRequireItemSAMLGroupRule = AccessPoliciesCreateRequestExcludeItemSAMLGroupRule; export const AccessPoliciesCreateRequestRequireItemSAMLGroupRule = AccessPoliciesCreateRequestExcludeItemSAMLGroupRule; export type AccessPoliciesCreateRequestRequireItemAccessOIDCClaimRule = AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule; export const AccessPoliciesCreateRequestRequireItemAccessOIDCClaimRule = AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule; export type AccessPoliciesCreateRequestRequireItemServiceTokenRule = AccessPoliciesCreateRequestExcludeItemServiceTokenRule; export const AccessPoliciesCreateRequestRequireItemServiceTokenRule = AccessPoliciesCreateRequestExcludeItemServiceTokenRule; export type AccessPoliciesCreateRequestRequireItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule; export const AccessPoliciesCreateRequestRequireItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule; export type AccessPoliciesCreateRequestRequireItemAccessUserRiskScoreRule = AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule; export const AccessPoliciesCreateRequestRequireItemAccessUserRiskScoreRule = AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule; export type AccessPoliciesCreateRequestRequireItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesCreateRequestRequireItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export type AccessPoliciesCreateRequestRequireItem = | AccessPoliciesCreateRequestExcludeItemGroupRule | AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule | AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestExcludeItemAzureGroupRule | AccessPoliciesCreateRequestExcludeItemCertificateRule | AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule | AccessPoliciesCreateRequestExcludeItemCountryRule | AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestExcludeItemDomainRule | AccessPoliciesCreateRequestExcludeItemEmailListRule | AccessPoliciesCreateRequestExcludeItemEmailRule | AccessPoliciesCreateRequestExcludeItemEveryoneRule | AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule | AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule | AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestExcludeItemIPListRule | AccessPoliciesCreateRequestExcludeItemIPRule | AccessPoliciesCreateRequestExcludeItemOktaGroupRule | AccessPoliciesCreateRequestExcludeItemSAMLGroupRule | AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestExcludeItemServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule | AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule | AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesCreateRequestRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesCreateRequestRequireList = Array; export const AccessPoliciesCreateRequestRequireList = /*@__PURE__*/ S.Array( AccessPoliciesCreateRequestRequireItem, ) as any as S.Schema; export type AccessPoliciesCreateRequestApprovalGroupsItemEmailAddressesList = Array; export const AccessPoliciesCreateRequestApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessPoliciesCreateRequestApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessPoliciesCreateRequestApprovalGroupsItemEmailAddressesList; /** The UUID of an re-usable email list. */ emailListUuid?: string; } export const AccessPoliciesCreateRequestApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( AccessPoliciesCreateRequestApprovalGroupsItemEmailAddressesList.pipe( T.Body("email_addresses"), ), ), emailListUuid: S.optional(S.String.pipe(T.Body("email_list_uuid"))), }), ).annotate({ identifier: "AccessPoliciesCreateRequestApprovalGroupsItem", }) as any as S.Schema; export type AccessPoliciesCreateRequestApprovalGroupsList = Array; export const AccessPoliciesCreateRequestApprovalGroupsList = /*@__PURE__*/ S.Array( AccessPoliciesCreateRequestApprovalGroupsItem, ) as any as S.Schema; export interface InlineAccessPolicy { id?: string; decision: AccessPoliciesCreateRequestDecision | (string & {}); include: AccessPoliciesCreateRequestIncludeList; exclude?: AccessPoliciesCreateRequestExcludeList; require?: AccessPoliciesCreateRequestRequireList; name?: string; precedence?: number; approvalGroups?: AccessPoliciesCreateRequestApprovalGroupsList; approvalRequired?: boolean; isolationRequired?: boolean; purposeJustificationPrompt?: string; purposeJustificationRequired?: boolean; sessionDuration?: string; } export const InlineAccessPolicy = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.String), decision: AccessPoliciesCreateRequestDecision, include: AccessPoliciesCreateRequestIncludeList, exclude: S.optional(AccessPoliciesCreateRequestExcludeList), require: S.optional(AccessPoliciesCreateRequestRequireList), name: S.optional(S.String), precedence: S.optional(S.Number), approvalGroups: S.optional( AccessPoliciesCreateRequestApprovalGroupsList.pipe( T.Body("approval_groups"), ), ), approvalRequired: S.optional(S.Boolean.pipe(T.Body("approval_required"))), isolationRequired: S.optional(S.Boolean.pipe(T.Body("isolation_required"))), purposeJustificationPrompt: S.optional( S.String.pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.Boolean.pipe(T.Body("purpose_justification_required")), ), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "InlineAccessPolicy", }) as any as S.Schema; export type AccessApplicationsCreateForAccountRequestPoliciesSelfHostedApplicationItem = | string | AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemAccessAppPolicyLink | AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2 | InlineAccessPolicy; export const AccessApplicationsCreateForAccountRequestPoliciesSelfHostedApplicationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [], ["id", "precedence"], [ "id", "approvalGroups", "approvalRequired", "connectionRules", "isolationRequired", "mfaConfig", "precedence", "purposeJustificationPrompt", "purposeJustificationRequired", "sessionDuration", ], [ "id", "decision", "include", "exclude", "require", "name", "precedence", "approvalGroups", "approvalRequired", "isolationRequired", "purposeJustificationPrompt", "purposeJustificationRequired", "sessionDuration", ], ]), ); export type AccessApplicationsCreateForAccountRequestPoliciesSelfHostedApplicationList = Array; export const AccessApplicationsCreateForAccountRequestPoliciesSelfHostedApplicationList = /*@__PURE__*/ S.Array( AccessApplicationsCreateForAccountRequestPoliciesSelfHostedApplicationItem, ) as any as S.Schema; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemDecision = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemGitHubOrganizationRuleGithubOrganization = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemGitHubOrganizationRuleGithubOrganization = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array< | AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem | (string & {}) >; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRule { userRiskScore: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRule | AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeList = Array; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRulesSshUsernamesList = Array; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRulesSshUsernamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRulesSsh { /** Contains the Unix usernames that may be used when connecting over SSH. */ usernames: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRulesSshUsernamesList; /** Enables using Identity Provider email alias as SSH username. */ allowEmailAlias?: boolean; } export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRulesSsh = /*@__PURE__*/ S.suspend(() => S.Struct({ usernames: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRulesSshUsernamesList, allowEmailAlias: S.optional(S.Boolean.pipe(T.Body("allow_email_alias"))), }), ).annotate({ identifier: "AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRulesSsh", }) as any as S.Schema; export interface AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRules { /** The SSH-specific rules that define how users may connect to the targets secured by your application. */ ssh?: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRulesSsh; } export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ ssh: S.optional( AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRulesSsh, ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemGroupRule = AccessPoliciesCreateRequestExcludeItemGroupRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemGroupRule = AccessPoliciesCreateRequestExcludeItemGroupRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestExcludeItemAzureGroupRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestExcludeItemAzureGroupRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemCertificateRule = AccessPoliciesCreateRequestExcludeItemCertificateRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemCertificateRule = AccessPoliciesCreateRequestExcludeItemCertificateRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemCountryRule = AccessPoliciesCreateRequestExcludeItemCountryRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemCountryRule = AccessPoliciesCreateRequestExcludeItemCountryRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemDomainRule = AccessPoliciesCreateRequestExcludeItemDomainRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemDomainRule = AccessPoliciesCreateRequestExcludeItemDomainRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemEmailListRule = AccessPoliciesCreateRequestExcludeItemEmailListRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemEmailListRule = AccessPoliciesCreateRequestExcludeItemEmailListRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemEmailRule = AccessPoliciesCreateRequestExcludeItemEmailRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemEmailRule = AccessPoliciesCreateRequestExcludeItemEmailRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestExcludeItemEveryoneRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestExcludeItemEveryoneRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemIPListRule = AccessPoliciesCreateRequestExcludeItemIPListRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemIPListRule = AccessPoliciesCreateRequestExcludeItemIPListRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemIPRule = AccessPoliciesCreateRequestExcludeItemIPRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemIPRule = AccessPoliciesCreateRequestExcludeItemIPRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestExcludeItemOktaGroupRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestExcludeItemOktaGroupRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestExcludeItemSAMLGroupRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestExcludeItemSAMLGroupRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestExcludeItemServiceTokenRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestExcludeItemServiceTokenRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessUserRiskScoreRule = AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessUserRiskScoreRule = AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItem = | AccessPoliciesCreateRequestExcludeItemGroupRule | AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule | AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestExcludeItemAzureGroupRule | AccessPoliciesCreateRequestExcludeItemCertificateRule | AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule | AccessPoliciesCreateRequestExcludeItemCountryRule | AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestExcludeItemDomainRule | AccessPoliciesCreateRequestExcludeItemEmailListRule | AccessPoliciesCreateRequestExcludeItemEmailRule | AccessPoliciesCreateRequestExcludeItemEveryoneRule | AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule | AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule | AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestExcludeItemIPListRule | AccessPoliciesCreateRequestExcludeItemIPRule | AccessPoliciesCreateRequestExcludeItemOktaGroupRule | AccessPoliciesCreateRequestExcludeItemSAMLGroupRule | AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestExcludeItemServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule | AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule | AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeList = Array; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsItem = "piv_key"; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsList = Array< | AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsItem | (string & {}) >; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemMfaConfig { /** Lists the MFA methods that users can authenticate with. For infrastructure applications, only `piv_key` is supported. */ allowedAuthenticators?: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsList; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`. */ sessionDuration?: string; } export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsList.pipe( T.Body("allowed_authenticators"), ), ), mfaDisabled: S.optional(S.Boolean.pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemGroupRule = AccessPoliciesCreateRequestExcludeItemGroupRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemGroupRule = AccessPoliciesCreateRequestExcludeItemGroupRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessAuthContextRule = AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessAuthContextRule = AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAuthenticationMethodRule = AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAuthenticationMethodRule = AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAzureGroupRule = AccessPoliciesCreateRequestExcludeItemAzureGroupRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAzureGroupRule = AccessPoliciesCreateRequestExcludeItemAzureGroupRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemCertificateRule = AccessPoliciesCreateRequestExcludeItemCertificateRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemCertificateRule = AccessPoliciesCreateRequestExcludeItemCertificateRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessCommonNameRule = AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessCommonNameRule = AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemCountryRule = AccessPoliciesCreateRequestExcludeItemCountryRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemCountryRule = AccessPoliciesCreateRequestExcludeItemCountryRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessDevicePostureRule = AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessDevicePostureRule = AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemDomainRule = AccessPoliciesCreateRequestExcludeItemDomainRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemDomainRule = AccessPoliciesCreateRequestExcludeItemDomainRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemEmailListRule = AccessPoliciesCreateRequestExcludeItemEmailListRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemEmailListRule = AccessPoliciesCreateRequestExcludeItemEmailListRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemEmailRule = AccessPoliciesCreateRequestExcludeItemEmailRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemEmailRule = AccessPoliciesCreateRequestExcludeItemEmailRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemEveryoneRule = AccessPoliciesCreateRequestExcludeItemEveryoneRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemEveryoneRule = AccessPoliciesCreateRequestExcludeItemEveryoneRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemExternalEvaluationRule = AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemExternalEvaluationRule = AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemGitHubOrganizationRule = AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemGitHubOrganizationRule = AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemGSuiteGroupRule = AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemGSuiteGroupRule = AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessLoginMethodRule = AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessLoginMethodRule = AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemIPListRule = AccessPoliciesCreateRequestExcludeItemIPListRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemIPListRule = AccessPoliciesCreateRequestExcludeItemIPListRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemIPRule = AccessPoliciesCreateRequestExcludeItemIPRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemIPRule = AccessPoliciesCreateRequestExcludeItemIPRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemOktaGroupRule = AccessPoliciesCreateRequestExcludeItemOktaGroupRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemOktaGroupRule = AccessPoliciesCreateRequestExcludeItemOktaGroupRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemSAMLGroupRule = AccessPoliciesCreateRequestExcludeItemSAMLGroupRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemSAMLGroupRule = AccessPoliciesCreateRequestExcludeItemSAMLGroupRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessOIDCClaimRule = AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessOIDCClaimRule = AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemServiceTokenRule = AccessPoliciesCreateRequestExcludeItemServiceTokenRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemServiceTokenRule = AccessPoliciesCreateRequestExcludeItemServiceTokenRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessUserRiskScoreRule = AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessUserRiskScoreRule = AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItem = | AccessPoliciesCreateRequestExcludeItemGroupRule | AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule | AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestExcludeItemAzureGroupRule | AccessPoliciesCreateRequestExcludeItemCertificateRule | AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule | AccessPoliciesCreateRequestExcludeItemCountryRule | AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestExcludeItemDomainRule | AccessPoliciesCreateRequestExcludeItemEmailListRule | AccessPoliciesCreateRequestExcludeItemEmailRule | AccessPoliciesCreateRequestExcludeItemEveryoneRule | AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule | AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule | AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestExcludeItemIPListRule | AccessPoliciesCreateRequestExcludeItemIPRule | AccessPoliciesCreateRequestExcludeItemOktaGroupRule | AccessPoliciesCreateRequestExcludeItemSAMLGroupRule | AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestExcludeItemServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule | AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule | AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireList = Array; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItem { /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision: | AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemDecision | (string & {}); /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeList; /** The name of the Access policy. */ name: string; /** The rules that define how users may connect to the targets secured by your application. */ connectionRules?: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRules; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeList; /** Configures multi-factor authentication (MFA) settings for infrastructure applications. */ mfaConfig?: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemMfaConfig; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireList; } export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItem = /*@__PURE__*/ S.suspend(() => S.Struct({ decision: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemDecision, include: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemIncludeList, name: S.String, connectionRules: S.optional( AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRules.pipe( T.Body("connection_rules"), ), ), exclude: S.optional( AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemExcludeList, ), mfaConfig: S.optional( AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemMfaConfig.pipe( T.Body("mfa_config"), ), ), require: S.optional( AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemRequireList, ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItem", }) as any as S.Schema; export type AccessApplicationsCreateRequestPoliciesInfrastructureApplicationList = Array; export const AccessApplicationsCreateRequestPoliciesInfrastructureApplicationList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItem, ) as any as S.Schema; export type AccessApplicationsCreateForAccountRequestPolicies = | AccessApplicationsCreateForAccountRequestPoliciesSelfHostedApplicationList | AccessApplicationsCreateRequestPoliciesInfrastructureApplicationList; export const AccessApplicationsCreateForAccountRequestPolicies = /*@__PURE__*/ S.Unknown.pipe(T.UnionCases([[], []])); export type AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasicScheme = "httpbasic"; export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasicScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasic { /** Password used to authenticate with the remote SCIM service. */ password: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasicScheme; /** User name used to authenticate with the remote SCIM service. */ user: string; } export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasic = /*@__PURE__*/ S.suspend(() => S.Struct({ password: S.String, scheme: AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasicScheme, user: S.String, }), ).annotate({ identifier: "AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasic", }) as any as S.Schema; export type AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme = "oauthbearertoken"; export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerToken { /** Token used to authenticate with the remote SCIM service. */ token: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme; } export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerToken = /*@__PURE__*/ S.suspend(() => S.Struct({ token: S.String, scheme: AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerToken", }) as any as S.Schema; export type AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2Scheme = "oauth2"; export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2Scheme = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2ScopesList = Array; export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2ScopesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2 { /** URL used to generate the auth code used during token generation. */ authorizationUrl: string; /** Client ID used to authenticate when generating a token for authenticating with the remote SCIM service. */ clientId: string; /** Secret used to authenticate when generating a token for authenticating with the remove SCIM service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2Scheme; /** URL used to generate the token used to authenticate with the remote SCIM service. */ tokenUrl: string; /** The authorization scopes to request when generating the token used to authenticate with the remove SCIM service. */ scopes?: AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2ScopesList; } export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2 = /*@__PURE__*/ S.suspend(() => S.Struct({ authorizationUrl: S.String.pipe(T.Body("authorization_url")), clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2Scheme, tokenUrl: S.String.pipe(T.Body("token_url")), scopes: S.optional( AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2ScopesList, ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2", }) as any as S.Schema; export type AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export interface AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic { password?: unknown; scheme?: unknown; user?: unknown; } export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = /*@__PURE__*/ S.suspend(() => S.Struct({ password: S.optional(S.Unknown), scheme: S.optional(S.Unknown), user: S.optional(S.Unknown), }), ).annotate({ identifier: "AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic", }) as any as S.Schema; export interface AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken { token?: unknown; scheme?: unknown; } export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = /*@__PURE__*/ S.suspend(() => S.Struct({ token: S.optional(S.Unknown), scheme: S.optional(S.Unknown), }), ).annotate({ identifier: "AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken", }) as any as S.Schema; export interface AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 { authorizationUrl?: unknown; clientId?: unknown; clientSecret?: unknown; } export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = /*@__PURE__*/ S.suspend(() => S.Struct({ authorizationUrl: S.optional(S.Unknown.pipe(T.Body("authorization_url"))), clientId: S.optional(S.Unknown.pipe(T.Body("client_id"))), clientSecret: S.optional(S.Unknown.pipe(T.Body("client_secret"))), }), ).annotate({ identifier: "AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2", }) as any as S.Schema; export type AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthentication = | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], [ "authorizationUrl", "clientId", "clientSecret", "scheme", "tokenUrl", "scopes", ], ["clientId", "clientSecret", "scheme"], [], ]), ); export interface AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItemOperations { /** Whether or not this mapping applies to create (POST) operations. */ create?: boolean; /** Whether or not this mapping applies to DELETE operations. */ delete?: boolean; /** Whether or not this mapping applies to update (PATCH/PUT) operations. */ update?: boolean; } export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItemOperations = /*@__PURE__*/ S.suspend(() => S.Struct({ create: S.optional(S.Boolean), delete: S.optional(S.Boolean), update: S.optional(S.Boolean), }), ).annotate({ identifier: "AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItemOperations", }) as any as S.Schema; export type AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItemOperations; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItemStrictness | (string & {}); /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string; } export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.Boolean), filter: S.optional(S.String), operations: S.optional( AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItemOperations, ), strictness: S.optional( AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItemStrictness, ), transformJsonata: S.optional(S.String.pipe(T.Body("transform_jsonata"))), }), ).annotate({ identifier: "AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItem", }) as any as S.Schema; export type AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsList = Array; export const AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItem, ) as any as S.Schema; export interface AccessApplicationsCreateRequestScimConfigSelfHostedApplication { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthentication; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsList; } export const AccessApplicationsCreateRequestScimConfigSelfHostedApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthentication, ), deactivateOnDelete: S.optional( S.Boolean.pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.Boolean), mappings: S.optional( AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsList, ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestScimConfigSelfHostedApplication", }) as any as S.Schema; export type AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthentication = | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsCreateRequestScimConfigSaaSApplicationMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsCreateRequestScimConfigSaaSApplicationMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestScimConfigSaaSApplicationMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: | AccessApplicationsCreateRequestScimConfigSaaSApplicationMappingsItemStrictness | (string & {}); /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string; } export const AccessApplicationsCreateRequestScimConfigSaaSApplicationMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.Boolean), filter: S.optional(S.String), operations: S.optional(S.Unknown), strictness: S.optional( AccessApplicationsCreateRequestScimConfigSaaSApplicationMappingsItemStrictness, ), transformJsonata: S.optional(S.String.pipe(T.Body("transform_jsonata"))), }), ).annotate({ identifier: "AccessApplicationsCreateRequestScimConfigSaaSApplicationMappingsItem", }) as any as S.Schema; export type AccessApplicationsCreateRequestScimConfigSaaSApplicationMappingsList = Array; export const AccessApplicationsCreateRequestScimConfigSaaSApplicationMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestScimConfigSaaSApplicationMappingsItem, ) as any as S.Schema; export interface AccessApplicationsCreateRequestScimConfigSaaSApplication { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthentication; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsCreateRequestScimConfigSaaSApplicationMappingsList; } export const AccessApplicationsCreateRequestScimConfigSaaSApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( AccessApplicationsCreateRequestScimConfigSaaSApplicationAuthentication, ), deactivateOnDelete: S.optional( S.Boolean.pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.Boolean), mappings: S.optional( AccessApplicationsCreateRequestScimConfigSaaSApplicationMappingsList, ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestScimConfigSaaSApplication", }) as any as S.Schema; export type AccessApplicationsCreateRequestScimConfig = | AccessApplicationsCreateRequestScimConfigSelfHostedApplication | AccessApplicationsCreateRequestScimConfigSaaSApplication; export const AccessApplicationsCreateRequestScimConfig = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "idpUid", "remoteUri", "authentication", "deactivateOnDelete", "enabled", "mappings", ], [ "idpUid", "remoteUri", "authentication", "deactivateOnDelete", "enabled", "mappings", ], ]), ); export type AccessApplicationsCreateRequestSelfHostedDomainsList = Array; export const AccessApplicationsCreateRequestSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateRequestTagsList = Array; export const AccessApplicationsCreateRequestTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateRequestSaasAppSAMLSaaSAppAuthType = | "saml" | "oidc"; export const AccessApplicationsCreateRequestSaasAppSAMLSaaSAppAuthType = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemNameFormat = | "urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" | "urn:oasis:names:tc:SAML:2.0:attrname-format:basic" | "urn:oasis:names:tc:SAML:2.0:attrname-format:uri"; export const AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemNameFormat = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem { /** The UID of the IdP. */ idpId?: string; /** The name of the IdP provided attribute. */ sourceName?: string; } export const AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem = /*@__PURE__*/ S.suspend(() => S.Struct({ idpId: S.optional(S.String.pipe(T.Body("idp_id"))), sourceName: S.optional(S.String.pipe(T.Body("source_name"))), }), ).annotate({ identifier: "AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem", }) as any as S.Schema; export type AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList = Array; export const AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem, ) as any as S.Schema; export interface AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSource { /** The name of the IdP attribute. */ name?: string; /** A mapping from IdP ID to attribute name. */ nameByIdp?: AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList; } export const AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSource = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.String), nameByIdp: S.optional( AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList.pipe( T.Body("name_by_idp"), ), ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSource", }) as any as S.Schema; export interface AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItem { /** The SAML FriendlyName of the attribute. */ friendlyName?: string; /** The name of the attribute. */ name?: string; /** A globally unique name for an identity or service provider. */ nameFormat?: | AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemNameFormat | (string & {}); /** If the attribute is required when building a SAML assertion. */ required?: boolean; source?: AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSource; } export const AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ friendlyName: S.optional(S.String.pipe(T.Body("friendly_name"))), name: S.optional(S.String), nameFormat: S.optional( AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemNameFormat.pipe( T.Body("name_format"), ), ), required: S.optional(S.Boolean), source: S.optional( AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSource, ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItem", }) as any as S.Schema; export type AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesList = Array; export const AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItem, ) as any as S.Schema; export type AccessApplicationsCreateRequestSaasAppSAMLSaaSAppNameIdFormat = | "id" | "email"; export const AccessApplicationsCreateRequestSaasAppSAMLSaaSAppNameIdFormat = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateRequestSaasAppSAMLSaaSApp { /** Optional identifier indicating the authentication protocol used for the saas app. Required for OIDC. Default if unset is "saml" */ authType?: | AccessApplicationsCreateRequestSaasAppSAMLSaaSAppAuthType | (string & {}); /** The service provider's endpoint that is responsible for receiving and parsing a SAML assertion. */ consumerServiceUrl?: string; customAttributes?: AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesList; /** The URL that the user will be redirected to after a successful login for IDP initiated logins. */ defaultRelayState?: string; /** The unique identifier for your SaaS application. */ idpEntityId?: string; /** The format of the name identifier sent to the SaaS application. */ nameIdFormat?: | AccessApplicationsCreateRequestSaasAppSAMLSaaSAppNameIdFormat | (string & {}); /** A [JSONata](https://jsonata.org/) expression that transforms an application's user identities into a NameID value for its SAML assertion. This expression should evaluate to a singular string. The output of this expression can override the `name_id_format` setting. */ nameIdTransformJsonata?: string; /** The Access public certificate that will be used to verify your identity. */ publicKey?: string; /** A [JSONata] (https://jsonata.org/) expression that transforms an application's user identities into attribute assertions in the SAML response. The expression can transform id, email, name, and groups values. It can also transform fields listed in the saml_attributes or oidc_fields of the identity provider used to authenticate. The output of this expression must be a JSON object. */ samlAttributeTransformJsonata?: string; /** A globally unique name for an identity or service provider. */ spEntityId?: string; /** The endpoint where your SaaS application will send login requests. */ ssoEndpoint?: string; } export const AccessApplicationsCreateRequestSaasAppSAMLSaaSApp = /*@__PURE__*/ S.suspend(() => S.Struct({ authType: S.optional( AccessApplicationsCreateRequestSaasAppSAMLSaaSAppAuthType.pipe( T.Body("auth_type"), ), ), consumerServiceUrl: S.optional( S.String.pipe(T.Body("consumer_service_url")), ), customAttributes: S.optional( AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesList.pipe( T.Body("custom_attributes"), ), ), defaultRelayState: S.optional( S.String.pipe(T.Body("default_relay_state")), ), idpEntityId: S.optional(S.String.pipe(T.Body("idp_entity_id"))), nameIdFormat: S.optional( AccessApplicationsCreateRequestSaasAppSAMLSaaSAppNameIdFormat.pipe( T.Body("name_id_format"), ), ), nameIdTransformJsonata: S.optional( S.String.pipe(T.Body("name_id_transform_jsonata")), ), publicKey: S.optional(S.String.pipe(T.Body("public_key"))), samlAttributeTransformJsonata: S.optional( S.String.pipe(T.Body("saml_attribute_transform_jsonata")), ), spEntityId: S.optional(S.String.pipe(T.Body("sp_entity_id"))), ssoEndpoint: S.optional(S.String.pipe(T.Body("sso_endpoint"))), }), ).annotate({ identifier: "AccessApplicationsCreateRequestSaasAppSAMLSaaSApp", }) as any as S.Schema; export type AccessApplicationsCreateRequestSaasAppOIDCSaaSAppAuthType = | "saml" | "oidc"; export const AccessApplicationsCreateRequestSaasAppOIDCSaaSAppAuthType = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItemScope = | "groups" | "profile" | "email" | "openid"; export const AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItemScope = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap = { [key: string]: string | undefined }; export const AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export interface AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItemSource { /** The name of the IdP claim. */ name?: string; /** A mapping from IdP ID to claim name. */ nameByIdp?: AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap; } export const AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItemSource = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.String), nameByIdp: S.optional( AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap.pipe( T.Body("name_by_idp"), ), ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItemSource", }) as any as S.Schema; export interface AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItem { /** The name of the claim. */ name?: string; /** If the claim is required when building an OIDC token. */ required?: boolean; /** The scope of the claim. */ scope?: | AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItemScope | (string & {}); source?: AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItemSource; } export const AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.String), required: S.optional(S.Boolean), scope: S.optional( AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItemScope, ), source: S.optional( AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItemSource, ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItem", }) as any as S.Schema; export type AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsList = Array; export const AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsItem, ) as any as S.Schema; export type AccessApplicationsCreateRequestSaasAppOIDCSaaSAppGrantTypesItem = | "authorization_code" | "authorization_code_with_pkce" | "refresh_tokens" | "hybrid" | "implicit"; export const AccessApplicationsCreateRequestSaasAppOIDCSaaSAppGrantTypesItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestSaasAppOIDCSaaSAppGrantTypesList = Array< | AccessApplicationsCreateRequestSaasAppOIDCSaaSAppGrantTypesItem | (string & {}) >; export const AccessApplicationsCreateRequestSaasAppOIDCSaaSAppGrantTypesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestSaasAppOIDCSaaSAppGrantTypesItem, ) as any as S.Schema; export interface AccessApplicationsCreateRequestSaasAppOIDCSaaSAppHybridAndImplicitOptions { /** If an Access Token should be returned from the OIDC Authorization endpoint */ returnAccessTokenFromAuthorizationEndpoint?: boolean; /** If an ID Token should be returned from the OIDC Authorization endpoint */ returnIdTokenFromAuthorizationEndpoint?: boolean; } export const AccessApplicationsCreateRequestSaasAppOIDCSaaSAppHybridAndImplicitOptions = /*@__PURE__*/ S.suspend(() => S.Struct({ returnAccessTokenFromAuthorizationEndpoint: S.optional( S.Boolean.pipe( T.Body("return_access_token_from_authorization_endpoint"), ), ), returnIdTokenFromAuthorizationEndpoint: S.optional( S.Boolean.pipe(T.Body("return_id_token_from_authorization_endpoint")), ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestSaasAppOIDCSaaSAppHybridAndImplicitOptions", }) as any as S.Schema; export type AccessApplicationsCreateRequestSaasAppOIDCSaaSAppRedirectUrisList = Array; export const AccessApplicationsCreateRequestSaasAppOIDCSaaSAppRedirectUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateRequestSaasAppOIDCSaaSAppRefreshTokenOptions { /** How long a refresh token will be valid for after creation. Valid units are m,h,d. Must be longer than 1m. */ lifetime?: string; } export const AccessApplicationsCreateRequestSaasAppOIDCSaaSAppRefreshTokenOptions = /*@__PURE__*/ S.suspend(() => S.Struct({ lifetime: S.optional(S.String), }), ).annotate({ identifier: "AccessApplicationsCreateRequestSaasAppOIDCSaaSAppRefreshTokenOptions", }) as any as S.Schema; export type AccessApplicationsCreateRequestSaasAppOIDCSaaSAppScopesItem = | "openid" | "groups" | "email" | "profile"; export const AccessApplicationsCreateRequestSaasAppOIDCSaaSAppScopesItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestSaasAppOIDCSaaSAppScopesList = Array< AccessApplicationsCreateRequestSaasAppOIDCSaaSAppScopesItem | (string & {}) >; export const AccessApplicationsCreateRequestSaasAppOIDCSaaSAppScopesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestSaasAppOIDCSaaSAppScopesItem, ) as any as S.Schema; export interface AccessApplicationsCreateRequestSaasAppOIDCSaaSApp { /** The lifetime of the OIDC Access Token after creation. Valid units are m,h. Must be greater than or equal to 1m and less than or equal to 24h. */ accessTokenLifetime?: string; /** If client secret should be required on the token endpoint when authorization_code_with_pkce grant is used. */ allowPkceWithoutClientSecret?: boolean; /** The URL where this applications tile redirects users */ appLauncherUrl?: string; /** Identifier of the authentication protocol used for the saas app. Required for OIDC. */ authType?: | AccessApplicationsCreateRequestSaasAppOIDCSaaSAppAuthType | (string & {}); /** The application client id */ clientId?: string; /** The application client secret, only returned on POST request. */ clientSecret?: string; customClaims?: AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsList; /** The OIDC flows supported by this application */ grantTypes?: AccessApplicationsCreateRequestSaasAppOIDCSaaSAppGrantTypesList; /** A regex to filter Cloudflare groups returned in ID token and userinfo endpoint */ groupFilterRegex?: string; hybridAndImplicitOptions?: AccessApplicationsCreateRequestSaasAppOIDCSaaSAppHybridAndImplicitOptions; /** The Access public certificate that will be used to verify your identity. */ publicKey?: string; /** The permitted URL's for Cloudflare to return Authorization codes and Access/ID tokens */ redirectUris?: AccessApplicationsCreateRequestSaasAppOIDCSaaSAppRedirectUrisList; refreshTokenOptions?: AccessApplicationsCreateRequestSaasAppOIDCSaaSAppRefreshTokenOptions; /** Define the user information shared with access, "offline_access" scope will be automatically enabled if refresh tokens are enabled */ scopes?: AccessApplicationsCreateRequestSaasAppOIDCSaaSAppScopesList; } export const AccessApplicationsCreateRequestSaasAppOIDCSaaSApp = /*@__PURE__*/ S.suspend(() => S.Struct({ accessTokenLifetime: S.optional( S.String.pipe(T.Body("access_token_lifetime")), ), allowPkceWithoutClientSecret: S.optional( S.Boolean.pipe(T.Body("allow_pkce_without_client_secret")), ), appLauncherUrl: S.optional(S.String.pipe(T.Body("app_launcher_url"))), authType: S.optional( AccessApplicationsCreateRequestSaasAppOIDCSaaSAppAuthType.pipe( T.Body("auth_type"), ), ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), customClaims: S.optional( AccessApplicationsCreateRequestSaasAppOIDCSaaSAppCustomClaimsList.pipe( T.Body("custom_claims"), ), ), grantTypes: S.optional( AccessApplicationsCreateRequestSaasAppOIDCSaaSAppGrantTypesList.pipe( T.Body("grant_types"), ), ), groupFilterRegex: S.optional(S.String.pipe(T.Body("group_filter_regex"))), hybridAndImplicitOptions: S.optional( AccessApplicationsCreateRequestSaasAppOIDCSaaSAppHybridAndImplicitOptions.pipe( T.Body("hybrid_and_implicit_options"), ), ), publicKey: S.optional(S.String.pipe(T.Body("public_key"))), redirectUris: S.optional( AccessApplicationsCreateRequestSaasAppOIDCSaaSAppRedirectUrisList.pipe( T.Body("redirect_uris"), ), ), refreshTokenOptions: S.optional( AccessApplicationsCreateRequestSaasAppOIDCSaaSAppRefreshTokenOptions.pipe( T.Body("refresh_token_options"), ), ), scopes: S.optional( AccessApplicationsCreateRequestSaasAppOIDCSaaSAppScopesList, ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestSaasAppOIDCSaaSApp", }) as any as S.Schema; export type AccessApplicationsCreateRequestSaasApp = | AccessApplicationsCreateRequestSaasAppSAMLSaaSApp | AccessApplicationsCreateRequestSaasAppOIDCSaaSApp; export const AccessApplicationsCreateRequestSaasApp = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "authType", "consumerServiceUrl", "customAttributes", "defaultRelayState", "idpEntityId", "nameIdFormat", "nameIdTransformJsonata", "publicKey", "samlAttributeTransformJsonata", "spEntityId", "ssoEndpoint", ], [ "accessTokenLifetime", "allowPkceWithoutClientSecret", "appLauncherUrl", "authType", "clientId", "clientSecret", "customClaims", "grantTypes", "groupFilterRegex", "hybridAndImplicitOptions", "publicKey", "redirectUris", "refreshTokenOptions", "scopes", ], ]), ); export interface AccessApplicationsCreateRequestFooterLinksItem { /** The hypertext in the footer link. */ name: string; /** the hyperlink in the footer link. */ url: string; } export const AccessApplicationsCreateRequestFooterLinksItem = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.String, url: S.String, }), ).annotate({ identifier: "AccessApplicationsCreateRequestFooterLinksItem", }) as any as S.Schema; export type AccessApplicationsCreateRequestFooterLinksList = Array; export const AccessApplicationsCreateRequestFooterLinksList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestFooterLinksItem, ) as any as S.Schema; export interface AccessApplicationsCreateRequestLandingPageDesign { /** The background color of the log in button on the landing page. */ buttonColor?: string; /** The color of the text in the log in button on the landing page. */ buttonTextColor?: string; /** The URL of the image shown on the landing page. */ imageUrl?: string; /** The message shown on the landing page. */ message?: string; /** The title shown on the landing page. */ title?: string; } export const AccessApplicationsCreateRequestLandingPageDesign = /*@__PURE__*/ S.suspend(() => S.Struct({ buttonColor: S.optional(S.String.pipe(T.Body("button_color"))), buttonTextColor: S.optional(S.String.pipe(T.Body("button_text_color"))), imageUrl: S.optional(S.String.pipe(T.Body("image_url"))), message: S.optional(S.String), title: S.optional(S.String), }), ).annotate({ identifier: "AccessApplicationsCreateRequestLandingPageDesign", }) as any as S.Schema; export type AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItemProtocol = "SSH"; export const AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItemProtocol = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesValueList = Array; export const AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesMap = { [key: string]: | AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesValueList | undefined; }; export const AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesMap = /*@__PURE__*/ S.Record( S.String, AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesValueList, ) as any as S.Schema; export interface AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItem { /** The port that the targets use for the chosen communication protocol. A port cannot be assigned to multiple protocols. */ port: number; /** The communication protocol your application secures. */ protocol: | AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItemProtocol | (string & {}); /** Contains a map of target attribute keys to target attribute values. */ targetAttributes: AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesMap; } export const AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItem = /*@__PURE__*/ S.suspend(() => S.Struct({ port: S.Number, protocol: AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItemProtocol, targetAttributes: AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesMap.pipe( T.Body("target_attributes"), ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItem", }) as any as S.Schema; export type AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationList = Array; export const AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationItem, ) as any as S.Schema; export type AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItemProtocol = "RDP"; export const AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItemProtocol = /*@__PURE__*/ S.String; export type AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesValueList = Array; export const AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesMap = { [key: string]: | AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesValueList | undefined; }; export const AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesMap = /*@__PURE__*/ S.Record( S.String, AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesValueList, ) as any as S.Schema; export interface AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItem { /** The port that the targets use for the chosen communication protocol. A port cannot be assigned to multiple protocols. */ port: number; /** The communication protocol your application secures. */ protocol: | AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItemProtocol | (string & {}); /** Contains a map of target attribute keys to target attribute values. */ targetAttributes: AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesMap; } export const AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItem = /*@__PURE__*/ S.suspend(() => S.Struct({ port: S.Number, protocol: AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItemProtocol, targetAttributes: AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesMap.pipe( T.Body("target_attributes"), ), }), ).annotate({ identifier: "AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItem", }) as any as S.Schema; export type AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationList = Array; export const AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationItem, ) as any as S.Schema; export type AccessApplicationsCreateRequestTargetCriteria = | AccessApplicationsCreateRequestTargetCriteriaInfrastructureApplicationList | AccessApplicationsCreateRequestTargetCriteriaBrowserRDPApplicationList; export const AccessApplicationsCreateRequestTargetCriteria = /*@__PURE__*/ S.Unknown.pipe(T.UnionCases([[], []])); export interface CreateAccessApplicationForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string; /** The application type. */ type?: AccessApplicationsCreateRequestType; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean; /** Enables loading application content in an iFrame. */ allowIframe?: boolean; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsCreateRequestAllowedIdpsList; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean; corsHeaders?: AccessApplicationsCreateRequestCorsHeadersSelfHostedApplication; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsCreateRequestCustomPagesList; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsCreateRequestDestinationsList; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateRequestMfaConfig; /** The name of the application. */ name?: string; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsCreateRequestOauthConfiguration; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean; /** The policies that Access applies to the application, in ascending order of precedence. Items can reference existing policies or create new policies exclusive to the application. Reusable and inline policies are mutually exclusive. */ policies?: AccessApplicationsCreateForAccountRequestPolicies; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsCreateRequestScimConfig; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsCreateRequestSelfHostedDomainsList; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsCreateRequestTagsList; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean; saasApp?: AccessApplicationsCreateRequestSaasApp; /** The image URL of the logo shown in the App Launcher header. */ appLauncherLogoUrl?: string; /** The background color of the App Launcher page. */ bgColor?: string; /** The links in the App Launcher footer. */ footerLinks?: AccessApplicationsCreateRequestFooterLinksList; /** The background color of the App Launcher header. */ headerBgColor?: string; /** The design of the App Launcher landing page shown to users when they log in. */ landingPageDesign?: AccessApplicationsCreateRequestLandingPageDesign; /** Determines when to skip the App Launcher landing page. */ skipAppLauncherLoginPage?: boolean; targetCriteria?: AccessApplicationsCreateRequestTargetCriteria; } export const CreateAccessApplicationForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), domain: S.optional(S.String), type: S.optional(AccessApplicationsCreateRequestType), allowAuthenticateViaWarp: S.optional( S.Boolean.pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.Boolean.pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( AccessApplicationsCreateRequestAllowedIdpsList.pipe( T.Body("allowed_idps"), ), ), appLauncherVisible: S.optional( S.Boolean.pipe(T.Body("app_launcher_visible")), ), autoRedirectToIdentity: S.optional( S.Boolean.pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( AccessApplicationsCreateRequestCorsHeadersSelfHostedApplication.pipe( T.Body("cors_headers"), ), ), customDenyMessage: S.optional( S.String.pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional(S.String.pipe(T.Body("custom_deny_url"))), customNonIdentityDenyUrl: S.optional( S.String.pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( AccessApplicationsCreateRequestCustomPagesList.pipe( T.Body("custom_pages"), ), ), destinations: S.optional(AccessApplicationsCreateRequestDestinationsList), eagerRedirectCookieSetting: S.optional( S.Boolean.pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.Boolean.pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.Boolean.pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.String.pipe(T.Body("logo_url"))), mfaConfig: S.optional( AccessApplicationsCreateRequestMfaConfig.pipe(T.Body("mfa_config")), ), name: S.optional(S.String), oauthConfiguration: S.optional( AccessApplicationsCreateRequestOauthConfiguration.pipe( T.Body("oauth_configuration"), ), ), optionsPreflightBypass: S.optional( S.Boolean.pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.Boolean.pipe(T.Body("path_cookie_attribute")), ), policies: S.optional(AccessApplicationsCreateForAccountRequestPolicies), readServiceTokensFromHeader: S.optional( S.String.pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.String.pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( AccessApplicationsCreateRequestScimConfig.pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( AccessApplicationsCreateRequestSelfHostedDomainsList.pipe( T.Body("self_hosted_domains"), ), ), service_auth_401_redirect: S.optional(S.Boolean), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), skipInterstitial: S.optional(S.Boolean.pipe(T.Body("skip_interstitial"))), tags: S.optional(AccessApplicationsCreateRequestTagsList), useClientlessIsolationAppLauncherUrl: S.optional( S.Boolean.pipe(T.Body("use_clientless_isolation_app_launcher_url")), ), saasApp: S.optional( AccessApplicationsCreateRequestSaasApp.pipe(T.Body("saas_app")), ), appLauncherLogoUrl: S.optional( S.String.pipe(T.Body("app_launcher_logo_url")), ), bgColor: S.optional(S.String.pipe(T.Body("bg_color"))), footerLinks: S.optional( AccessApplicationsCreateRequestFooterLinksList.pipe( T.Body("footer_links"), ), ), headerBgColor: S.optional(S.String.pipe(T.Body("header_bg_color"))), landingPageDesign: S.optional( AccessApplicationsCreateRequestLandingPageDesign.pipe( T.Body("landing_page_design"), ), ), skipAppLauncherLoginPage: S.optional( S.Boolean.pipe(T.Body("skip_app_launcher_login_page")), ), targetCriteria: S.optional( AccessApplicationsCreateRequestTargetCriteria.pipe( T.Body("target_criteria"), ), ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/apps", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessApplicationForAccountRequest", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsCreateResultSelfHostedApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSelfHostedApplicationAllowedIdpsList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationCorsHeadersAllowedHeadersList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationCorsHeadersAllowedHeadersList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationCorsHeadersAllowedMethodsItem = | "GET" | "POST" | "HEAD" | "PUT" | "DELETE" | "CONNECT" | "OPTIONS" | "TRACE" | "PATCH"; export const AccessApplicationsCreateResultSelfHostedApplicationCorsHeadersAllowedMethodsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSelfHostedApplicationCorsHeadersAllowedMethodsList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationCorsHeadersAllowedMethodsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSelfHostedApplicationCorsHeadersAllowedMethodsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationCorsHeadersAllowedOriginsList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationCorsHeadersAllowedOriginsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationCorsHeaders { /** Allows all HTTP request headers. */ allowAllHeaders?: boolean | null; /** Allows all HTTP request methods. */ allowAllMethods?: boolean | null; /** Allows all origins. */ allowAllOrigins?: boolean | null; /** When set to `true`, includes credentials (cookies, authorization headers, or TLS client certificates) with requests. */ allowCredentials?: boolean | null; /** Allowed HTTP request headers. */ allowedHeaders?: AccessApplicationsCreateResultSelfHostedApplicationCorsHeadersAllowedHeadersList | null; /** Allowed HTTP request methods. */ allowedMethods?: AccessApplicationsCreateResultSelfHostedApplicationCorsHeadersAllowedMethodsList | null; /** Allowed origins. */ allowedOrigins?: AccessApplicationsCreateResultSelfHostedApplicationCorsHeadersAllowedOriginsList | null; /** The maximum number of seconds the results of a preflight request can be cached. */ maxAge?: number | null; } export const AccessApplicationsCreateResultSelfHostedApplicationCorsHeaders = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAllHeaders: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_all_headers")), ), allowAllMethods: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_all_methods")), ), allowAllOrigins: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_all_origins")), ), allowCredentials: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_credentials")), ), allowedHeaders: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationCorsHeadersAllowedHeadersList, ).pipe(T.Body("allowed_headers")), ), allowedMethods: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationCorsHeadersAllowedMethodsList, ).pipe(T.Body("allowed_methods")), ), allowedOrigins: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationCorsHeadersAllowedOriginsList, ).pipe(T.Body("allowed_origins")), ), maxAge: S.optional(S.NullOr(S.Number).pipe(T.Body("max_age"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationCorsHeaders", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationCustomPagesList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPublicDestination { type?: AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemWorkerDestination { type: AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationDestinationsItem = | AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPublicDestination | AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPrivateDestination | AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemWorkerDestination | AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllWorkersDestination | AccessApplicationsCreateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsCreateResultSelfHostedApplicationDestinationsList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSelfHostedApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultSelfHostedApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant { /** The lifetime of the access token. Must be in the format `300ms` or `2h45m`. Valid time units are ns, us (or µs), ms, s, m, h. */ accessTokenLifetime?: string | null; /** The duration of the OAuth session. Must be in the format `300ms` or `2h45m`. Valid time units are ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant = /*@__PURE__*/ S.suspend(() => S.Struct({ accessTokenLifetime: S.optional( S.NullOr(S.String).pipe(T.Body("access_token_lifetime")), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsCreateResultSelfHostedApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization { /** The ID of your Github identity provider. */ identityProviderId: string; /** The name of the organization. */ name: string; /** The name of the team */ team?: string | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization = /*@__PURE__*/ S.suspend(() => S.Struct({ identityProviderId: S.String.pipe(T.Body("identity_provider_id")), name: S.String, team: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule { githubOrganization: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule = /*@__PURE__*/ S.suspend(() => S.Struct({ githubOrganization: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization.pipe( T.Body("github-organization"), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember { /** Identifier. */ accountId?: string | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.optional(S.NullOr(S.String).pipe(T.Body("account_id"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule { cloudflareAccountMember: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = /*@__PURE__*/ S.suspend(() => S.Struct({ cloudflareAccountMember: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember.pipe( T.Body("cloudflare_account_member"), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule { group?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule = /*@__PURE__*/ S.suspend(() => S.Struct({ group: S.optional(S.NullOr(S.Unknown)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule { anyValidServiceToken?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = /*@__PURE__*/ S.suspend(() => S.Struct({ anyValidServiceToken: S.optional( S.NullOr(S.Unknown).pipe(T.Body("any_valid_service_token")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule { authContext?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule = /*@__PURE__*/ S.suspend(() => S.Struct({ authContext: S.optional(S.NullOr(S.Unknown).pipe(T.Body("auth_context"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule { authMethod?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule = /*@__PURE__*/ S.suspend(() => S.Struct({ authMethod: S.optional(S.NullOr(S.Unknown).pipe(T.Body("auth_method"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule { azureAD?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule = /*@__PURE__*/ S.suspend(() => S.Struct({ azureAD: S.optional(S.NullOr(S.Unknown)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule { certificate?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule = /*@__PURE__*/ S.suspend(() => S.Struct({ certificate: S.optional(S.NullOr(S.Unknown)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule { commonName?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule = /*@__PURE__*/ S.suspend(() => S.Struct({ commonName: S.optional(S.NullOr(S.Unknown).pipe(T.Body("common_name"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule { geo?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule = /*@__PURE__*/ S.suspend(() => S.Struct({ geo: S.optional(S.NullOr(S.Unknown)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule { devicePosture?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule = /*@__PURE__*/ S.suspend(() => S.Struct({ devicePosture: S.optional( S.NullOr(S.Unknown).pipe(T.Body("device_posture")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule { emailDomain?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule = /*@__PURE__*/ S.suspend(() => S.Struct({ emailDomain: S.optional(S.NullOr(S.Unknown).pipe(T.Body("email_domain"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule { emailList?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule = /*@__PURE__*/ S.suspend(() => S.Struct({ emailList: S.optional(S.NullOr(S.Unknown).pipe(T.Body("email_list"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule { email?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule = /*@__PURE__*/ S.suspend(() => S.Struct({ email: S.optional(S.NullOr(S.Unknown)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule { everyone?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule = /*@__PURE__*/ S.suspend(() => S.Struct({ everyone: S.optional(S.NullOr(S.Unknown)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule { externalEvaluation?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule = /*@__PURE__*/ S.suspend(() => S.Struct({ externalEvaluation: S.optional( S.NullOr(S.Unknown).pipe(T.Body("external_evaluation")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule { "github-organization"?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule = /*@__PURE__*/ S.suspend(() => S.Struct({ "github-organization": S.optional(S.NullOr(S.Unknown)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule { gsuite?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule = /*@__PURE__*/ S.suspend(() => S.Struct({ gsuite: S.optional(S.NullOr(S.Unknown)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule { loginMethod?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule = /*@__PURE__*/ S.suspend(() => S.Struct({ loginMethod: S.optional(S.NullOr(S.Unknown).pipe(T.Body("login_method"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule { ipList?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule = /*@__PURE__*/ S.suspend(() => S.Struct({ ipList: S.optional(S.NullOr(S.Unknown).pipe(T.Body("ip_list"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule { ip?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule = /*@__PURE__*/ S.suspend(() => S.Struct({ ip: S.optional(S.NullOr(S.Unknown)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule { okta?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule = /*@__PURE__*/ S.suspend(() => S.Struct({ okta: S.optional(S.NullOr(S.Unknown)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule { saml?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule = /*@__PURE__*/ S.suspend(() => S.Struct({ saml: S.optional(S.NullOr(S.Unknown)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule { oidc?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = /*@__PURE__*/ S.suspend(() => S.Struct({ oidc: S.optional(S.NullOr(S.Unknown)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule { serviceToken?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule = /*@__PURE__*/ S.suspend(() => S.Struct({ serviceToken: S.optional( S.NullOr(S.Unknown).pipe(T.Body("service_token")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule { linkedAppToken?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = /*@__PURE__*/ S.suspend(() => S.Struct({ linkedAppToken: S.optional( S.NullOr(S.Unknown).pipe(T.Body("linked_app_token")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule { userRiskScore?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: S.optional( S.NullOr(S.Unknown).pipe(T.Body("user_risk_score")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule { cloudflareAccountMember?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = /*@__PURE__*/ S.suspend(() => S.Struct({ cloudflareAccountMember: S.optional( S.NullOr(S.Unknown).pipe(T.Body("cloudflare_account_member")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationPoliciesList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme = "httpbasic"; export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic { /** Password used to authenticate with the remote SCIM service. */ password: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme; /** User name used to authenticate with the remote SCIM service. */ user: string; } export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = /*@__PURE__*/ S.suspend(() => S.Struct({ password: S.String, scheme: AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme, user: S.String, }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme = "oauthbearertoken"; export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken { /** Token used to authenticate with the remote SCIM service. */ token: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme; } export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = /*@__PURE__*/ S.suspend(() => S.Struct({ token: S.String, scheme: AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme = "oauth2"; export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 { /** URL used to generate the auth code used during token generation. */ authorizationUrl: string; /** Client ID used to authenticate when generating a token for authenticating with the remote SCIM service. */ clientId: string; /** Secret used to authenticate when generating a token for authenticating with the remove SCIM service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme; /** URL used to generate the token used to authenticate with the remote SCIM service. */ tokenUrl: string; /** The authorization scopes to request when generating the token used to authenticate with the remove SCIM service. */ scopes?: AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList | null; } export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = /*@__PURE__*/ S.suspend(() => S.Struct({ authorizationUrl: S.String.pipe(T.Body("authorization_url")), clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme, tokenUrl: S.String.pipe(T.Body("token_url")), scopes: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic { password?: unknown | null; scheme?: unknown | null; user?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = /*@__PURE__*/ S.suspend(() => S.Struct({ password: S.optional(S.NullOr(S.Unknown)), scheme: S.optional(S.NullOr(S.Unknown)), user: S.optional(S.NullOr(S.Unknown)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken { token?: unknown | null; scheme?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = /*@__PURE__*/ S.suspend(() => S.Struct({ token: S.optional(S.NullOr(S.Unknown)), scheme: S.optional(S.NullOr(S.Unknown)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken", }) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 { authorizationUrl?: unknown | null; clientId?: unknown | null; clientSecret?: unknown | null; } export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = /*@__PURE__*/ S.suspend(() => S.Struct({ authorizationUrl: S.optional( S.NullOr(S.Unknown).pipe(T.Body("authorization_url")), ), clientId: S.optional(S.NullOr(S.Unknown).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.Unknown).pipe(T.Body("client_secret")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], [ "authorizationUrl", "clientId", "clientSecret", "scheme", "tokenUrl", "scopes", ], ["clientId", "clientSecret", "scheme"], [], ]), ); export interface AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations { /** Whether or not this mapping applies to create (POST) operations. */ create?: boolean | null; /** Whether or not this mapping applies to DELETE operations. */ delete?: boolean | null; /** Whether or not this mapping applies to update (PATCH/PUT) operations. */ update?: boolean | null; } export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations = /*@__PURE__*/ S.suspend(() => S.Struct({ create: S.optional(S.NullOr(S.Boolean)), delete: S.optional(S.NullOr(S.Boolean)), update: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations, ), ), strictness: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsList | null; } export const AccessApplicationsCreateResultSelfHostedApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationSelfHostedDomainsList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultSelfHostedApplicationTagsList = Array; export const AccessApplicationsCreateResultSelfHostedApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultSelfHostedApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; /** The application type. */ type: AccessApplicationsCreateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsCreateResultSelfHostedApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsCreateResultSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsCreateResultSelfHostedApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsCreateResultSelfHostedApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultSelfHostedApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsCreateResultSelfHostedApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsCreateResultSelfHostedApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsCreateResultSelfHostedApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsCreateResultSelfHostedApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, type: AccessApplicationsCreateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesList, ), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsCreateResultSelfHostedApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSelfHostedApplication", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationAllowedIdpsList = Array; export const AccessApplicationsCreateResultSaaSApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationCustomPagesList = Array; export const AccessApplicationsCreateResultSaaSApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultSaaSApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsCreateResultSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultSaaSApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireList = Array; export const AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultSaaSApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsCreateResultSaaSApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultSaaSApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsCreateResultSaaSApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationPoliciesList = Array; export const AccessApplicationsCreateResultSaaSApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppAuthType = | "saml" | "oidc"; export const AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppAuthType = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat = | "urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" | "urn:oasis:names:tc:SAML:2.0:attrname-format:basic" | "urn:oasis:names:tc:SAML:2.0:attrname-format:uri"; export const AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem { /** The UID of the IdP. */ idpId?: string | null; /** The name of the IdP provided attribute. */ sourceName?: string | null; } export const AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem = /*@__PURE__*/ S.suspend(() => S.Struct({ idpId: S.optional(S.NullOr(S.String).pipe(T.Body("idp_id"))), sourceName: S.optional(S.NullOr(S.String).pipe(T.Body("source_name"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList = Array; export const AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource { /** The name of the IdP attribute. */ name?: string | null; /** A mapping from IdP ID to attribute name. */ nameByIdp?: AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList | null; } export const AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.NullOr(S.String)), nameByIdp: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList, ).pipe(T.Body("name_by_idp")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource", }) as any as S.Schema; export interface AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem { /** The SAML FriendlyName of the attribute. */ friendlyName?: string | null; /** The name of the attribute. */ name?: string | null; /** A globally unique name for an identity or service provider. */ nameFormat?: AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat | null; /** If the attribute is required when building a SAML assertion. */ required?: boolean | null; source?: AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource | null; } export const AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ friendlyName: S.optional( S.NullOr(S.String).pipe(T.Body("friendly_name")), ), name: S.optional(S.NullOr(S.String)), nameFormat: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat, ).pipe(T.Body("name_format")), ), required: S.optional(S.NullOr(S.Boolean)), source: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList = Array; export const AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem, ) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat = | "id" | "email"; export const AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSApp { /** Optional identifier indicating the authentication protocol used for the saas app. Required for OIDC. Default if unset is "saml" */ authType?: AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppAuthType | null; /** The service provider's endpoint that is responsible for receiving and parsing a SAML assertion. */ consumerServiceUrl?: string | null; customAttributes?: AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList | null; /** The URL that the user will be redirected to after a successful login for IDP initiated logins. */ defaultRelayState?: string | null; /** The unique identifier for your SaaS application. */ idpEntityId?: string | null; /** The format of the name identifier sent to the SaaS application. */ nameIdFormat?: AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat | null; /** A [JSONata](https://jsonata.org/) expression that transforms an application's user identities into a NameID value for its SAML assertion. This expression should evaluate to a singular string. The output of this expression can override the `name_id_format` setting. */ nameIdTransformJsonata?: string | null; /** The Access public certificate that will be used to verify your identity. */ publicKey?: string | null; /** A [JSONata] (https://jsonata.org/) expression that transforms an application's user identities into attribute assertions in the SAML response. The expression can transform id, email, name, and groups values. It can also transform fields listed in the saml_attributes or oidc_fields of the identity provider used to authenticate. The output of this expression must be a JSON object. */ samlAttributeTransformJsonata?: string | null; /** A globally unique name for an identity or service provider. */ spEntityId?: string | null; /** The endpoint where your SaaS application will send login requests. */ ssoEndpoint?: string | null; } export const AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSApp = /*@__PURE__*/ S.suspend(() => S.Struct({ authType: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppAuthType, ).pipe(T.Body("auth_type")), ), consumerServiceUrl: S.optional( S.NullOr(S.String).pipe(T.Body("consumer_service_url")), ), customAttributes: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList, ).pipe(T.Body("custom_attributes")), ), defaultRelayState: S.optional( S.NullOr(S.String).pipe(T.Body("default_relay_state")), ), idpEntityId: S.optional(S.NullOr(S.String).pipe(T.Body("idp_entity_id"))), nameIdFormat: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat, ).pipe(T.Body("name_id_format")), ), nameIdTransformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("name_id_transform_jsonata")), ), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), samlAttributeTransformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("saml_attribute_transform_jsonata")), ), spEntityId: S.optional(S.NullOr(S.String).pipe(T.Body("sp_entity_id"))), ssoEndpoint: S.optional(S.NullOr(S.String).pipe(T.Body("sso_endpoint"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSApp", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppAuthType = | "saml" | "oidc"; export const AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppAuthType = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope = | "groups" | "profile" | "email" | "openid"; export const AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap = { [key: string]: string | undefined }; export const AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource { /** The name of the IdP claim. */ name?: string | null; /** A mapping from IdP ID to claim name. */ nameByIdp?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap | null; } export const AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.NullOr(S.String)), nameByIdp: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap, ).pipe(T.Body("name_by_idp")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource", }) as any as S.Schema; export interface AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem { /** The name of the claim. */ name?: string | null; /** If the claim is required when building an OIDC token. */ required?: boolean | null; /** The scope of the claim. */ scope?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope | null; source?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource | null; } export const AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.NullOr(S.String)), required: S.optional(S.NullOr(S.Boolean)), scope: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope, ), ), source: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList = Array; export const AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesItem = | "authorization_code" | "authorization_code_with_pkce" | "refresh_tokens" | "hybrid" | "implicit"; export const AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList = Array; export const AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions { /** If an Access Token should be returned from the OIDC Authorization endpoint */ returnAccessTokenFromAuthorizationEndpoint?: boolean | null; /** If an ID Token should be returned from the OIDC Authorization endpoint */ returnIdTokenFromAuthorizationEndpoint?: boolean | null; } export const AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions = /*@__PURE__*/ S.suspend(() => S.Struct({ returnAccessTokenFromAuthorizationEndpoint: S.optional( S.NullOr(S.Boolean).pipe( T.Body("return_access_token_from_authorization_endpoint"), ), ), returnIdTokenFromAuthorizationEndpoint: S.optional( S.NullOr(S.Boolean).pipe( T.Body("return_id_token_from_authorization_endpoint"), ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList = Array; export const AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions { /** How long a refresh token will be valid for after creation. Valid units are m,h,d. Must be longer than 1m. */ lifetime?: string | null; } export const AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions = /*@__PURE__*/ S.suspend(() => S.Struct({ lifetime: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppScopesItem = | "openid" | "groups" | "email" | "profile"; export const AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppScopesItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppScopesList = Array; export const AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppScopesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppScopesItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSApp { /** The lifetime of the OIDC Access Token after creation. Valid units are m,h. Must be greater than or equal to 1m and less than or equal to 24h. */ accessTokenLifetime?: string | null; /** If client secret should be required on the token endpoint when authorization_code_with_pkce grant is used. */ allowPkceWithoutClientSecret?: boolean | null; /** The URL where this applications tile redirects users */ appLauncherUrl?: string | null; /** Identifier of the authentication protocol used for the saas app. Required for OIDC. */ authType?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppAuthType | null; /** The application client id */ clientId?: string | null; /** The application client secret, only returned on POST request. */ clientSecret?: string | null; customClaims?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList | null; /** The OIDC flows supported by this application */ grantTypes?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList | null; /** A regex to filter Cloudflare groups returned in ID token and userinfo endpoint */ groupFilterRegex?: string | null; hybridAndImplicitOptions?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions | null; /** The Access public certificate that will be used to verify your identity. */ publicKey?: string | null; /** The permitted URL's for Cloudflare to return Authorization codes and Access/ID tokens */ redirectUris?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList | null; refreshTokenOptions?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions | null; /** Define the user information shared with access, "offline_access" scope will be automatically enabled if refresh tokens are enabled */ scopes?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppScopesList | null; } export const AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSApp = /*@__PURE__*/ S.suspend(() => S.Struct({ accessTokenLifetime: S.optional( S.NullOr(S.String).pipe(T.Body("access_token_lifetime")), ), allowPkceWithoutClientSecret: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_pkce_without_client_secret")), ), appLauncherUrl: S.optional( S.NullOr(S.String).pipe(T.Body("app_launcher_url")), ), authType: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppAuthType, ).pipe(T.Body("auth_type")), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), customClaims: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList, ).pipe(T.Body("custom_claims")), ), grantTypes: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList, ).pipe(T.Body("grant_types")), ), groupFilterRegex: S.optional( S.NullOr(S.String).pipe(T.Body("group_filter_regex")), ), hybridAndImplicitOptions: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions, ).pipe(T.Body("hybrid_and_implicit_options")), ), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), redirectUris: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList, ).pipe(T.Body("redirect_uris")), ), refreshTokenOptions: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions, ).pipe(T.Body("refresh_token_options")), ), scopes: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppScopesList, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSApp", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationSaasApp = | AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSApp | AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSApp; export const AccessApplicationsCreateResultSaaSApplicationSaasApp = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "authType", "consumerServiceUrl", "customAttributes", "defaultRelayState", "idpEntityId", "nameIdFormat", "nameIdTransformJsonata", "publicKey", "samlAttributeTransformJsonata", "spEntityId", "ssoEndpoint", ], [ "accessTokenLifetime", "allowPkceWithoutClientSecret", "appLauncherUrl", "authType", "clientId", "clientSecret", "customClaims", "grantTypes", "groupFilterRegex", "hybridAndImplicitOptions", "publicKey", "redirectUris", "refreshTokenOptions", "scopes", ], ]), ); export type AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsCreateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsCreateResultSaaSApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsCreateResultSaaSApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsCreateResultSaaSApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultSaaSApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsCreateResultSaaSApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsCreateResultSaaSApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationScimConfigMappingsList = Array; export const AccessApplicationsCreateResultSaaSApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultSaaSApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsCreateResultSaaSApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsCreateResultSaaSApplicationScimConfigMappingsList | null; } export const AccessApplicationsCreateResultSaaSApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultSaaSApplicationTagsList = Array; export const AccessApplicationsCreateResultSaaSApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultSaaSApplication { /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsCreateResultSaaSApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsCreateResultSaaSApplicationCustomPagesList | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsCreateResultSaaSApplicationPoliciesList | null; saasApp?: AccessApplicationsCreateResultSaaSApplicationSaasApp | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsCreateResultSaaSApplicationScimConfig | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsCreateResultSaaSApplicationTagsList | null; /** The application type. */ type?: AccessApplicationsCreateResultSelfHostedApplicationType | null; } export const AccessApplicationsCreateResultSaaSApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customPages: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr(AccessApplicationsCreateResultSaaSApplicationPoliciesList), ), saasApp: S.optional( S.NullOr(AccessApplicationsCreateResultSaaSApplicationSaasApp).pipe( T.Body("saas_app"), ), ), scimConfig: S.optional( S.NullOr(AccessApplicationsCreateResultSaaSApplicationScimConfig).pipe( T.Body("scim_config"), ), ), tags: S.optional( S.NullOr(AccessApplicationsCreateResultSaaSApplicationTagsList), ), type: S.optional( S.NullOr(AccessApplicationsCreateResultSelfHostedApplicationType), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultSaaSApplication", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsCreateResultBrowserSSHApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserSSHApplicationAllowedIdpsList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationCustomPagesList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPublicDestination { type?: AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemWorkerDestination { type: AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItem = | AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPublicDestination | AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPrivateDestination | AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemWorkerDestination | AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllWorkersDestination | AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsCreateResultBrowserSSHApplicationDestinationsList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserSSHApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserSSHApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultBrowserSSHApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsCreateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsCreateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsCreateResultBrowserSSHApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsCreateResultBrowserSSHApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsCreateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsCreateResultBrowserSSHApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationPoliciesList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsCreateResultBrowserSSHApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserSSHApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsCreateResultBrowserSSHApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationScimConfigMappingsList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserSSHApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserSSHApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsCreateResultBrowserSSHApplicationScimConfigMappingsList | null; } export const AccessApplicationsCreateResultBrowserSSHApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationSelfHostedDomainsList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserSSHApplicationTagsList = Array; export const AccessApplicationsCreateResultBrowserSSHApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserSSHApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; /** The application type. */ type: AccessApplicationsCreateResultBrowserSSHApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsCreateResultBrowserSSHApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsCreateResultSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsCreateResultBrowserSSHApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsCreateResultBrowserSSHApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultBrowserSSHApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsCreateResultBrowserSSHApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsCreateResultBrowserSSHApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsCreateResultBrowserSSHApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsCreateResultBrowserSSHApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsCreateResultBrowserSSHApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsCreateResultBrowserSSHApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, type: AccessApplicationsCreateResultBrowserSSHApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationPoliciesList, ), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserSSHApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsCreateResultBrowserSSHApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserSSHApplication", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsCreateResultBrowserVNCApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserVNCApplicationAllowedIdpsList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationCustomPagesList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPublicDestination { type?: AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemWorkerDestination { type: AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItem = | AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPublicDestination | AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPrivateDestination | AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemWorkerDestination | AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllWorkersDestination | AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsCreateResultBrowserVNCApplicationDestinationsList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserVNCApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserVNCApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultBrowserVNCApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsCreateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsCreateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsCreateResultBrowserVNCApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsCreateResultBrowserVNCApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsCreateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsCreateResultBrowserVNCApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationPoliciesList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsCreateResultBrowserVNCApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserVNCApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsCreateResultBrowserVNCApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationScimConfigMappingsList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserVNCApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserVNCApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsCreateResultBrowserVNCApplicationScimConfigMappingsList | null; } export const AccessApplicationsCreateResultBrowserVNCApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationSelfHostedDomainsList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserVNCApplicationTagsList = Array; export const AccessApplicationsCreateResultBrowserVNCApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserVNCApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; /** The application type. */ type: AccessApplicationsCreateResultBrowserVNCApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsCreateResultBrowserVNCApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsCreateResultSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsCreateResultBrowserVNCApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsCreateResultBrowserVNCApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultBrowserVNCApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsCreateResultBrowserVNCApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsCreateResultBrowserVNCApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsCreateResultBrowserVNCApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsCreateResultBrowserVNCApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsCreateResultBrowserVNCApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsCreateResultBrowserVNCApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, type: AccessApplicationsCreateResultBrowserVNCApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationPoliciesList, ), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserVNCApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsCreateResultBrowserVNCApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserVNCApplication", }) as any as S.Schema; export type AccessApplicationsCreateResultAppLauncherApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsCreateResultAppLauncherApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultAppLauncherApplicationAllowedIdpsList = Array; export const AccessApplicationsCreateResultAppLauncherApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultAppLauncherApplicationCustomPagesList = Array; export const AccessApplicationsCreateResultAppLauncherApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateResultAppLauncherApplicationFooterLinksItem = AccessApplicationsCreateRequestFooterLinksItem; export const AccessApplicationsCreateResultAppLauncherApplicationFooterLinksItem = AccessApplicationsCreateRequestFooterLinksItem; export type AccessApplicationsCreateResultAppLauncherApplicationFooterLinksList = Array; export const AccessApplicationsCreateResultAppLauncherApplicationFooterLinksList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestFooterLinksItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign { /** The background color of the log in button on the landing page. */ buttonColor?: string | null; /** The color of the text in the log in button on the landing page. */ buttonTextColor?: string | null; /** The URL of the image shown on the landing page. */ imageUrl?: string | null; /** The message shown on the landing page. */ message?: string | null; /** The title shown on the landing page. */ title?: string | null; } export const AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign = /*@__PURE__*/ S.suspend(() => S.Struct({ buttonColor: S.optional(S.NullOr(S.String).pipe(T.Body("button_color"))), buttonTextColor: S.optional( S.NullOr(S.String).pipe(T.Body("button_text_color")), ), imageUrl: S.optional(S.NullOr(S.String).pipe(T.Body("image_url"))), message: S.optional(S.NullOr(S.String)), title: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign", }) as any as S.Schema; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireList = Array; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultAppLauncherApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultAppLauncherApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsCreateResultAppLauncherApplicationPoliciesList = Array; export const AccessApplicationsCreateResultAppLauncherApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultAppLauncherApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultAppLauncherApplication { /** The application type. */ type: AccessApplicationsCreateResultAppLauncherApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsCreateResultAppLauncherApplicationAllowedIdpsList | null; /** The image URL of the logo shown in the App Launcher header. */ appLauncherLogoUrl?: string | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The background color of the App Launcher page. */ bgColor?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsCreateResultAppLauncherApplicationCustomPagesList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** The links in the App Launcher footer. */ footerLinks?: AccessApplicationsCreateResultAppLauncherApplicationFooterLinksList | null; /** The background color of the App Launcher header. */ headerBgColor?: string | null; /** The design of the App Launcher landing page shown to users when they log in. */ landingPageDesign?: AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsCreateResultAppLauncherApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Determines when to skip the App Launcher landing page. */ skipAppLauncherLoginPage?: boolean | null; } export const AccessApplicationsCreateResultAppLauncherApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultAppLauncherApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherLogoUrl: S.optional( S.NullOr(S.String).pipe(T.Body("app_launcher_logo_url")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), bgColor: S.optional(S.NullOr(S.String).pipe(T.Body("bg_color"))), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), footerLinks: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationFooterLinksList, ).pipe(T.Body("footer_links")), ), headerBgColor: S.optional( S.NullOr(S.String).pipe(T.Body("header_bg_color")), ), landingPageDesign: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign, ).pipe(T.Body("landing_page_design")), ), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationPoliciesList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipAppLauncherLoginPage: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_app_launcher_login_page")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultAppLauncherApplication", }) as any as S.Schema; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationAllowedIdpsList = Array; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationCustomPagesList = Array; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList = Array; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesList = Array; export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplication { /** The application type. */ type: AccessApplicationsCreateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationCustomPagesList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplication", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationAllowedIdpsList = Array; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationCustomPagesList = Array; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireList = Array; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesList = Array; export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserIsolationPermissionsApplication { /** The application type. */ type: AccessApplicationsCreateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationCustomPagesList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultBrowserIsolationPermissionsApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserIsolationPermissionsApplication", }) as any as S.Schema; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationAllowedIdpsList = Array; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationCustomPagesList = Array; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList = Array; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesList = Array; export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplication { /** The application type. */ type: AccessApplicationsCreateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationCustomPagesList | null; /** The proxy endpoint domain in the format: 10 alphanumeric characters followed by .proxy.cloudflare-gateway.com */ domain?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplication", }) as any as S.Schema; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultBookmarkApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsCreateResultBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBookmarkApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBookmarkApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBookmarkApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireList = Array; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBookmarkApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsCreateResultBookmarkApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultBookmarkApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsCreateResultBookmarkApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsCreateResultBookmarkApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultBookmarkApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsCreateResultBookmarkApplicationPoliciesList = Array; export const AccessApplicationsCreateResultBookmarkApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBookmarkApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBookmarkApplicationTagsList = Array; export const AccessApplicationsCreateResultBookmarkApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultBookmarkApplication { /** UUID. */ id?: string | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** The URL or domain of the bookmark. */ domain?: string | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsCreateResultBookmarkApplicationPoliciesList | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsCreateResultBookmarkApplicationTagsList | null; /** The application type. */ type?: AccessApplicationsCreateResultSelfHostedApplicationType | null; } export const AccessApplicationsCreateResultBookmarkApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), domain: S.optional(S.NullOr(S.String)), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr(AccessApplicationsCreateResultBookmarkApplicationPoliciesList), ), tags: S.optional( S.NullOr(AccessApplicationsCreateResultBookmarkApplicationTagsList), ), type: S.optional( S.NullOr(AccessApplicationsCreateResultSelfHostedApplicationType), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBookmarkApplication", }) as any as S.Schema; export type AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItemProtocol = "SSH"; export const AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItemProtocol = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList = Array; export const AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesMap = { [key: string]: | AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList | undefined; }; export const AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesMap = /*@__PURE__*/ S.Record( S.String, AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList, ) as any as S.Schema; export interface AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItem { /** The port that the targets use for the chosen communication protocol. A port cannot be assigned to multiple protocols. */ port: number; /** The communication protocol your application secures. */ protocol: AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItemProtocol; /** Contains a map of target attribute keys to target attribute values. */ targetAttributes: AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesMap; } export const AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItem = /*@__PURE__*/ S.suspend(() => S.Struct({ port: S.Number, protocol: AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItemProtocol, targetAttributes: AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesMap.pipe( T.Body("target_attributes"), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItem", }) as any as S.Schema; export type AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaList = Array; export const AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItem, ) as any as S.Schema; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList = Array; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemConnectionRulesSsh { /** Contains the Unix usernames that may be used when connecting over SSH. */ usernames: AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList; /** Enables using Identity Provider email alias as SSH username. */ allowEmailAlias?: boolean | null; } export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemConnectionRulesSsh = /*@__PURE__*/ S.suspend(() => S.Struct({ usernames: AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList, allowEmailAlias: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_email_alias")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemConnectionRulesSsh", }) as any as S.Schema; export interface AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemConnectionRules { /** The SSH-specific rules that define how users may connect to the targets secured by your application. */ ssh?: AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemConnectionRulesSsh | null; } export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ ssh: S.optional( S.NullOr( AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemConnectionRulesSsh, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = "piv_key"; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. For infrastructure applications, only `piv_key` is supported. */ allowedAuthenticators?: AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireList = Array; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultInfrastructureApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** The rules that define how users may connect to the targets secured by your application. */ connectionRules?: AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeList | null; /** Configures multi-factor authentication (MFA) settings for infrastructure applications. */ mfaConfig?: AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireList | null; updatedAt?: string | null; } export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), connectionRules: S.optional( S.NullOr( AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemIncludeList, ), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), require: S.optional( S.NullOr( AccessApplicationsCreateResultInfrastructureApplicationPoliciesItemRequireList, ), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultInfrastructureApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsCreateResultInfrastructureApplicationPoliciesList = Array; export const AccessApplicationsCreateResultInfrastructureApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultInfrastructureApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultInfrastructureApplication { targetCriteria: AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaList; /** The application type. */ type: AccessApplicationsCreateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** Audience tag. */ aud?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsCreateResultInfrastructureApplicationPoliciesList | null; } export const AccessApplicationsCreateResultInfrastructureApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ targetCriteria: AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaList.pipe( T.Body("target_criteria"), ), type: AccessApplicationsCreateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), aud: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsCreateResultInfrastructureApplicationPoliciesList, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultInfrastructureApplication", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItemProtocol = "RDP"; export const AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItemProtocol = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap = { [key: string]: | AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList | undefined; }; export const AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap = /*@__PURE__*/ S.Record( S.String, AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItem { /** The port that the targets use for the chosen communication protocol. A port cannot be assigned to multiple protocols. */ port: number; /** The communication protocol your application secures. */ protocol: AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItemProtocol; /** Contains a map of target attribute keys to target attribute values. */ targetAttributes: AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap; } export const AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItem = /*@__PURE__*/ S.suspend(() => S.Struct({ port: S.Number, protocol: AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItemProtocol, targetAttributes: AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap.pipe( T.Body("target_attributes"), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItem", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationAllowedIdpsList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationCustomPagesList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPublicDestination { type?: AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemWorkerDestination { type: AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItem = | AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPublicDestination | AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPrivateDestination | AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemWorkerDestination | AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllWorkersDestination | AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsCreateResultBrowserRDPApplicationDestinationsList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserRDPApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserRDPApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultBrowserRDPApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsCreateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsCreateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsCreateResultBrowserRDPApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsCreateResultBrowserRDPApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsCreateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsCreateResultBrowserRDPApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationPoliciesList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsCreateResultBrowserRDPApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultBrowserRDPApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsCreateResultBrowserRDPApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationScimConfigMappingsList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultBrowserRDPApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserRDPApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsCreateResultBrowserRDPApplicationScimConfigMappingsList | null; } export const AccessApplicationsCreateResultBrowserRDPApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationSelfHostedDomainsList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultBrowserRDPApplicationTagsList = Array; export const AccessApplicationsCreateResultBrowserRDPApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultBrowserRDPApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; targetCriteria: AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaList; /** The application type. */ type: AccessApplicationsCreateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsCreateResultBrowserRDPApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsCreateResultSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsCreateResultBrowserRDPApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsCreateResultBrowserRDPApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultBrowserRDPApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsCreateResultBrowserRDPApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsCreateResultBrowserRDPApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsCreateResultBrowserRDPApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsCreateResultBrowserRDPApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsCreateResultBrowserRDPApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsCreateResultBrowserRDPApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, targetCriteria: AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaList.pipe( T.Body("target_criteria"), ), type: AccessApplicationsCreateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationPoliciesList, ), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsCreateResultBrowserRDPApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsCreateResultBrowserRDPApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultBrowserRDPApplication", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationAllowedIdpsList = Array; export const AccessApplicationsCreateResultMcpServerApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationCustomPagesList = Array; export const AccessApplicationsCreateResultMcpServerApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPublicDestination { type?: AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsCreateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerApplicationDestinationsItemWorkerDestination { type: AccessApplicationsCreateResultMcpServerApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultMcpServerApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationDestinationsItem = | AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPublicDestination | AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPrivateDestination | AccessApplicationsCreateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsCreateResultMcpServerApplicationDestinationsItemWorkerDestination | AccessApplicationsCreateResultMcpServerApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllWorkersDestination | AccessApplicationsCreateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsCreateResultMcpServerApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsCreateResultMcpServerApplicationDestinationsList = Array; export const AccessApplicationsCreateResultMcpServerApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsCreateResultMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsCreateResultMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsCreateResultMcpServerApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsCreateResultMcpServerApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsCreateResultMcpServerApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsCreateResultMcpServerApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsCreateResultMcpServerApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsCreateResultMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireList = Array; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsCreateResultMcpServerApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultMcpServerApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsCreateResultMcpServerApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationPoliciesList = Array; export const AccessApplicationsCreateResultMcpServerApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsCreateResultMcpServerApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsCreateResultMcpServerApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsCreateResultMcpServerApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsCreateResultMcpServerApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationScimConfigMappingsList = Array; export const AccessApplicationsCreateResultMcpServerApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsCreateResultMcpServerApplicationScimConfigMappingsList | null; } export const AccessApplicationsCreateResultMcpServerApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerApplicationTagsList = Array; export const AccessApplicationsCreateResultMcpServerApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerApplication { /** The application type. */ type: AccessApplicationsCreateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsCreateResultMcpServerApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsCreateResultMcpServerApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsCreateResultMcpServerApplicationDestinationsList | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsCreateResultMcpServerApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; policies?: AccessApplicationsCreateResultMcpServerApplicationPoliciesList | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsCreateResultMcpServerApplicationScimConfig | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsCreateResultMcpServerApplicationTagsList | null; } export const AccessApplicationsCreateResultMcpServerApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowedIdps: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationDestinationsList, ), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), policies: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationPoliciesList, ), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerApplicationScimConfig, ).pipe(T.Body("scim_config")), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), tags: S.optional( S.NullOr(AccessApplicationsCreateResultMcpServerApplicationTagsList), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerApplication", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationAllowedIdpsList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationCustomPagesList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPublicDestination { type?: AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemWorkerDestination { type: AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItem = | AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPublicDestination | AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPrivateDestination | AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemWorkerDestination | AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestination | AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigMappingsList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerPortalApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigMappingsList | null; } export const AccessApplicationsCreateResultMcpServerPortalApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsCreateResultMcpServerPortalApplicationTagsList = Array; export const AccessApplicationsCreateResultMcpServerPortalApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsCreateResultMcpServerPortalApplication { /** The application type. */ type: AccessApplicationsCreateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsCreateResultMcpServerPortalApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsCreateResultMcpServerPortalApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; policies?: AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesList | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsCreateResultMcpServerPortalApplicationScimConfig | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsCreateResultMcpServerPortalApplicationTagsList | null; } export const AccessApplicationsCreateResultMcpServerPortalApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsCreateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowedIdps: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationDestinationsList, ), ), domain: S.optional(S.NullOr(S.String)), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), policies: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationPoliciesList, ), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationScimConfig, ).pipe(T.Body("scim_config")), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), tags: S.optional( S.NullOr( AccessApplicationsCreateResultMcpServerPortalApplicationTagsList, ), ), }), ).annotate({ identifier: "AccessApplicationsCreateResultMcpServerPortalApplication", }) as any as S.Schema; export type AccessApplicationsCreateResult = | AccessApplicationsCreateResultSelfHostedApplication | AccessApplicationsCreateResultSaaSApplication | AccessApplicationsCreateResultBrowserSSHApplication | AccessApplicationsCreateResultBrowserVNCApplication | AccessApplicationsCreateResultAppLauncherApplication | AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplication | AccessApplicationsCreateResultBrowserIsolationPermissionsApplication | AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplication | AccessApplicationsCreateResultBookmarkApplication | AccessApplicationsCreateResultInfrastructureApplication | AccessApplicationsCreateResultBrowserRDPApplication | AccessApplicationsCreateResultMcpServerApplication | AccessApplicationsCreateResultMcpServerPortalApplication; export const AccessApplicationsCreateResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "domain", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "id", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "customPages", "logoUrl", "name", "policies", "saasApp", "scimConfig", "tags", "type", ], [ "domain", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "domain", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "type", "id", "allowedIdps", "appLauncherLogoUrl", "aud", "autoRedirectToIdentity", "bgColor", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "footerLinks", "headerBgColor", "landingPageDesign", "name", "policies", "sessionDuration", "skipAppLauncherLoginPage", ], [ "type", "id", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "name", "policies", "sessionDuration", ], [ "type", "id", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "name", "policies", "sessionDuration", ], [ "type", "id", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "name", "policies", "sessionDuration", ], [ "id", "appLauncherVisible", "aud", "domain", "logoUrl", "name", "policies", "tags", "type", ], ["targetCriteria", "type", "id", "aud", "name", "policies"], [ "domain", "targetCriteria", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "type", "id", "allowAuthenticateViaWarp", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "httpOnlyCookieAttribute", "logoUrl", "name", "oauthConfiguration", "optionsPreflightBypass", "policies", "sameSiteCookieAttribute", "scimConfig", "sessionDuration", "tags", ], [ "type", "id", "allowAuthenticateViaWarp", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "domain", "httpOnlyCookieAttribute", "logoUrl", "name", "oauthConfiguration", "optionsPreflightBypass", "policies", "sameSiteCookieAttribute", "scimConfig", "sessionDuration", "tags", ], ]), ); export type CreateAccessApplicationResponse = AccessApplicationsCreateResult; export const CreateAccessApplicationResponse = /*@__PURE__*/ S.suspend(() => AccessApplicationsCreateResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "CreateAccessApplicationResponse", }) as any as S.Schema; export type AccessApplicationsCreateForZoneRequestPoliciesSelfHostedApplicationItem = | string | AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemAccessAppPolicyLink | AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemCase2 | InlineAccessPolicy; export const AccessApplicationsCreateForZoneRequestPoliciesSelfHostedApplicationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [], ["id", "precedence"], [ "id", "approvalGroups", "approvalRequired", "connectionRules", "isolationRequired", "mfaConfig", "precedence", "purposeJustificationPrompt", "purposeJustificationRequired", "sessionDuration", ], [ "id", "decision", "include", "exclude", "require", "name", "precedence", "approvalGroups", "approvalRequired", "isolationRequired", "purposeJustificationPrompt", "purposeJustificationRequired", "sessionDuration", ], ]), ); export type AccessApplicationsCreateForZoneRequestPoliciesSelfHostedApplicationList = Array; export const AccessApplicationsCreateForZoneRequestPoliciesSelfHostedApplicationList = /*@__PURE__*/ S.Array( AccessApplicationsCreateForZoneRequestPoliciesSelfHostedApplicationItem, ) as any as S.Schema; export type AccessApplicationsCreateForZoneRequestPolicies = | AccessApplicationsCreateForZoneRequestPoliciesSelfHostedApplicationList | AccessApplicationsCreateRequestPoliciesInfrastructureApplicationList; export const AccessApplicationsCreateForZoneRequestPolicies = /*@__PURE__*/ S.Unknown.pipe(T.UnionCases([[], []])); export interface CreateAccessApplicationForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string; /** The application type. */ type?: AccessApplicationsCreateRequestType; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean; /** Enables loading application content in an iFrame. */ allowIframe?: boolean; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsCreateRequestAllowedIdpsList; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean; corsHeaders?: AccessApplicationsCreateRequestCorsHeadersSelfHostedApplication; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsCreateRequestCustomPagesList; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsCreateRequestDestinationsList; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsCreateRequestMfaConfig; /** The name of the application. */ name?: string; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsCreateRequestOauthConfiguration; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean; /** The policies that Access applies to the application, in ascending order of precedence. Items can reference existing policies or create new policies exclusive to the application. Reusable and inline policies are mutually exclusive. */ policies?: AccessApplicationsCreateForZoneRequestPolicies; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsCreateRequestScimConfig; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsCreateRequestSelfHostedDomainsList; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsCreateRequestTagsList; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean; saasApp?: AccessApplicationsCreateRequestSaasApp; /** The image URL of the logo shown in the App Launcher header. */ appLauncherLogoUrl?: string; /** The background color of the App Launcher page. */ bgColor?: string; /** The links in the App Launcher footer. */ footerLinks?: AccessApplicationsCreateRequestFooterLinksList; /** The background color of the App Launcher header. */ headerBgColor?: string; /** The design of the App Launcher landing page shown to users when they log in. */ landingPageDesign?: AccessApplicationsCreateRequestLandingPageDesign; /** Determines when to skip the App Launcher landing page. */ skipAppLauncherLoginPage?: boolean; targetCriteria?: AccessApplicationsCreateRequestTargetCriteria; } export const CreateAccessApplicationForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), domain: S.optional(S.String), type: S.optional(AccessApplicationsCreateRequestType), allowAuthenticateViaWarp: S.optional( S.Boolean.pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.Boolean.pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( AccessApplicationsCreateRequestAllowedIdpsList.pipe( T.Body("allowed_idps"), ), ), appLauncherVisible: S.optional( S.Boolean.pipe(T.Body("app_launcher_visible")), ), autoRedirectToIdentity: S.optional( S.Boolean.pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( AccessApplicationsCreateRequestCorsHeadersSelfHostedApplication.pipe( T.Body("cors_headers"), ), ), customDenyMessage: S.optional( S.String.pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional(S.String.pipe(T.Body("custom_deny_url"))), customNonIdentityDenyUrl: S.optional( S.String.pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( AccessApplicationsCreateRequestCustomPagesList.pipe( T.Body("custom_pages"), ), ), destinations: S.optional(AccessApplicationsCreateRequestDestinationsList), eagerRedirectCookieSetting: S.optional( S.Boolean.pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.Boolean.pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.Boolean.pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.String.pipe(T.Body("logo_url"))), mfaConfig: S.optional( AccessApplicationsCreateRequestMfaConfig.pipe(T.Body("mfa_config")), ), name: S.optional(S.String), oauthConfiguration: S.optional( AccessApplicationsCreateRequestOauthConfiguration.pipe( T.Body("oauth_configuration"), ), ), optionsPreflightBypass: S.optional( S.Boolean.pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.Boolean.pipe(T.Body("path_cookie_attribute")), ), policies: S.optional(AccessApplicationsCreateForZoneRequestPolicies), readServiceTokensFromHeader: S.optional( S.String.pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.String.pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( AccessApplicationsCreateRequestScimConfig.pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( AccessApplicationsCreateRequestSelfHostedDomainsList.pipe( T.Body("self_hosted_domains"), ), ), service_auth_401_redirect: S.optional(S.Boolean), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), skipInterstitial: S.optional(S.Boolean.pipe(T.Body("skip_interstitial"))), tags: S.optional(AccessApplicationsCreateRequestTagsList), useClientlessIsolationAppLauncherUrl: S.optional( S.Boolean.pipe(T.Body("use_clientless_isolation_app_launcher_url")), ), saasApp: S.optional( AccessApplicationsCreateRequestSaasApp.pipe(T.Body("saas_app")), ), appLauncherLogoUrl: S.optional( S.String.pipe(T.Body("app_launcher_logo_url")), ), bgColor: S.optional(S.String.pipe(T.Body("bg_color"))), footerLinks: S.optional( AccessApplicationsCreateRequestFooterLinksList.pipe( T.Body("footer_links"), ), ), headerBgColor: S.optional(S.String.pipe(T.Body("header_bg_color"))), landingPageDesign: S.optional( AccessApplicationsCreateRequestLandingPageDesign.pipe( T.Body("landing_page_design"), ), ), skipAppLauncherLoginPage: S.optional( S.Boolean.pipe(T.Body("skip_app_launcher_login_page")), ), targetCriteria: S.optional( AccessApplicationsCreateRequestTargetCriteria.pipe( T.Body("target_criteria"), ), ), }) .pipe( T.Http({ method: "POST", uri: "/zones/{zone_id}/access/apps", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessApplicationForZoneRequest", }) as any as S.Schema; export type AccessApplicationsPoliciesCreateRequestApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsPoliciesCreateRequestApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsPoliciesCreateRequestApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsPoliciesCreateRequestApprovalGroupsItemEmailAddressesList; /** The UUID of an re-usable email list. */ emailListUuid?: string; } export const AccessApplicationsPoliciesCreateRequestApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( AccessApplicationsPoliciesCreateRequestApprovalGroupsItemEmailAddressesList.pipe( T.Body("email_addresses"), ), ), emailListUuid: S.optional(S.String.pipe(T.Body("email_list_uuid"))), }), ).annotate({ identifier: "AccessApplicationsPoliciesCreateRequestApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsPoliciesCreateRequestApprovalGroupsList = Array; export const AccessApplicationsPoliciesCreateRequestApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesCreateRequestApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array< | AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem | (string & {}) >; export const AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array< | AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem | (string & {}) >; export const AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesCreateRequestConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList; } export const AccessApplicationsPoliciesCreateRequestConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList.pipe( T.Body("allowed_clipboard_local_to_remote_formats"), ), ), allowedClipboardRemoteToLocalFormats: S.optional( AccessApplicationsPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList.pipe( T.Body("allowed_clipboard_remote_to_local_formats"), ), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesCreateRequestConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsPoliciesCreateRequestConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsPoliciesCreateRequestConnectionRulesRdp; } export const AccessApplicationsPoliciesCreateRequestConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( AccessApplicationsPoliciesCreateRequestConnectionRulesRdp, ), }), ).annotate({ identifier: "AccessApplicationsPoliciesCreateRequestConnectionRules", }) as any as S.Schema; export type AccessApplicationsPoliciesCreateRequestMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsPoliciesCreateRequestMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesCreateRequestMfaConfigAllowedAuthenticatorsList = Array< | AccessApplicationsPoliciesCreateRequestMfaConfigAllowedAuthenticatorsItem | (string & {}) >; export const AccessApplicationsPoliciesCreateRequestMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesCreateRequestMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesCreateRequestMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsPoliciesCreateRequestMfaConfigAllowedAuthenticatorsList; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string; } export const AccessApplicationsPoliciesCreateRequestMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( AccessApplicationsPoliciesCreateRequestMfaConfigAllowedAuthenticatorsList.pipe( T.Body("allowed_authenticators"), ), ), mfaDisabled: S.optional(S.Boolean.pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "AccessApplicationsPoliciesCreateRequestMfaConfig", }) as any as S.Schema; export interface CreateAccessApplicationPolicyForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ appId: string; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsPoliciesCreateRequestApprovalGroupsList; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsPoliciesCreateRequestConnectionRules; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsPoliciesCreateRequestMfaConfig; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string; } export const CreateAccessApplicationPolicyForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), appId: S.String.pipe(T.Label("app_id")), approvalGroups: S.optional( AccessApplicationsPoliciesCreateRequestApprovalGroupsList.pipe( T.Body("approval_groups"), ), ), approvalRequired: S.optional(S.Boolean.pipe(T.Body("approval_required"))), connectionRules: S.optional( AccessApplicationsPoliciesCreateRequestConnectionRules.pipe( T.Body("connection_rules"), ), ), isolationRequired: S.optional( S.Boolean.pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( AccessApplicationsPoliciesCreateRequestMfaConfig.pipe( T.Body("mfa_config"), ), ), precedence: S.optional(S.Number), purposeJustificationPrompt: S.optional( S.String.pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.Boolean.pipe(T.Body("purpose_justification_required")), ), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/apps/{app_id}/policies", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessApplicationPolicyForAccountRequest", }) as any as S.Schema; export type AccessApplicationsPoliciesCreateResponseApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsPoliciesCreateResponseApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsPoliciesCreateResponseApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsPoliciesCreateResponseApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsPoliciesCreateResponseApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsPoliciesCreateResponseApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesCreateResponseApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsPoliciesCreateResponseApprovalGroupsList = Array; export const AccessApplicationsPoliciesCreateResponseApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesCreateResponseApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsPoliciesCreateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsPoliciesCreateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesCreateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsPoliciesCreateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesCreateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsPoliciesCreateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsPoliciesCreateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesCreateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsPoliciesCreateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesCreateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesCreateResponseConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsPoliciesCreateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsPoliciesCreateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsPoliciesCreateResponseConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsPoliciesCreateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsPoliciesCreateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesCreateResponseConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsPoliciesCreateResponseConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsPoliciesCreateResponseConnectionRulesRdp | null; } export const AccessApplicationsPoliciesCreateResponseConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr(AccessApplicationsPoliciesCreateResponseConnectionRulesRdp), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesCreateResponseConnectionRules", }) as any as S.Schema; export type AccessApplicationsPoliciesCreateResponseDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessApplicationsPoliciesCreateResponseDecision = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesCreateResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessApplicationsPoliciesCreateResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessApplicationsPoliciesCreateResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessApplicationsPoliciesCreateResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessApplicationsPoliciesCreateResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessApplicationsPoliciesCreateResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessApplicationsPoliciesCreateResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessApplicationsPoliciesCreateResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessApplicationsPoliciesCreateResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessApplicationsPoliciesCreateResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessApplicationsPoliciesCreateResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessApplicationsPoliciesCreateResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessApplicationsPoliciesCreateResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessApplicationsPoliciesCreateResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessApplicationsPoliciesCreateResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessApplicationsPoliciesCreateResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessApplicationsPoliciesCreateResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export const AccessApplicationsPoliciesCreateResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export type AccessApplicationsPoliciesCreateResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessApplicationsPoliciesCreateResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessApplicationsPoliciesCreateResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessApplicationsPoliciesCreateResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessApplicationsPoliciesCreateResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessApplicationsPoliciesCreateResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessApplicationsPoliciesCreateResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessApplicationsPoliciesCreateResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessApplicationsPoliciesCreateResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessApplicationsPoliciesCreateResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessApplicationsPoliciesCreateResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessApplicationsPoliciesCreateResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessApplicationsPoliciesCreateResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessApplicationsPoliciesCreateResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesCreateResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsPoliciesCreateResponseExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessApplicationsPoliciesCreateResponseExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesCreateResponseExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsPoliciesCreateResponseExcludeList = Array; export const AccessApplicationsPoliciesCreateResponseExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesCreateResponseExcludeItem, ) as any as S.Schema; export type AccessApplicationsPoliciesCreateResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsPoliciesCreateResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesCreateResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsPoliciesCreateResponseIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesCreateResponseIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsPoliciesCreateResponseIncludeList = Array; export const AccessApplicationsPoliciesCreateResponseIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesCreateResponseIncludeItem, ) as any as S.Schema; export type AccessApplicationsPoliciesCreateResponseMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsPoliciesCreateResponseMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesCreateResponseMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsPoliciesCreateResponseMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesCreateResponseMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesCreateResponseMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsPoliciesCreateResponseMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsPoliciesCreateResponseMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsPoliciesCreateResponseMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesCreateResponseMfaConfig", }) as any as S.Schema; export type AccessApplicationsPoliciesCreateResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsPoliciesCreateResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsPoliciesCreateResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsPoliciesCreateResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsPoliciesCreateResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsPoliciesCreateResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsPoliciesCreateResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsPoliciesCreateResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsPoliciesCreateResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsPoliciesCreateResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsPoliciesCreateResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsPoliciesCreateResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsPoliciesCreateResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsPoliciesCreateResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsPoliciesCreateResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsPoliciesCreateResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsPoliciesCreateResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsPoliciesCreateResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsPoliciesCreateResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsPoliciesCreateResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsPoliciesCreateResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsPoliciesCreateResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsPoliciesCreateResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsPoliciesCreateResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsPoliciesCreateResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsPoliciesCreateResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsPoliciesCreateResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsPoliciesCreateResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsPoliciesCreateResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsPoliciesCreateResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsPoliciesCreateResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsPoliciesCreateResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsPoliciesCreateResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsPoliciesCreateResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsPoliciesCreateResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsPoliciesCreateResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsPoliciesCreateResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsPoliciesCreateResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsPoliciesCreateResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsPoliciesCreateResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsPoliciesCreateResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsPoliciesCreateResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsPoliciesCreateResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsPoliciesCreateResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsPoliciesCreateResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsPoliciesCreateResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsPoliciesCreateResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsPoliciesCreateResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsPoliciesCreateResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsPoliciesCreateResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsPoliciesCreateResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesCreateResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsPoliciesCreateResponseRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesCreateResponseRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsPoliciesCreateResponseRequireList = Array; export const AccessApplicationsPoliciesCreateResponseRequireList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesCreateResponseRequireItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessApplicationPolicyResponse { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsPoliciesCreateResponseApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsPoliciesCreateResponseConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsPoliciesCreateResponseDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsPoliciesCreateResponseExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsPoliciesCreateResponseIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsPoliciesCreateResponseMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsPoliciesCreateResponseRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const CreateAccessApplicationPolicyResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsPoliciesCreateResponseApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr(AccessApplicationsPoliciesCreateResponseConnectionRules).pipe( T.Body("connection_rules"), ), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr(AccessApplicationsPoliciesCreateResponseDecision), ), exclude: S.optional( S.NullOr(AccessApplicationsPoliciesCreateResponseExcludeList), ), include: S.optional( S.NullOr(AccessApplicationsPoliciesCreateResponseIncludeList), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr(AccessApplicationsPoliciesCreateResponseMfaConfig).pipe( T.Body("mfa_config"), ), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr(AccessApplicationsPoliciesCreateResponseRequireList), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessApplicationPolicyResponse", }) as any as S.Schema; export interface CreateAccessApplicationPolicyForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ appId: string; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsPoliciesCreateRequestApprovalGroupsList; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsPoliciesCreateRequestConnectionRules; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsPoliciesCreateRequestMfaConfig; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string; } export const CreateAccessApplicationPolicyForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), appId: S.String.pipe(T.Label("app_id")), approvalGroups: S.optional( AccessApplicationsPoliciesCreateRequestApprovalGroupsList.pipe( T.Body("approval_groups"), ), ), approvalRequired: S.optional(S.Boolean.pipe(T.Body("approval_required"))), connectionRules: S.optional( AccessApplicationsPoliciesCreateRequestConnectionRules.pipe( T.Body("connection_rules"), ), ), isolationRequired: S.optional( S.Boolean.pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( AccessApplicationsPoliciesCreateRequestMfaConfig.pipe( T.Body("mfa_config"), ), ), precedence: S.optional(S.Number), purposeJustificationPrompt: S.optional( S.String.pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.Boolean.pipe(T.Body("purpose_justification_required")), ), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }) .pipe( T.Http({ method: "POST", uri: "/zones/{zone_id}/access/apps/{app_id}/policies", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessApplicationPolicyForZoneRequest", }) as any as S.Schema; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0Decision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0Decision = /*@__PURE__*/ S.String; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemGitHubOrganizationRuleGithubOrganization = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemGitHubOrganizationRuleGithubOrganization = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array< | AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem | (string & {}) >; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRule { userRiskScore: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItemAccessUserRiskScoreRule | AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeList = Array; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeList = /*@__PURE__*/ S.Array( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeItem, ) as any as S.Schema; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ApprovalGroupsItemEmailAddressesList; /** The UUID of an re-usable email list. */ emailListUuid?: string; } export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ApprovalGroupsItemEmailAddressesList.pipe( T.Body("email_addresses"), ), ), emailListUuid: S.optional(S.String.pipe(T.Body("email_list_uuid"))), }), ).annotate({ identifier: "AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ApprovalGroupsList = Array; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array< | AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem | (string & {}) >; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array< | AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem | (string & {}) >; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList; } export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList.pipe( T.Body("allowed_clipboard_local_to_remote_formats"), ), ), allowedClipboardRemoteToLocalFormats: S.optional( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList.pipe( T.Body("allowed_clipboard_remote_to_local_formats"), ), ), }), ).annotate({ identifier: "AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdp; } export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRulesRdp, ), }), ).annotate({ identifier: "AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRules", }) as any as S.Schema; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemGroupRule = AccessPoliciesCreateRequestExcludeItemGroupRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemGroupRule = AccessPoliciesCreateRequestExcludeItemGroupRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAzureGroupRule = AccessPoliciesCreateRequestExcludeItemAzureGroupRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAzureGroupRule = AccessPoliciesCreateRequestExcludeItemAzureGroupRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemCertificateRule = AccessPoliciesCreateRequestExcludeItemCertificateRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemCertificateRule = AccessPoliciesCreateRequestExcludeItemCertificateRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemCountryRule = AccessPoliciesCreateRequestExcludeItemCountryRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemCountryRule = AccessPoliciesCreateRequestExcludeItemCountryRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemDomainRule = AccessPoliciesCreateRequestExcludeItemDomainRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemDomainRule = AccessPoliciesCreateRequestExcludeItemDomainRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemEmailListRule = AccessPoliciesCreateRequestExcludeItemEmailListRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemEmailListRule = AccessPoliciesCreateRequestExcludeItemEmailListRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemEmailRule = AccessPoliciesCreateRequestExcludeItemEmailRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemEmailRule = AccessPoliciesCreateRequestExcludeItemEmailRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemEveryoneRule = AccessPoliciesCreateRequestExcludeItemEveryoneRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemEveryoneRule = AccessPoliciesCreateRequestExcludeItemEveryoneRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemIPListRule = AccessPoliciesCreateRequestExcludeItemIPListRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemIPListRule = AccessPoliciesCreateRequestExcludeItemIPListRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemIPRule = AccessPoliciesCreateRequestExcludeItemIPRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemIPRule = AccessPoliciesCreateRequestExcludeItemIPRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemOktaGroupRule = AccessPoliciesCreateRequestExcludeItemOktaGroupRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemOktaGroupRule = AccessPoliciesCreateRequestExcludeItemOktaGroupRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestExcludeItemSAMLGroupRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestExcludeItemSAMLGroupRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemServiceTokenRule = AccessPoliciesCreateRequestExcludeItemServiceTokenRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemServiceTokenRule = AccessPoliciesCreateRequestExcludeItemServiceTokenRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessUserRiskScoreRule = AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessUserRiskScoreRule = AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItem = | AccessPoliciesCreateRequestExcludeItemGroupRule | AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule | AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestExcludeItemAzureGroupRule | AccessPoliciesCreateRequestExcludeItemCertificateRule | AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule | AccessPoliciesCreateRequestExcludeItemCountryRule | AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestExcludeItemDomainRule | AccessPoliciesCreateRequestExcludeItemEmailListRule | AccessPoliciesCreateRequestExcludeItemEmailRule | AccessPoliciesCreateRequestExcludeItemEveryoneRule | AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule | AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule | AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestExcludeItemIPListRule | AccessPoliciesCreateRequestExcludeItemIPRule | AccessPoliciesCreateRequestExcludeItemOktaGroupRule | AccessPoliciesCreateRequestExcludeItemSAMLGroupRule | AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestExcludeItemServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule | AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule | AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeList = Array; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeItem, ) as any as S.Schema; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0MfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0MfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0MfaConfigAllowedAuthenticatorsList = Array< | AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0MfaConfigAllowedAuthenticatorsItem | (string & {}) >; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0MfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0MfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0MfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0MfaConfigAllowedAuthenticatorsList; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string; } export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0MfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0MfaConfigAllowedAuthenticatorsList.pipe( T.Body("allowed_authenticators"), ), ), mfaDisabled: S.optional(S.Boolean.pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0MfaConfig", }) as any as S.Schema; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemGroupRule = AccessPoliciesCreateRequestExcludeItemGroupRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemGroupRule = AccessPoliciesCreateRequestExcludeItemGroupRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessAuthContextRule = AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessAuthContextRule = AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAuthenticationMethodRule = AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAuthenticationMethodRule = AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAzureGroupRule = AccessPoliciesCreateRequestExcludeItemAzureGroupRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAzureGroupRule = AccessPoliciesCreateRequestExcludeItemAzureGroupRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemCertificateRule = AccessPoliciesCreateRequestExcludeItemCertificateRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemCertificateRule = AccessPoliciesCreateRequestExcludeItemCertificateRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessCommonNameRule = AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessCommonNameRule = AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemCountryRule = AccessPoliciesCreateRequestExcludeItemCountryRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemCountryRule = AccessPoliciesCreateRequestExcludeItemCountryRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessDevicePostureRule = AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessDevicePostureRule = AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemDomainRule = AccessPoliciesCreateRequestExcludeItemDomainRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemDomainRule = AccessPoliciesCreateRequestExcludeItemDomainRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemEmailListRule = AccessPoliciesCreateRequestExcludeItemEmailListRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemEmailListRule = AccessPoliciesCreateRequestExcludeItemEmailListRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemEmailRule = AccessPoliciesCreateRequestExcludeItemEmailRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemEmailRule = AccessPoliciesCreateRequestExcludeItemEmailRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemEveryoneRule = AccessPoliciesCreateRequestExcludeItemEveryoneRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemEveryoneRule = AccessPoliciesCreateRequestExcludeItemEveryoneRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemExternalEvaluationRule = AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemExternalEvaluationRule = AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemGitHubOrganizationRule = AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemGitHubOrganizationRule = AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemGSuiteGroupRule = AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemGSuiteGroupRule = AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessLoginMethodRule = AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessLoginMethodRule = AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemIPListRule = AccessPoliciesCreateRequestExcludeItemIPListRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemIPListRule = AccessPoliciesCreateRequestExcludeItemIPListRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemIPRule = AccessPoliciesCreateRequestExcludeItemIPRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemIPRule = AccessPoliciesCreateRequestExcludeItemIPRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemOktaGroupRule = AccessPoliciesCreateRequestExcludeItemOktaGroupRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemOktaGroupRule = AccessPoliciesCreateRequestExcludeItemOktaGroupRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemSAMLGroupRule = AccessPoliciesCreateRequestExcludeItemSAMLGroupRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemSAMLGroupRule = AccessPoliciesCreateRequestExcludeItemSAMLGroupRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessOIDCClaimRule = AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessOIDCClaimRule = AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemServiceTokenRule = AccessPoliciesCreateRequestExcludeItemServiceTokenRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemServiceTokenRule = AccessPoliciesCreateRequestExcludeItemServiceTokenRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessUserRiskScoreRule = AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessUserRiskScoreRule = AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItem = | AccessPoliciesCreateRequestExcludeItemGroupRule | AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule | AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestExcludeItemAzureGroupRule | AccessPoliciesCreateRequestExcludeItemCertificateRule | AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule | AccessPoliciesCreateRequestExcludeItemCountryRule | AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestExcludeItemDomainRule | AccessPoliciesCreateRequestExcludeItemEmailListRule | AccessPoliciesCreateRequestExcludeItemEmailRule | AccessPoliciesCreateRequestExcludeItemEveryoneRule | AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule | AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule | AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestExcludeItemIPListRule | AccessPoliciesCreateRequestExcludeItemIPRule | AccessPoliciesCreateRequestExcludeItemOktaGroupRule | AccessPoliciesCreateRequestExcludeItemSAMLGroupRule | AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestExcludeItemServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule | AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule | AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireList = Array; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireList = /*@__PURE__*/ S.Array( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireItem, ) as any as S.Schema; export interface AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0 { /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision: | AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0Decision | (string & {}); /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeList; /** The name of the Access policy. */ name: string; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ApprovalGroupsList; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRules; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeList; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0MfaConfig; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireList; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string; } export const AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ decision: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0Decision, include: AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0IncludeList, name: S.String, approvalGroups: S.optional( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ApprovalGroupsList.pipe( T.Body("approval_groups"), ), ), approvalRequired: S.optional(S.Boolean.pipe(T.Body("approval_required"))), connectionRules: S.optional( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ConnectionRules.pipe( T.Body("connection_rules"), ), ), exclude: S.optional( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0ExcludeList, ), isolationRequired: S.optional( S.Boolean.pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0MfaConfig.pipe( T.Body("mfa_config"), ), ), purposeJustificationPrompt: S.optional( S.String.pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.Boolean.pipe(T.Body("purpose_justification_required")), ), require: S.optional( AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0RequireList, ), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0", }) as any as S.Schema; export type AccessApplicationsPolicyTestsCreateRequestPoliciesItem = | string | AccessApplicationsPolicyTestsCreateRequestPoliciesItemCase0; export const AccessApplicationsPolicyTestsCreateRequestPoliciesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [], [ "decision", "include", "name", "approvalGroups", "approvalRequired", "connectionRules", "exclude", "isolationRequired", "mfaConfig", "purposeJustificationPrompt", "purposeJustificationRequired", "require", "sessionDuration", ], ]), ); export type AccessApplicationsPolicyTestsCreateRequestPoliciesList = Array; export const AccessApplicationsPolicyTestsCreateRequestPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsPolicyTestsCreateRequestPoliciesItem, ) as any as S.Schema; export interface CreateAccessApplicationPolicyTestRequest { /** Identifier. */ accountId: string; policies?: AccessApplicationsPolicyTestsCreateRequestPoliciesList; } export const CreateAccessApplicationPolicyTestRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), policies: S.optional( AccessApplicationsPolicyTestsCreateRequestPoliciesList, ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/policy-tests", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessApplicationPolicyTestRequest", }) as any as S.Schema; export type AccessApplicationsPolicyTestsCreateResponseStatus = "success"; export const AccessApplicationsPolicyTestsCreateResponseStatus = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessApplicationPolicyTestResponse { /** The UUID of the policy test. */ id?: string | null; /** The status of the policy test request. */ status?: AccessApplicationsPolicyTestsCreateResponseStatus | null; } export const CreateAccessApplicationPolicyTestResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), status: S.optional( S.NullOr(AccessApplicationsPolicyTestsCreateResponseStatus), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessApplicationPolicyTestResponse", }) as any as S.Schema; export interface CreateAccessBookmarkRequest { accountId: string; /** UUID. */ bookmarkId: string; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean; /** The domain of the Bookmark application. */ domain?: string; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string; /** The name of the Bookmark application. */ name?: string; } export const CreateAccessBookmarkRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), bookmarkId: S.String.pipe(T.Label("bookmark_id")), appLauncherVisible: S.optional( S.Boolean.pipe(T.Body("app_launcher_visible")), ), domain: S.optional(S.String), logoUrl: S.optional(S.String.pipe(T.Body("logo_url"))), name: S.optional(S.String), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/bookmarks/{bookmark_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessBookmarkRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessBookmarkResponse { /** The unique identifier for the Bookmark application. */ id: string; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** The domain of the Bookmark application. */ domain?: string | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the Bookmark application. */ name?: string | null; } export const CreateAccessBookmarkResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), domain: S.optional(S.NullOr(S.String)), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessBookmarkResponse", }) as any as S.Schema; export type AccessCertificatesCreateRequestAssociatedHostnamesList = Array; export const AccessCertificatesCreateRequestAssociatedHostnamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface CreateAccessCertificateForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** The certificate content. */ certificate: string; /** The name of the certificate. */ name: string; /** The hostnames of the applications that will use this certificate. */ associatedHostnames?: AccessCertificatesCreateRequestAssociatedHostnamesList; } export const CreateAccessCertificateForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), certificate: S.String, name: S.String, associatedHostnames: S.optional( AccessCertificatesCreateRequestAssociatedHostnamesList.pipe( T.Body("associated_hostnames"), ), ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/certificates", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessCertificateForAccountRequest", }) as any as S.Schema; export type AccessCertificatesCreateResponseAssociatedHostnamesList = Array; export const AccessCertificatesCreateResponseAssociatedHostnamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessCertificateResponse { /** The ID of the application that will use this certificate. */ id?: string | null; /** The hostnames of the applications that will use this certificate. */ associatedHostnames?: AccessCertificatesCreateResponseAssociatedHostnamesList | null; expiresOn?: string | null; /** The MD5 fingerprint of the certificate. */ fingerprint?: string | null; /** The name of the certificate. */ name?: string | null; } export const CreateAccessCertificateResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), associatedHostnames: S.optional( S.NullOr(AccessCertificatesCreateResponseAssociatedHostnamesList).pipe( T.Body("associated_hostnames"), ), ), expiresOn: S.optional(S.NullOr(S.String).pipe(T.Body("expires_on"))), fingerprint: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessCertificateResponse", }) as any as S.Schema; export interface CreateAccessCertificateForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** The certificate content. */ certificate: string; /** The name of the certificate. */ name: string; /** The hostnames of the applications that will use this certificate. */ associatedHostnames?: AccessCertificatesCreateRequestAssociatedHostnamesList; } export const CreateAccessCertificateForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), certificate: S.String, name: S.String, associatedHostnames: S.optional( AccessCertificatesCreateRequestAssociatedHostnamesList.pipe( T.Body("associated_hostnames"), ), ), }) .pipe( T.Http({ method: "POST", uri: "/zones/{zone_id}/access/certificates", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessCertificateForZoneRequest", }) as any as S.Schema; export type AccessCustomPagesCreateRequestType = | "identity_denied" | "forbidden"; export const AccessCustomPagesCreateRequestType = /*@__PURE__*/ S.String; export interface CreateAccessCustomPageRequest { /** Identifier. */ accountId: string; /** Custom page HTML. */ customHtml: string; /** Custom page name. */ name: string; /** Custom page type. */ type: AccessCustomPagesCreateRequestType | (string & {}); } export const CreateAccessCustomPageRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), customHtml: S.String.pipe(T.Body("custom_html")), name: S.String, type: AccessCustomPagesCreateRequestType, }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/custom_pages", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessCustomPageRequest", }) as any as S.Schema; export type AccessCustomPagesCreateResponseType = | "identity_denied" | "forbidden"; export const AccessCustomPagesCreateResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessCustomPageResponse { /** Custom page name. */ name: string; /** Custom page type. */ type: AccessCustomPagesCreateResponseType; /** UUID. */ uid?: string | null; } export const CreateAccessCustomPageResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.String, type: AccessCustomPagesCreateResponseType, uid: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessCustomPageResponse", }) as any as S.Schema; export interface CreateAccessGatewayCaRequest { /** Identifier. */ accountId: string; } export const CreateAccessGatewayCaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/gateway_ca", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessGatewayCaRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessGatewayCaResponse { /** The key ID of this certificate. */ id?: string | null; /** The public key of this certificate. */ publicKey?: string | null; } export const CreateAccessGatewayCaResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessGatewayCaResponse", }) as any as S.Schema; export type AccessGroupsCreateRequestIncludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessGroupsCreateRequestIncludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessGroupsCreateRequestIncludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessGroupsCreateRequestIncludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessGroupsCreateRequestIncludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessGroupsCreateRequestIncludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessGroupsCreateRequestIncludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessGroupsCreateRequestIncludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessGroupsCreateRequestIncludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessGroupsCreateRequestIncludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessGroupsCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessGroupsCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessGroupsCreateRequestIncludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessGroupsCreateRequestIncludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessGroupsCreateRequestIncludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessGroupsCreateRequestIncludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessGroupsCreateRequestIncludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessGroupsCreateRequestIncludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessGroupsCreateRequestIncludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessGroupsCreateRequestIncludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessGroupsCreateRequestIncludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessGroupsCreateRequestIncludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessGroupsCreateRequestIncludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessGroupsCreateRequestIncludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessGroupsCreateRequestIncludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessGroupsCreateRequestIncludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessGroupsCreateRequestIncludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessGroupsCreateRequestIncludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessGroupsCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessGroupsCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessGroupsCreateRequestIncludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessGroupsCreateRequestIncludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessGroupsCreateRequestIncludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessGroupsCreateRequestIncludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessGroupsCreateRequestIncludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessGroupsCreateRequestIncludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessGroupsCreateRequestIncludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessGroupsCreateRequestIncludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessGroupsCreateRequestIncludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessGroupsCreateRequestIncludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessGroupsCreateRequestIncludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessGroupsCreateRequestIncludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessGroupsCreateRequestIncludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessGroupsCreateRequestIncludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessGroupsCreateRequestIncludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessGroupsCreateRequestIncludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessGroupsCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessGroupsCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessGroupsCreateRequestIncludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessGroupsCreateRequestIncludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessGroupsCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization; export const AccessGroupsCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization; export type AccessGroupsCreateRequestIncludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule; export const AccessGroupsCreateRequestIncludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule; export type AccessGroupsCreateRequestIncludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessGroupsCreateRequestIncludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessGroupsCreateRequestIncludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessGroupsCreateRequestIncludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessGroupsCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessGroupsCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessGroupsCreateRequestIncludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessGroupsCreateRequestIncludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessGroupsCreateRequestIncludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessGroupsCreateRequestIncludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessGroupsCreateRequestIncludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessGroupsCreateRequestIncludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessGroupsCreateRequestIncludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessGroupsCreateRequestIncludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessGroupsCreateRequestIncludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessGroupsCreateRequestIncludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessGroupsCreateRequestIncludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessGroupsCreateRequestIncludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessGroupsCreateRequestIncludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessGroupsCreateRequestIncludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessGroupsCreateRequestIncludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessGroupsCreateRequestIncludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessGroupsCreateRequestIncludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessGroupsCreateRequestIncludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessGroupsCreateRequestIncludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessGroupsCreateRequestIncludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessGroupsCreateRequestIncludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessGroupsCreateRequestIncludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessGroupsCreateRequestIncludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessGroupsCreateRequestIncludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessGroupsCreateRequestIncludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessGroupsCreateRequestIncludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessGroupsCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessGroupsCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessGroupsCreateRequestIncludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessGroupsCreateRequestIncludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array< | AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem | (string & {}) >; export const AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRule { userRiskScore: AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessGroupsCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessGroupsCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessGroupsCreateRequestIncludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsCreateRequestIncludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export type AccessGroupsCreateRequestIncludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessGroupsCreateRequestIncludeItemAccessUserRiskScoreRule | AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsCreateRequestIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessGroupsCreateRequestIncludeList = Array; export const AccessGroupsCreateRequestIncludeList = /*@__PURE__*/ S.Array( AccessGroupsCreateRequestIncludeItem, ) as any as S.Schema; export interface CreateAccessGroupForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include: AccessGroupsCreateRequestIncludeList; /** The name of the Access group. */ name: string; /** Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessGroupsCreateRequestIncludeList; /** Whether this is the default group */ isDefault?: boolean; /** Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules. */ require?: AccessGroupsCreateRequestIncludeList; } export const CreateAccessGroupForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), include: AccessGroupsCreateRequestIncludeList, name: S.String, exclude: S.optional(AccessGroupsCreateRequestIncludeList), isDefault: S.optional(S.Boolean.pipe(T.Body("is_default"))), require: S.optional(AccessGroupsCreateRequestIncludeList), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/groups", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessGroupForAccountRequest", }) as any as S.Schema; export type AccessGroupsCreateResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessGroupsCreateResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessGroupsCreateResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessGroupsCreateResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessGroupsCreateResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessGroupsCreateResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessGroupsCreateResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessGroupsCreateResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessGroupsCreateResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessGroupsCreateResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessGroupsCreateResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessGroupsCreateResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessGroupsCreateResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessGroupsCreateResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessGroupsCreateResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessGroupsCreateResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessGroupsCreateResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessGroupsCreateResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessGroupsCreateResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessGroupsCreateResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessGroupsCreateResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessGroupsCreateResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessGroupsCreateResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessGroupsCreateResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessGroupsCreateResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessGroupsCreateResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessGroupsCreateResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessGroupsCreateResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessGroupsCreateResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessGroupsCreateResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessGroupsCreateResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessGroupsCreateResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessGroupsCreateResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessGroupsCreateResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessGroupsCreateResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessGroupsCreateResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessGroupsCreateResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessGroupsCreateResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessGroupsCreateResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessGroupsCreateResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessGroupsCreateResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessGroupsCreateResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessGroupsCreateResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessGroupsCreateResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessGroupsCreateResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessGroupsCreateResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessGroupsCreateResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessGroupsCreateResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessGroupsCreateResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessGroupsCreateResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessGroupsCreateResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export const AccessGroupsCreateResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export type AccessGroupsCreateResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export const AccessGroupsCreateResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export type AccessGroupsCreateResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessGroupsCreateResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessGroupsCreateResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessGroupsCreateResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessGroupsCreateResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessGroupsCreateResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessGroupsCreateResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessGroupsCreateResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessGroupsCreateResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessGroupsCreateResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessGroupsCreateResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessGroupsCreateResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessGroupsCreateResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessGroupsCreateResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessGroupsCreateResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessGroupsCreateResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessGroupsCreateResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessGroupsCreateResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessGroupsCreateResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessGroupsCreateResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessGroupsCreateResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessGroupsCreateResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessGroupsCreateResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessGroupsCreateResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessGroupsCreateResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessGroupsCreateResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessGroupsCreateResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessGroupsCreateResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessGroupsCreateResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessGroupsCreateResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessGroupsCreateResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessGroupsCreateResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessGroupsCreateResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessGroupsCreateResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessGroupsCreateResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessGroupsCreateResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessGroupsCreateResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessGroupsCreateResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessGroupsCreateResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsCreateResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export type AccessGroupsCreateResponseExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessGroupsCreateResponseExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsCreateResponseExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessGroupsCreateResponseExcludeList = Array; export const AccessGroupsCreateResponseExcludeList = /*@__PURE__*/ S.Array( AccessGroupsCreateResponseExcludeItem, ) as any as S.Schema; export type AccessGroupsCreateResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessGroupsCreateResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessGroupsCreateResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessGroupsCreateResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessGroupsCreateResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessGroupsCreateResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessGroupsCreateResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessGroupsCreateResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessGroupsCreateResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessGroupsCreateResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessGroupsCreateResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessGroupsCreateResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessGroupsCreateResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessGroupsCreateResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessGroupsCreateResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessGroupsCreateResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessGroupsCreateResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessGroupsCreateResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessGroupsCreateResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessGroupsCreateResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessGroupsCreateResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessGroupsCreateResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessGroupsCreateResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessGroupsCreateResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessGroupsCreateResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessGroupsCreateResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessGroupsCreateResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessGroupsCreateResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessGroupsCreateResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessGroupsCreateResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessGroupsCreateResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessGroupsCreateResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessGroupsCreateResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessGroupsCreateResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessGroupsCreateResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessGroupsCreateResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessGroupsCreateResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessGroupsCreateResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessGroupsCreateResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessGroupsCreateResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessGroupsCreateResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessGroupsCreateResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessGroupsCreateResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessGroupsCreateResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessGroupsCreateResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessGroupsCreateResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessGroupsCreateResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessGroupsCreateResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessGroupsCreateResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessGroupsCreateResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessGroupsCreateResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsCreateResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessGroupsCreateResponseIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsCreateResponseIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessGroupsCreateResponseIncludeList = Array; export const AccessGroupsCreateResponseIncludeList = /*@__PURE__*/ S.Array( AccessGroupsCreateResponseIncludeItem, ) as any as S.Schema; export type AccessGroupsCreateResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessGroupsCreateResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessGroupsCreateResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessGroupsCreateResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessGroupsCreateResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessGroupsCreateResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessGroupsCreateResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessGroupsCreateResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessGroupsCreateResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessGroupsCreateResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessGroupsCreateResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessGroupsCreateResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessGroupsCreateResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessGroupsCreateResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessGroupsCreateResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessGroupsCreateResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessGroupsCreateResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessGroupsCreateResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessGroupsCreateResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessGroupsCreateResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessGroupsCreateResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessGroupsCreateResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessGroupsCreateResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessGroupsCreateResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessGroupsCreateResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessGroupsCreateResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessGroupsCreateResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessGroupsCreateResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessGroupsCreateResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessGroupsCreateResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessGroupsCreateResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessGroupsCreateResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessGroupsCreateResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessGroupsCreateResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessGroupsCreateResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessGroupsCreateResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessGroupsCreateResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessGroupsCreateResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessGroupsCreateResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessGroupsCreateResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessGroupsCreateResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessGroupsCreateResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessGroupsCreateResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessGroupsCreateResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessGroupsCreateResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessGroupsCreateResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessGroupsCreateResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessGroupsCreateResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessGroupsCreateResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessGroupsCreateResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessGroupsCreateResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsCreateResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessGroupsCreateResponseRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsCreateResponseRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessGroupsCreateResponseRequireList = Array; export const AccessGroupsCreateResponseRequireList = /*@__PURE__*/ S.Array( AccessGroupsCreateResponseRequireItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessGroupResponse { /** UUID. */ id?: string | null; /** Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessGroupsCreateResponseExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessGroupsCreateResponseIncludeList | null; /** Whether this is the default group */ isDefault?: boolean | null; /** The name of the Access group. */ name?: string | null; /** Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules. */ require?: AccessGroupsCreateResponseRequireList | null; } export const CreateAccessGroupResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), exclude: S.optional(S.NullOr(AccessGroupsCreateResponseExcludeList)), include: S.optional(S.NullOr(AccessGroupsCreateResponseIncludeList)), isDefault: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_default"))), name: S.optional(S.NullOr(S.String)), require: S.optional(S.NullOr(AccessGroupsCreateResponseRequireList)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessGroupResponse", }) as any as S.Schema; export interface CreateAccessGroupForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include: AccessGroupsCreateRequestIncludeList; /** The name of the Access group. */ name: string; /** Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessGroupsCreateRequestIncludeList; /** Whether this is the default group */ isDefault?: boolean; /** Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules. */ require?: AccessGroupsCreateRequestIncludeList; } export const CreateAccessGroupForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), include: AccessGroupsCreateRequestIncludeList, name: S.String, exclude: S.optional(AccessGroupsCreateRequestIncludeList), isDefault: S.optional(S.Boolean.pipe(T.Body("is_default"))), require: S.optional(AccessGroupsCreateRequestIncludeList), }) .pipe( T.Http({ method: "POST", uri: "/zones/{zone_id}/access/groups", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessGroupForZoneRequest", }) as any as S.Schema; export interface CreateAccessIdpFederationGrantRequest { /** Identifier. */ accountId: string; /** UID of the identity provider to federate. Must be an existing identity provider in this account. One-time pin and Cloudflare-managed identity providers cannot be federated. */ idpId: string; } export const CreateAccessIdpFederationGrantRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), idpId: S.String.pipe(T.Body("idp_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/idp_federation_grants", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessIdpFederationGrantRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessIdpFederationGrantResponse { /** UID of the IdP federation grant. */ id: string; /** UID of the identity provider being federated. */ idpId: string; } export const CreateAccessIdpFederationGrantResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, idpId: S.String.pipe(T.Body("idp_id")), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessIdpFederationGrantResponse", }) as any as S.Schema; export type AccessInfrastructureTargetsCreateRequestIpIpv4 = AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4; export const AccessInfrastructureTargetsCreateRequestIpIpv4 = AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4; export type AccessInfrastructureTargetsCreateRequestIpIpv6 = AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4; export const AccessInfrastructureTargetsCreateRequestIpIpv6 = AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4; export type AccessInfrastructureTargetsCreateRequestIp = AccessInfrastructureTargetsBulkUpdateRequestBodyItemIp; export const AccessInfrastructureTargetsCreateRequestIp = AccessInfrastructureTargetsBulkUpdateRequestBodyItemIp; export interface CreateAccessInfrastructureTargetRequest { /** Account identifier */ accountId: string; /** A non-unique field that refers to a target. Case insensitive, maximum */ hostname: string; /** The IPv4/IPv6 address that identifies where to reach a target */ ip: AccessInfrastructureTargetsBulkUpdateRequestBodyItemIp; } export const CreateAccessInfrastructureTargetRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), hostname: S.String, ip: AccessInfrastructureTargetsBulkUpdateRequestBodyItemIp, }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/infrastructure/targets", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessInfrastructureTargetRequest", }) as any as S.Schema; export type AccessInfrastructureTargetsCreateResponseIpIpv4 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export const AccessInfrastructureTargetsCreateResponseIpIpv4 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export type AccessInfrastructureTargetsCreateResponseIpIpv6 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export const AccessInfrastructureTargetsCreateResponseIpIpv6 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export type AccessInfrastructureTargetsCreateResponseIp = AccessInfrastructureTargetsBulkUpdateResultItemIp; export const AccessInfrastructureTargetsCreateResponseIp = AccessInfrastructureTargetsBulkUpdateResultItemIp; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessInfrastructureTargetResponse { /** Target identifier */ id: string; /** Date and time at which the target was created */ createdAt: string; /** A non-unique field that refers to a target */ hostname: string; /** The IPv4/IPv6 address that identifies where to reach a target */ ip: AccessInfrastructureTargetsBulkUpdateResultItemIp; /** Date and time at which the target was modified */ modifiedAt: string; } export const CreateAccessInfrastructureTargetResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), hostname: S.String, ip: AccessInfrastructureTargetsBulkUpdateResultItemIp, modifiedAt: S.String.pipe(T.Body("modified_at")), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessInfrastructureTargetResponse", }) as any as S.Schema; export type AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array< | AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem | (string & {}) >; export const AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array< | AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem | (string & {}) >; export const AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessPoliciesCreateRequestConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList; } export const AccessPoliciesCreateRequestConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList.pipe( T.Body("allowed_clipboard_local_to_remote_formats"), ), ), allowedClipboardRemoteToLocalFormats: S.optional( AccessPoliciesCreateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList.pipe( T.Body("allowed_clipboard_remote_to_local_formats"), ), ), }), ).annotate({ identifier: "AccessPoliciesCreateRequestConnectionRulesRdp", }) as any as S.Schema; export interface AccessPoliciesCreateRequestConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessPoliciesCreateRequestConnectionRulesRdp; } export const AccessPoliciesCreateRequestConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional(AccessPoliciesCreateRequestConnectionRulesRdp), }), ).annotate({ identifier: "AccessPoliciesCreateRequestConnectionRules", }) as any as S.Schema; export type AccessPoliciesCreateRequestMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessPoliciesCreateRequestMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessPoliciesCreateRequestMfaConfigAllowedAuthenticatorsList = Array< | AccessPoliciesCreateRequestMfaConfigAllowedAuthenticatorsItem | (string & {}) >; export const AccessPoliciesCreateRequestMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessPoliciesCreateRequestMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessPoliciesCreateRequestMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessPoliciesCreateRequestMfaConfigAllowedAuthenticatorsList; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string; } export const AccessPoliciesCreateRequestMfaConfig = /*@__PURE__*/ S.suspend( () => S.Struct({ allowedAuthenticators: S.optional( AccessPoliciesCreateRequestMfaConfigAllowedAuthenticatorsList.pipe( T.Body("allowed_authenticators"), ), ), mfaDisabled: S.optional(S.Boolean.pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "AccessPoliciesCreateRequestMfaConfig", }) as any as S.Schema; export interface CreateAccessPolicyRequest { /** Identifier. */ accountId: string; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision: AccessPoliciesCreateRequestDecision | (string & {}); /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include: AccessPoliciesCreateRequestIncludeList; /** The name of the Access policy. */ name: string; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessPoliciesCreateRequestApprovalGroupsList; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessPoliciesCreateRequestConnectionRules; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessPoliciesCreateRequestIncludeList; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessPoliciesCreateRequestMfaConfig; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessPoliciesCreateRequestIncludeList; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string; } export const CreateAccessPolicyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), decision: AccessPoliciesCreateRequestDecision, include: AccessPoliciesCreateRequestIncludeList, name: S.String, approvalGroups: S.optional( AccessPoliciesCreateRequestApprovalGroupsList.pipe( T.Body("approval_groups"), ), ), approvalRequired: S.optional(S.Boolean.pipe(T.Body("approval_required"))), connectionRules: S.optional( AccessPoliciesCreateRequestConnectionRules.pipe( T.Body("connection_rules"), ), ), exclude: S.optional(AccessPoliciesCreateRequestIncludeList), isolationRequired: S.optional(S.Boolean.pipe(T.Body("isolation_required"))), mfaConfig: S.optional( AccessPoliciesCreateRequestMfaConfig.pipe(T.Body("mfa_config")), ), purposeJustificationPrompt: S.optional( S.String.pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.Boolean.pipe(T.Body("purpose_justification_required")), ), require: S.optional(AccessPoliciesCreateRequestIncludeList), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/policies", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessPolicyRequest", }) as any as S.Schema; export type AccessPoliciesCreateResponseApprovalGroupsItemEmailAddressesList = Array; export const AccessPoliciesCreateResponseApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessPoliciesCreateResponseApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessPoliciesCreateResponseApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessPoliciesCreateResponseApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessPoliciesCreateResponseApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessPoliciesCreateResponseApprovalGroupsItem", }) as any as S.Schema; export type AccessPoliciesCreateResponseApprovalGroupsList = Array; export const AccessPoliciesCreateResponseApprovalGroupsList = /*@__PURE__*/ S.Array( AccessPoliciesCreateResponseApprovalGroupsItem, ) as any as S.Schema; export type AccessPoliciesCreateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessPoliciesCreateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessPoliciesCreateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessPoliciesCreateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessPoliciesCreateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessPoliciesCreateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessPoliciesCreateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessPoliciesCreateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessPoliciesCreateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessPoliciesCreateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessPoliciesCreateResponseConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessPoliciesCreateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessPoliciesCreateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessPoliciesCreateResponseConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessPoliciesCreateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessPoliciesCreateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessPoliciesCreateResponseConnectionRulesRdp", }) as any as S.Schema; export interface AccessPoliciesCreateResponseConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessPoliciesCreateResponseConnectionRulesRdp | null; } export const AccessPoliciesCreateResponseConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional(S.NullOr(AccessPoliciesCreateResponseConnectionRulesRdp)), }), ).annotate({ identifier: "AccessPoliciesCreateResponseConnectionRules", }) as any as S.Schema; export type AccessPoliciesCreateResponseDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessPoliciesCreateResponseDecision = /*@__PURE__*/ S.String; export type AccessPoliciesCreateResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessPoliciesCreateResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessPoliciesCreateResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessPoliciesCreateResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessPoliciesCreateResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessPoliciesCreateResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessPoliciesCreateResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessPoliciesCreateResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessPoliciesCreateResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessPoliciesCreateResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessPoliciesCreateResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessPoliciesCreateResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessPoliciesCreateResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessPoliciesCreateResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessPoliciesCreateResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessPoliciesCreateResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessPoliciesCreateResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessPoliciesCreateResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessPoliciesCreateResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessPoliciesCreateResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessPoliciesCreateResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessPoliciesCreateResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessPoliciesCreateResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessPoliciesCreateResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessPoliciesCreateResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessPoliciesCreateResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessPoliciesCreateResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessPoliciesCreateResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessPoliciesCreateResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessPoliciesCreateResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessPoliciesCreateResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessPoliciesCreateResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessPoliciesCreateResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessPoliciesCreateResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessPoliciesCreateResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessPoliciesCreateResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessPoliciesCreateResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessPoliciesCreateResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessPoliciesCreateResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessPoliciesCreateResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessPoliciesCreateResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessPoliciesCreateResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessPoliciesCreateResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessPoliciesCreateResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessPoliciesCreateResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessPoliciesCreateResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessPoliciesCreateResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessPoliciesCreateResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessPoliciesCreateResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessPoliciesCreateResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessPoliciesCreateResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export const AccessPoliciesCreateResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export type AccessPoliciesCreateResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export const AccessPoliciesCreateResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export type AccessPoliciesCreateResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessPoliciesCreateResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessPoliciesCreateResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessPoliciesCreateResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessPoliciesCreateResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessPoliciesCreateResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessPoliciesCreateResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessPoliciesCreateResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessPoliciesCreateResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessPoliciesCreateResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessPoliciesCreateResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessPoliciesCreateResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessPoliciesCreateResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessPoliciesCreateResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessPoliciesCreateResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessPoliciesCreateResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessPoliciesCreateResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessPoliciesCreateResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessPoliciesCreateResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessPoliciesCreateResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessPoliciesCreateResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessPoliciesCreateResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessPoliciesCreateResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessPoliciesCreateResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessPoliciesCreateResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessPoliciesCreateResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessPoliciesCreateResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessPoliciesCreateResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessPoliciesCreateResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessPoliciesCreateResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessPoliciesCreateResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessPoliciesCreateResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessPoliciesCreateResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessPoliciesCreateResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessPoliciesCreateResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessPoliciesCreateResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessPoliciesCreateResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessPoliciesCreateResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessPoliciesCreateResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesCreateResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export type AccessPoliciesCreateResponseExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessPoliciesCreateResponseExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesCreateResponseExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesCreateResponseExcludeList = Array; export const AccessPoliciesCreateResponseExcludeList = /*@__PURE__*/ S.Array( AccessPoliciesCreateResponseExcludeItem, ) as any as S.Schema; export type AccessPoliciesCreateResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessPoliciesCreateResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessPoliciesCreateResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessPoliciesCreateResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessPoliciesCreateResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessPoliciesCreateResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessPoliciesCreateResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessPoliciesCreateResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessPoliciesCreateResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessPoliciesCreateResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessPoliciesCreateResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessPoliciesCreateResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessPoliciesCreateResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessPoliciesCreateResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessPoliciesCreateResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessPoliciesCreateResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessPoliciesCreateResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessPoliciesCreateResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessPoliciesCreateResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessPoliciesCreateResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessPoliciesCreateResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessPoliciesCreateResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessPoliciesCreateResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessPoliciesCreateResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessPoliciesCreateResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessPoliciesCreateResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessPoliciesCreateResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessPoliciesCreateResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessPoliciesCreateResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessPoliciesCreateResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessPoliciesCreateResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessPoliciesCreateResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessPoliciesCreateResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessPoliciesCreateResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessPoliciesCreateResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessPoliciesCreateResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessPoliciesCreateResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessPoliciesCreateResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessPoliciesCreateResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessPoliciesCreateResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessPoliciesCreateResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessPoliciesCreateResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessPoliciesCreateResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessPoliciesCreateResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessPoliciesCreateResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessPoliciesCreateResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessPoliciesCreateResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessPoliciesCreateResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessPoliciesCreateResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessPoliciesCreateResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessPoliciesCreateResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesCreateResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessPoliciesCreateResponseIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesCreateResponseIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesCreateResponseIncludeList = Array; export const AccessPoliciesCreateResponseIncludeList = /*@__PURE__*/ S.Array( AccessPoliciesCreateResponseIncludeItem, ) as any as S.Schema; export type AccessPoliciesCreateResponseMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessPoliciesCreateResponseMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessPoliciesCreateResponseMfaConfigAllowedAuthenticatorsList = Array; export const AccessPoliciesCreateResponseMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessPoliciesCreateResponseMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessPoliciesCreateResponseMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessPoliciesCreateResponseMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessPoliciesCreateResponseMfaConfig = /*@__PURE__*/ S.suspend( () => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessPoliciesCreateResponseMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessPoliciesCreateResponseMfaConfig", }) as any as S.Schema; export type AccessPoliciesCreateResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessPoliciesCreateResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessPoliciesCreateResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessPoliciesCreateResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessPoliciesCreateResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessPoliciesCreateResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessPoliciesCreateResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessPoliciesCreateResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessPoliciesCreateResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessPoliciesCreateResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessPoliciesCreateResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessPoliciesCreateResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessPoliciesCreateResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessPoliciesCreateResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessPoliciesCreateResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessPoliciesCreateResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessPoliciesCreateResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessPoliciesCreateResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessPoliciesCreateResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessPoliciesCreateResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessPoliciesCreateResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessPoliciesCreateResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessPoliciesCreateResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessPoliciesCreateResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessPoliciesCreateResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessPoliciesCreateResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessPoliciesCreateResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessPoliciesCreateResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessPoliciesCreateResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessPoliciesCreateResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessPoliciesCreateResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessPoliciesCreateResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessPoliciesCreateResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessPoliciesCreateResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessPoliciesCreateResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessPoliciesCreateResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessPoliciesCreateResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessPoliciesCreateResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessPoliciesCreateResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessPoliciesCreateResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessPoliciesCreateResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessPoliciesCreateResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessPoliciesCreateResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessPoliciesCreateResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessPoliciesCreateResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessPoliciesCreateResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessPoliciesCreateResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessPoliciesCreateResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessPoliciesCreateResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessPoliciesCreateResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessPoliciesCreateResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesCreateResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessPoliciesCreateResponseRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesCreateResponseRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesCreateResponseRequireList = Array; export const AccessPoliciesCreateResponseRequireList = /*@__PURE__*/ S.Array( AccessPoliciesCreateResponseRequireItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessPolicyResponse { /** The UUID of the policy */ id?: string | null; /** Number of access applications currently using this policy. */ appCount?: number | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessPoliciesCreateResponseApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessPoliciesCreateResponseConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessPoliciesCreateResponseDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessPoliciesCreateResponseExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessPoliciesCreateResponseIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessPoliciesCreateResponseMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessPoliciesCreateResponseRequireList | null; reusable?: boolean | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const CreateAccessPolicyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), appCount: S.optional(S.NullOr(S.Number).pipe(T.Body("app_count"))), approvalGroups: S.optional( S.NullOr(AccessPoliciesCreateResponseApprovalGroupsList).pipe( T.Body("approval_groups"), ), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr(AccessPoliciesCreateResponseConnectionRules).pipe( T.Body("connection_rules"), ), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional(S.NullOr(AccessPoliciesCreateResponseDecision)), exclude: S.optional(S.NullOr(AccessPoliciesCreateResponseExcludeList)), include: S.optional(S.NullOr(AccessPoliciesCreateResponseIncludeList)), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr(AccessPoliciesCreateResponseMfaConfig).pipe( T.Body("mfa_config"), ), ), name: S.optional(S.NullOr(S.String)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional(S.NullOr(AccessPoliciesCreateResponseRequireList)), reusable: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessPolicyResponse", }) as any as S.Schema; export interface CreateAccessServiceTokenForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** The name of the service token. */ name: string; /** A version number identifying the current `client_secret` associated with the service token. Incrementing it triggers a rotation; the previous secret will still be accepted until the time indicated by `previous_client_secret_expires_at`. */ clientSecretVersion?: number; /** The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h). */ duration?: string; /** The expiration of the previous `client_secret`. This can be modified at any point after a rotation. For example, you may extend it further into the future if you need more time to update services with the new secret; or move it into the past to immediately invalidate the previous token in case of compromise. */ previousClientSecretExpiresAt?: string; } export const CreateAccessServiceTokenForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.String, clientSecretVersion: S.optional( S.Number.pipe(T.Body("client_secret_version")), ), duration: S.optional(S.String), previousClientSecretExpiresAt: S.optional( S.String.pipe(T.Body("previous_client_secret_expires_at")), ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/service_tokens", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessServiceTokenForAccountRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessServiceTokenResponse { /** The ID of the service token. */ id?: string | null; /** The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header. */ clientId?: string | null; /** The Client Secret for the service token. Access will check for this value in the `CF-Access-Client-Secret` request header. */ clientSecret?: string | null; /** The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h). */ duration?: string | null; /** The name of the service token. */ name?: string | null; } export const CreateAccessServiceTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional(S.NullOr(S.String).pipe(T.Body("client_secret"))), duration: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessServiceTokenResponse", }) as any as S.Schema; export interface CreateAccessServiceTokenForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** The name of the service token. */ name: string; /** A version number identifying the current `client_secret` associated with the service token. Incrementing it triggers a rotation; the previous secret will still be accepted until the time indicated by `previous_client_secret_expires_at`. */ clientSecretVersion?: number; /** The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h). */ duration?: string; /** The expiration of the previous `client_secret`. This can be modified at any point after a rotation. For example, you may extend it further into the future if you need more time to update services with the new secret; or move it into the past to immediately invalidate the previous token in case of compromise. */ previousClientSecretExpiresAt?: string; } export const CreateAccessServiceTokenForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), name: S.String, clientSecretVersion: S.optional( S.Number.pipe(T.Body("client_secret_version")), ), duration: S.optional(S.String), previousClientSecretExpiresAt: S.optional( S.String.pipe(T.Body("previous_client_secret_expires_at")), ), }) .pipe( T.Http({ method: "POST", uri: "/zones/{zone_id}/access/service_tokens", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessServiceTokenForZoneRequest", }) as any as S.Schema; export interface CreateAccessTagRequest { /** Identifier. */ accountId: string; /** The name of the tag */ name?: string; } export const CreateAccessTagRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.optional(S.String), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/tags", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessTagRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessTagResponse { /** The name of the tag */ name: string; } export const CreateAccessTagResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.String, }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessTagResponse", }) as any as S.Schema; export interface CreateAccessUserRequest { /** Identifier. */ accountId: string; /** The email of the user. */ email: string; /** The name of the user. */ name?: string; } export const CreateAccessUserRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), email: S.String, name: S.optional(S.String), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/users", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessUserRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateAccessUserResponse { /** UUID. */ id?: string | null; /** True if the user has authenticated with Cloudflare Access. */ accessSeat?: boolean | null; /** The number of active devices registered to the user. */ activeDeviceCount?: number | null; createdAt?: string | null; /** The email of the user. */ email?: string | null; /** True if the user has logged into the WARP client. */ gatewaySeat?: boolean | null; /** The time at which the user last successfully logged in. */ lastSuccessfulLogin?: string | null; /** The name of the user. */ name?: string | null; /** The unique API identifier for the Zero Trust seat. */ seatUid?: string | null; /** The unique API identifier for the user. */ uid?: string | null; updatedAt?: string | null; } export const CreateAccessUserResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), accessSeat: S.optional(S.NullOr(S.Boolean).pipe(T.Body("access_seat"))), activeDeviceCount: S.optional( S.NullOr(S.Number).pipe(T.Body("active_device_count")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), email: S.optional(S.NullOr(S.String)), gatewaySeat: S.optional(S.NullOr(S.Boolean).pipe(T.Body("gateway_seat"))), lastSuccessfulLogin: S.optional( S.NullOr(S.String).pipe(T.Body("last_successful_login")), ), name: S.optional(S.NullOr(S.String)), seatUid: S.optional(S.NullOr(S.String).pipe(T.Body("seat_uid"))), uid: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateAccessUserResponse", }) as any as S.Schema; export type CreateCasbIntegrationRequestApplication = | "GITHUB" | "GOOGLE_WORKSPACE" | "MICROSOFT_INTERNAL" | "SALESFORCE" | "SLACK"; export const CreateCasbIntegrationRequestApplication = /*@__PURE__*/ S.String; export type CreateCasbIntegrationRequestCredentialsMap = { [key: string]: unknown | undefined; }; export const CreateCasbIntegrationRequestCredentialsMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type CreateCasbIntegrationRequestDlpProfilesList = Array; export const CreateCasbIntegrationRequestDlpProfilesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type CreateCasbIntegrationRequestPermissionsList = Array; export const CreateCasbIntegrationRequestPermissionsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type CreateCasbIntegrationRequestUseCasesItem = | "casb" | "ces" | "auto_remediation"; export const CreateCasbIntegrationRequestUseCasesItem = /*@__PURE__*/ S.String; export type CreateCasbIntegrationRequestUseCasesList = Array< CreateCasbIntegrationRequestUseCasesItem | (string & {}) >; export const CreateCasbIntegrationRequestUseCasesList = /*@__PURE__*/ S.Array( CreateCasbIntegrationRequestUseCasesItem, ) as any as S.Schema; export interface CreateCasbIntegrationRequest { accountId: string; /** Vendor/application slug (e.g., GOOGLE_WORKSPACE). */ application: CreateCasbIntegrationRequestApplication | (string & {}); /** Credentials for the integration. */ credentials: CreateCasbIntegrationRequestCredentialsMap; /** Name of the integration. */ name: string; /** Authentication method slug (uses default if omitted). */ authMethod?: string; /** List of DLP profile IDs to associate. */ dlpProfiles?: CreateCasbIntegrationRequestDlpProfilesList; /** List of permission scopes (uses policy defaults if empty). */ permissions?: CreateCasbIntegrationRequestPermissionsList; /** List of use case or feature slugs to enroll (e.g., ['casb', 'ces', 'auto_remediation']). */ useCases?: CreateCasbIntegrationRequestUseCasesList; } export const CreateCasbIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), application: CreateCasbIntegrationRequestApplication, credentials: CreateCasbIntegrationRequestCredentialsMap, name: S.String, authMethod: S.optional(S.String.pipe(T.Body("auth_method"))), dlpProfiles: S.optional( CreateCasbIntegrationRequestDlpProfilesList.pipe(T.Body("dlp_profiles")), ), permissions: S.optional(CreateCasbIntegrationRequestPermissionsList), useCases: S.optional( CreateCasbIntegrationRequestUseCasesList.pipe(T.Body("use_cases")), ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/one/integrations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateCasbIntegrationRequest", }) as any as S.Schema; export type CreateCasbIntegrationResponseApplicationMap = { [key: string]: string | undefined; }; export const CreateCasbIntegrationResponseApplicationMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export type CreateCasbIntegrationResponseAuthMethodMap = { [key: string]: string | undefined; }; export const CreateCasbIntegrationResponseAuthMethodMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export type CreateCasbIntegrationResponseAuthorizationLinkComponentsMap = { [key: string]: unknown | undefined; }; export const CreateCasbIntegrationResponseAuthorizationLinkComponentsMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export interface CreateCasbIntegrationResponseAuthorizationLink { components: CreateCasbIntegrationResponseAuthorizationLinkComponentsMap; link: string; } export const CreateCasbIntegrationResponseAuthorizationLink = /*@__PURE__*/ S.suspend(() => S.Struct({ components: CreateCasbIntegrationResponseAuthorizationLinkComponentsMap, link: S.String, }), ).annotate({ identifier: "CreateCasbIntegrationResponseAuthorizationLink", }) as any as S.Schema; export type CreateCasbIntegrationResponseDlpProfilesList = Array; export const CreateCasbIntegrationResponseDlpProfilesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type CreateCasbIntegrationResponseHealthDetailsItemMap = { [key: string]: unknown | undefined; }; export const CreateCasbIntegrationResponseHealthDetailsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type CreateCasbIntegrationResponseHealthDetailsList = Array; export const CreateCasbIntegrationResponseHealthDetailsList = /*@__PURE__*/ S.Array( CreateCasbIntegrationResponseHealthDetailsItemMap, ) as any as S.Schema; export type CreateCasbIntegrationResponseUseCasesItemMap = { [key: string]: unknown | undefined; }; export const CreateCasbIntegrationResponseUseCasesItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type CreateCasbIntegrationResponseUseCasesList = Array; export const CreateCasbIntegrationResponseUseCasesList = /*@__PURE__*/ S.Array( CreateCasbIntegrationResponseUseCasesItemMap, ) as any as S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface CreateCasbIntegrationResponse { /** Integration ID. */ id: string; application: CreateCasbIntegrationResponseApplicationMap; /** The integration's authentication method. */ authMethod: CreateCasbIntegrationResponseAuthMethodMap; /** Authorization link for the integration. */ authorizationLink: CreateCasbIntegrationResponseAuthorizationLink; /** When the integration was created. */ created: string; /** Credentials expiry time. */ credentialsExpiry: string; /** DLP Profiles enabled for the integration. */ dlpProfiles: CreateCasbIntegrationResponseDlpProfilesList; /** Health details with remediation hints. */ healthDetails: CreateCasbIntegrationResponseHealthDetailsList; /** Whether the user paused the integration. */ isPaused: boolean; /** Last time the integration was hydrated. */ lastHydrated: string; /** Name of the integration. */ name: string; /** Organization ID. */ organizationId: number; /** Integration status. */ status: string; /** When the integration was last updated. */ updated: string; /** Use cases enabled for the integration. */ useCases: CreateCasbIntegrationResponseUseCasesList; } export const CreateCasbIntegrationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, application: CreateCasbIntegrationResponseApplicationMap, authMethod: CreateCasbIntegrationResponseAuthMethodMap.pipe( T.Body("auth_method"), ), authorizationLink: CreateCasbIntegrationResponseAuthorizationLink.pipe( T.Body("authorization_link"), ), created: S.String, credentialsExpiry: S.String.pipe(T.Body("credentials_expiry")), dlpProfiles: CreateCasbIntegrationResponseDlpProfilesList.pipe( T.Body("dlp_profiles"), ), healthDetails: CreateCasbIntegrationResponseHealthDetailsList.pipe( T.Body("health_details"), ), isPaused: S.Boolean.pipe(T.Body("is_paused")), lastHydrated: S.String.pipe(T.Body("last_hydrated")), name: S.String, organizationId: S.Number.pipe(T.Body("organization_id")), status: S.String, updated: S.String, useCases: CreateCasbIntegrationResponseUseCasesList.pipe( T.Body("use_cases"), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateCasbIntegrationResponse", }) as any as S.Schema; export interface DevicesDeploymentGroupsCreateRequestVersionConfigItem { /** The target environment for the client version (e.g., windows, macos). */ targetEnvironment: string; /** The specific client version to deploy. */ version: string; } export const DevicesDeploymentGroupsCreateRequestVersionConfigItem = /*@__PURE__*/ S.suspend(() => S.Struct({ targetEnvironment: S.String.pipe(T.Body("target_environment")), version: S.String, }), ).annotate({ identifier: "DevicesDeploymentGroupsCreateRequestVersionConfigItem", }) as any as S.Schema; export type DevicesDeploymentGroupsCreateRequestVersionConfigList = Array; export const DevicesDeploymentGroupsCreateRequestVersionConfigList = /*@__PURE__*/ S.Array( DevicesDeploymentGroupsCreateRequestVersionConfigItem, ) as any as S.Schema; export type DevicesDeploymentGroupsCreateRequestPolicyIdsList = Array; export const DevicesDeploymentGroupsCreateRequestPolicyIdsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface CreateDeviceDeploymentGroupRequest { accountId: string; /** A user-friendly name for the deployment group. */ name: string; /** Contains at least one version configuration. */ versionConfig: DevicesDeploymentGroupsCreateRequestVersionConfigList; /** Contains an optional list of policy IDs assigned to a group. */ policyIds?: DevicesDeploymentGroupsCreateRequestPolicyIdsList; } export const CreateDeviceDeploymentGroupRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.String, versionConfig: DevicesDeploymentGroupsCreateRequestVersionConfigList.pipe( T.Body("version_config"), ), policyIds: S.optional( DevicesDeploymentGroupsCreateRequestPolicyIdsList.pipe( T.Body("policy_ids"), ), ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/devices/deployment-groups", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDeviceDeploymentGroupRequest", }) as any as S.Schema; export type DevicesDeploymentGroupsCreateResponseVersionConfigItem = DevicesDeploymentGroupsCreateRequestVersionConfigItem; export const DevicesDeploymentGroupsCreateResponseVersionConfigItem = DevicesDeploymentGroupsCreateRequestVersionConfigItem; export type DevicesDeploymentGroupsCreateResponseVersionConfigList = Array; export const DevicesDeploymentGroupsCreateResponseVersionConfigList = /*@__PURE__*/ S.Array( DevicesDeploymentGroupsCreateRequestVersionConfigItem, ) as any as S.Schema; export type DevicesDeploymentGroupsCreateResponsePolicyIdsList = Array; export const DevicesDeploymentGroupsCreateResponsePolicyIdsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDeviceDeploymentGroupResponse { /** The ID of the deployment group. */ id: string; /** The RFC3339Nano timestamp when the deployment group was created. */ createdAt: string; /** A user-friendly name for the deployment group. */ name: string; /** The RFC3339Nano timestamp when the deployment group was last updated. */ updatedAt: string; /** Contains version configurations for different target environments. */ versionConfig: DevicesDeploymentGroupsCreateResponseVersionConfigList; /** Contains a list of policy IDs assigned to this deployment group. */ policyIds?: DevicesDeploymentGroupsCreateResponsePolicyIdsList | null; } export const CreateDeviceDeploymentGroupResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), versionConfig: DevicesDeploymentGroupsCreateResponseVersionConfigList.pipe( T.Body("version_config"), ), policyIds: S.optional( S.NullOr(DevicesDeploymentGroupsCreateResponsePolicyIdsList).pipe( T.Body("policy_ids"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDeviceDeploymentGroupResponse", }) as any as S.Schema; export type DevicesDexTestsCreateRequestDataKind = "http" | "traceroute"; export const DevicesDexTestsCreateRequestDataKind = /*@__PURE__*/ S.String; export type DevicesDexTestsCreateRequestDataMethod = "GET"; export const DevicesDexTestsCreateRequestDataMethod = /*@__PURE__*/ S.String; export interface DevicesDexTestsCreateRequestData { /** The desired endpoint to test. */ host: string; /** The type of test. */ kind: DevicesDexTestsCreateRequestDataKind | (string & {}); /** The HTTP request method type. */ method?: DevicesDexTestsCreateRequestDataMethod | (string & {}); } export const DevicesDexTestsCreateRequestData = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.String, kind: DevicesDexTestsCreateRequestDataKind, method: S.optional(DevicesDexTestsCreateRequestDataMethod), }), ).annotate({ identifier: "DevicesDexTestsCreateRequestData", }) as any as S.Schema; export interface DevicesDexTestsCreateRequestTargetPoliciesItem { /** The id of the DEX rule. */ id: string; /** Whether the DEX rule is the account default. */ default?: boolean; /** The name of the DEX rule. */ name?: string; } export const DevicesDexTestsCreateRequestTargetPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, default: S.optional(S.Boolean), name: S.optional(S.String), }), ).annotate({ identifier: "DevicesDexTestsCreateRequestTargetPoliciesItem", }) as any as S.Schema; export type DevicesDexTestsCreateRequestTargetPoliciesList = Array; export const DevicesDexTestsCreateRequestTargetPoliciesList = /*@__PURE__*/ S.Array( DevicesDexTestsCreateRequestTargetPoliciesItem, ) as any as S.Schema; export interface CreateDeviceDexTestRequest { /** Unique identifier linked to an account. */ accountId: string; /** The configuration object which contains the details for the WARP client to conduct the test. */ data: DevicesDexTestsCreateRequestData; /** Determines whether or not the test is active. */ enabled: boolean; /** How often the test will run. */ interval: string; /** The name of the DEX test. Must be unique. */ name: string; /** Additional details about the test. */ description?: string; /** DEX rules targeted by this test */ targetPolicies?: DevicesDexTestsCreateRequestTargetPoliciesList; targeted?: boolean; } export const CreateDeviceDexTestRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), data: DevicesDexTestsCreateRequestData, enabled: S.Boolean, interval: S.String, name: S.String, description: S.optional(S.String), targetPolicies: S.optional( DevicesDexTestsCreateRequestTargetPoliciesList.pipe( T.Body("target_policies"), ), ), targeted: S.optional(S.Boolean), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dex/devices/dex_tests", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDeviceDexTestRequest", }) as any as S.Schema; export type DevicesDexTestsCreateResponseDataKind = "http" | "traceroute"; export const DevicesDexTestsCreateResponseDataKind = /*@__PURE__*/ S.String; export type DevicesDexTestsCreateResponseDataMethod = "GET"; export const DevicesDexTestsCreateResponseDataMethod = /*@__PURE__*/ S.String; export interface DevicesDexTestsCreateResponseData { /** The desired endpoint to test. */ host: string; /** The type of test. */ kind: DevicesDexTestsCreateResponseDataKind; /** The HTTP request method type. */ method?: DevicesDexTestsCreateResponseDataMethod | null; } export const DevicesDexTestsCreateResponseData = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.String, kind: DevicesDexTestsCreateResponseDataKind, method: S.optional(S.NullOr(DevicesDexTestsCreateResponseDataMethod)), }), ).annotate({ identifier: "DevicesDexTestsCreateResponseData", }) as any as S.Schema; export interface DevicesDexTestsCreateResponseTargetPoliciesItem { /** The id of the DEX rule. */ id: string; /** Whether the DEX rule is the account default. */ default?: boolean | null; /** The name of the DEX rule. */ name?: string | null; } export const DevicesDexTestsCreateResponseTargetPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, default: S.optional(S.NullOr(S.Boolean)), name: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesDexTestsCreateResponseTargetPoliciesItem", }) as any as S.Schema; export type DevicesDexTestsCreateResponseTargetPoliciesList = Array; export const DevicesDexTestsCreateResponseTargetPoliciesList = /*@__PURE__*/ S.Array( DevicesDexTestsCreateResponseTargetPoliciesItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDeviceDexTestResponse { /** The configuration object which contains the details for the WARP client to conduct the test. */ data: DevicesDexTestsCreateResponseData; /** Determines whether or not the test is active. */ enabled: boolean; /** How often the test will run. */ interval: string; /** The name of the DEX test. Must be unique. */ name: string; /** Additional details about the test. */ description?: string | null; /** DEX rules targeted by this test */ targetPolicies?: DevicesDexTestsCreateResponseTargetPoliciesList | null; targeted?: boolean | null; /** The unique identifier for the test. */ testId?: string | null; } export const CreateDeviceDexTestResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ data: DevicesDexTestsCreateResponseData, enabled: S.Boolean, interval: S.String, name: S.String, description: S.optional(S.NullOr(S.String)), targetPolicies: S.optional( S.NullOr(DevicesDexTestsCreateResponseTargetPoliciesList).pipe( T.Body("target_policies"), ), ), targeted: S.optional(S.NullOr(S.Boolean)), testId: S.optional(S.NullOr(S.String).pipe(T.Body("test_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDeviceDexTestResponse", }) as any as S.Schema; export interface CreateDeviceIpProfileRequest { accountId: string; /** The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes". */ match: string; /** A user-friendly name for the Device IP profile. */ name: string; /** The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field. */ precedence: number; /** The ID of the Subnet. */ subnetId: string; /** An optional description of the Device IP profile. */ description?: string; /** Whether the Device IP profile will be applied to matching devices. */ enabled?: boolean; } export const CreateDeviceIpProfileRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), match: S.String, name: S.String, precedence: S.Number, subnetId: S.String.pipe(T.Body("subnet_id")), description: S.optional(S.String), enabled: S.optional(S.Boolean), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/devices/ip-profiles", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDeviceIpProfileRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDeviceIpProfileResponse { /** The ID of the Device IP profile. */ id: string; /** The RFC3339Nano timestamp when the Device IP profile was created. */ createdAt: string; /** An optional description of the Device IP profile. */ description: string; /** Whether the Device IP profile is enabled. */ enabled: boolean; /** The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes". */ match: string; /** A user-friendly name for the Device IP profile. */ name: string; /** The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field. */ precedence: number; /** The ID of the Subnet. */ subnetId: string; /** The RFC3339Nano timestamp when the Device IP profile was last updated. */ updatedAt: string; } export const CreateDeviceIpProfileResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), description: S.String, enabled: S.Boolean, match: S.String, name: S.String, precedence: S.Number, subnetId: S.String.pipe(T.Body("subnet_id")), updatedAt: S.String.pipe(T.Body("updated_at")), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDeviceIpProfileResponse", }) as any as S.Schema; export interface DevicesNetworksCreateRequestConfig { /** A network address of the form "host:port" that the WARP client will use to detect the presence of a TLS host. */ tlsSockaddr: string; /** The SHA-256 hash of the TLS certificate presented by the host found at tls_sockaddr. If absent, regular certificate verification (trusted roots, valid timestamp, etc) will be used to validate the certificate. */ sha256?: string; } export const DevicesNetworksCreateRequestConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ tlsSockaddr: S.String.pipe(T.Body("tls_sockaddr")), sha256: S.optional(S.String), }), ).annotate({ identifier: "DevicesNetworksCreateRequestConfig", }) as any as S.Schema; export type DevicesNetworksCreateRequestType = "tls"; export const DevicesNetworksCreateRequestType = /*@__PURE__*/ S.String; export interface CreateDeviceNetworkRequest { accountId: string; /** The configuration object containing information for the WARP client to detect the managed network. */ config: DevicesNetworksCreateRequestConfig; /** The name of the device managed network. This name must be unique. */ name: string; /** The type of device managed network. */ type: DevicesNetworksCreateRequestType | (string & {}); } export const CreateDeviceNetworkRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), config: DevicesNetworksCreateRequestConfig, name: S.String, type: DevicesNetworksCreateRequestType, }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/devices/networks", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDeviceNetworkRequest", }) as any as S.Schema; export interface DevicesNetworksCreateResponseConfig { /** A network address of the form "host:port" that the WARP client will use to detect the presence of a TLS host. */ tlsSockaddr: string; /** The SHA-256 hash of the TLS certificate presented by the host found at tls_sockaddr. If absent, regular certificate verification (trusted roots, valid timestamp, etc) will be used to validate the certificate. */ sha256?: string | null; } export const DevicesNetworksCreateResponseConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ tlsSockaddr: S.String.pipe(T.Body("tls_sockaddr")), sha256: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesNetworksCreateResponseConfig", }) as any as S.Schema; export type DevicesNetworksCreateResponseType = "tls"; export const DevicesNetworksCreateResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDeviceNetworkResponse { /** The configuration object containing information for the WARP client to detect the managed network. */ config?: DevicesNetworksCreateResponseConfig | null; /** The name of the device managed network. This name must be unique. */ name?: string | null; /** API UUID. */ networkId?: string | null; /** The type of device managed network. */ type?: DevicesNetworksCreateResponseType | null; } export const CreateDeviceNetworkResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ config: S.optional(S.NullOr(DevicesNetworksCreateResponseConfig)), name: S.optional(S.NullOr(S.String)), networkId: S.optional(S.NullOr(S.String).pipe(T.Body("network_id"))), type: S.optional(S.NullOr(DevicesNetworksCreateResponseType)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDeviceNetworkResponse", }) as any as S.Schema; export interface DevicesPoliciesCustomCreateRequestDnsSearchSuffixesItem { /** The DNS search suffix to append when resolving short hostnames. */ suffix: string; /** A description of the DNS search suffix. */ description?: string; } export const DevicesPoliciesCustomCreateRequestDnsSearchSuffixesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ suffix: S.String, description: S.optional(S.String), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateRequestDnsSearchSuffixesItem", }) as any as S.Schema; export type DevicesPoliciesCustomCreateRequestDnsSearchSuffixesList = Array; export const DevicesPoliciesCustomCreateRequestDnsSearchSuffixesList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateRequestDnsSearchSuffixesItem, ) as any as S.Schema; export interface DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress { /** The address in CIDR format to exclude from the tunnel. If `address` is present, `host` must not be present. */ address: string; /** A description of the Split Tunnel item, displayed in the client UI. */ description?: string; } export const DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = /*@__PURE__*/ S.suspend(() => S.Struct({ address: S.String, description: S.optional(S.String), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress", }) as any as S.Schema; export interface DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost { /** The domain name to exclude from the tunnel. If `host` is present, `address` must not be present. */ host: string; /** A description of the Split Tunnel item, displayed in the client UI. */ description?: string; } export const DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.String, description: S.optional(S.String), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost", }) as any as S.Schema; export type DevicesPoliciesCustomCreateRequestExcludeItem = | DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomCreateRequestExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomCreateRequestExcludeList = Array; export const DevicesPoliciesCustomCreateRequestExcludeList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateRequestExcludeItem, ) as any as S.Schema; export type DevicesPoliciesCustomCreateRequestGlobalAccelerationApiEndpointsList = Array; export const DevicesPoliciesCustomCreateRequestGlobalAccelerationApiEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesCustomCreateRequestGlobalAccelerationMasqueEndpointsList = Array; export const DevicesPoliciesCustomCreateRequestGlobalAccelerationMasqueEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesCustomCreateRequestGlobalAccelerationWireguardEndpointsList = Array; export const DevicesPoliciesCustomCreateRequestGlobalAccelerationWireguardEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomCreateRequestGlobalAcceleration { /** IP:port entries for the API endpoints. */ apiEndpoints: DevicesPoliciesCustomCreateRequestGlobalAccelerationApiEndpointsList; /** Global acceleration settings are used only when "enabled". */ enabled: boolean; /** IP:port entries for the MASQUE tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ masqueEndpoints: DevicesPoliciesCustomCreateRequestGlobalAccelerationMasqueEndpointsList; /** IP:port entries for the WireGuard tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ wireguardEndpoints: DevicesPoliciesCustomCreateRequestGlobalAccelerationWireguardEndpointsList; } export const DevicesPoliciesCustomCreateRequestGlobalAcceleration = /*@__PURE__*/ S.suspend(() => S.Struct({ apiEndpoints: DevicesPoliciesCustomCreateRequestGlobalAccelerationApiEndpointsList.pipe( T.Body("api_endpoints"), ), enabled: S.Boolean, masqueEndpoints: DevicesPoliciesCustomCreateRequestGlobalAccelerationMasqueEndpointsList.pipe( T.Body("masque_endpoints"), ), wireguardEndpoints: DevicesPoliciesCustomCreateRequestGlobalAccelerationWireguardEndpointsList.pipe( T.Body("wireguard_endpoints"), ), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateRequestGlobalAcceleration", }) as any as S.Schema; export interface DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress { /** The address in CIDR format to include in the tunnel. If `address` is present, `host` must not be present. */ address: string; /** A description of the Split Tunnel item, displayed in the client UI. */ description?: string; } export const DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = /*@__PURE__*/ S.suspend(() => S.Struct({ address: S.String, description: S.optional(S.String), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress", }) as any as S.Schema; export interface DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost { /** The domain name to include in the tunnel. If `host` is present, `address` must not be present. */ host: string; /** A description of the Split Tunnel item, displayed in the client UI. */ description?: string; } export const DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.String, description: S.optional(S.String), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost", }) as any as S.Schema; export type DevicesPoliciesCustomCreateRequestIncludeItem = | DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomCreateRequestIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomCreateRequestIncludeList = Array; export const DevicesPoliciesCustomCreateRequestIncludeList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateRequestIncludeItem, ) as any as S.Schema; export interface DevicesPoliciesCustomCreateRequestServiceModeV2 { /** The mode to run the WARP client under. */ mode?: string; /** The port number when used with proxy mode. */ port?: number; } export const DevicesPoliciesCustomCreateRequestServiceModeV2 = /*@__PURE__*/ S.suspend(() => S.Struct({ mode: S.optional(S.String), port: S.optional(S.Number), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateRequestServiceModeV2", }) as any as S.Schema; export type DevicesPoliciesCustomCreateRequestVirtualNetworksAllowedList = Array; export const DevicesPoliciesCustomCreateRequestVirtualNetworksAllowedList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomCreateRequestVirtualNetworks { /** List of virtual network IDs the device is allowed to access. When virtual_networks is set, at least one entry is required. */ allowed: DevicesPoliciesCustomCreateRequestVirtualNetworksAllowedList; /** The default virtual network ID. Must be included in the `allowed` list. */ default: string; } export const DevicesPoliciesCustomCreateRequestVirtualNetworks = /*@__PURE__*/ S.suspend(() => S.Struct({ allowed: DevicesPoliciesCustomCreateRequestVirtualNetworksAllowedList, default: S.String, }), ).annotate({ identifier: "DevicesPoliciesCustomCreateRequestVirtualNetworks", }) as any as S.Schema; export interface CreateDevicePolicyCustomRequest { accountId: string; /** The wirefilter expression to match devices. Available values: "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.service_token_uuid", "identity.saml_attributes", "network", "os.name", "os.version". */ match: string; /** The name of the device settings profile. */ name: string; /** The precedence of the policy. Lower values indicate higher precedence. Policies will be evaluated in ascending order of this field. */ precedence: number; /** Whether to allow the user to switch WARP between modes. */ allowModeSwitch?: boolean; /** Whether to receive update notifications when a new version of the client is available. */ allowUpdates?: boolean; /** Whether to allow devices to leave the organization. */ allowedToLeave?: boolean; /** The amount of time in seconds to reconnect after having been disabled. */ autoConnect?: number; /** Turn on the captive portal after the specified amount of time. */ captivePortal?: number; /** A description of the policy. */ description?: string; /** If the `dns_server` field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to `true`. */ disableAutoFallback?: boolean; /** List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear. */ dnsSearchSuffixes?: DevicesPoliciesCustomCreateRequestDnsSearchSuffixesList; /** Whether the policy will be applied to matching devices. */ enabled?: boolean; /** List of routes excluded in the WARP client's tunnel. Both 'exclude' and 'include' cannot be set in the same request. */ exclude?: DevicesPoliciesCustomCreateRequestExcludeList; /** Whether to add Microsoft IPs to Split Tunnel exclusions. */ excludeOfficeIps?: boolean; /** Global Acceleration settings for China. When configured, WARP clients connect to the Global Accelerator addresses instead of the default ones. Please contact your account representative to enable this feature on your account. See https://developers.cloudflare.com/china-network/concepts/global-acceleration/. */ globalAcceleration?: DevicesPoliciesCustomCreateRequestGlobalAcceleration; /** List of routes included in the WARP client's tunnel. Both 'exclude' and 'include' cannot be set in the same request. */ include?: DevicesPoliciesCustomCreateRequestIncludeList; /** The amount of time in minutes a user is allowed access to their LAN. A value of 0 will allow LAN access until the next WARP reconnection, such as a reboot or a laptop waking from sleep. Note that this field is omitted from the response if null or unset. */ lanAllowMinutes?: number; /** The size of the subnet for the local access network. Note that this field is omitted from the response if null or unset. */ lanAllowSubnetSize?: number; /** Determines if the operating system will register WARP's local interface IP with your on-premises DNS server. */ registerInterfaceIpWithDns?: boolean; /** Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only). */ sccmVpnBoundarySupport?: boolean; serviceModeV2?: DevicesPoliciesCustomCreateRequestServiceModeV2; /** The URL to launch when the Send Feedback button is clicked. */ supportUrl?: string; /** Whether to allow the user to turn off the WARP switch and disconnect the client. */ switchLocked?: boolean; /** Determines which tunnel protocol to use. */ tunnelProtocol?: string; /** Virtual network access settings for the device. */ virtualNetworks?: DevicesPoliciesCustomCreateRequestVirtualNetworks; } export const CreateDevicePolicyCustomRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), match: S.String, name: S.String, precedence: S.Number, allowModeSwitch: S.optional(S.Boolean.pipe(T.Body("allow_mode_switch"))), allowUpdates: S.optional(S.Boolean.pipe(T.Body("allow_updates"))), allowedToLeave: S.optional(S.Boolean.pipe(T.Body("allowed_to_leave"))), autoConnect: S.optional(S.Number.pipe(T.Body("auto_connect"))), captivePortal: S.optional(S.Number.pipe(T.Body("captive_portal"))), description: S.optional(S.String), disableAutoFallback: S.optional( S.Boolean.pipe(T.Body("disable_auto_fallback")), ), dnsSearchSuffixes: S.optional( DevicesPoliciesCustomCreateRequestDnsSearchSuffixesList.pipe( T.Body("dns_search_suffixes"), ), ), enabled: S.optional(S.Boolean), exclude: S.optional(DevicesPoliciesCustomCreateRequestExcludeList), excludeOfficeIps: S.optional(S.Boolean.pipe(T.Body("exclude_office_ips"))), globalAcceleration: S.optional( DevicesPoliciesCustomCreateRequestGlobalAcceleration.pipe( T.Body("global_acceleration"), ), ), include: S.optional(DevicesPoliciesCustomCreateRequestIncludeList), lanAllowMinutes: S.optional(S.Number.pipe(T.Body("lan_allow_minutes"))), lanAllowSubnetSize: S.optional( S.Number.pipe(T.Body("lan_allow_subnet_size")), ), registerInterfaceIpWithDns: S.optional( S.Boolean.pipe(T.Body("register_interface_ip_with_dns")), ), sccmVpnBoundarySupport: S.optional( S.Boolean.pipe(T.Body("sccm_vpn_boundary_support")), ), serviceModeV2: S.optional( DevicesPoliciesCustomCreateRequestServiceModeV2.pipe( T.Body("service_mode_v2"), ), ), supportUrl: S.optional(S.String.pipe(T.Body("support_url"))), switchLocked: S.optional(S.Boolean.pipe(T.Body("switch_locked"))), tunnelProtocol: S.optional(S.String.pipe(T.Body("tunnel_protocol"))), virtualNetworks: S.optional( DevicesPoliciesCustomCreateRequestVirtualNetworks.pipe( T.Body("virtual_networks"), ), ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/devices/policy", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDevicePolicyCustomRequest", }) as any as S.Schema; export interface DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem { /** The DNS search suffix to append when resolving short hostnames. */ suffix: string; /** A description of the DNS search suffix. */ description?: string | null; } export const DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ suffix: S.String, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem", }) as any as S.Schema; export type DevicesPoliciesCustomCreateResponseDnsSearchSuffixesList = Array; export const DevicesPoliciesCustomCreateResponseDnsSearchSuffixesList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem, ) as any as S.Schema; export interface DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress { /** The address in CIDR format to exclude from the tunnel. If `address` is present, `host` must not be present. */ address: string; /** A description of the Split Tunnel item, displayed in the client UI. */ description?: string | null; } export const DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = /*@__PURE__*/ S.suspend(() => S.Struct({ address: S.String, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress", }) as any as S.Schema; export interface DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost { /** The domain name to exclude from the tunnel. If `host` is present, `address` must not be present. */ host: string; /** A description of the Split Tunnel item, displayed in the client UI. */ description?: string | null; } export const DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.String, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost", }) as any as S.Schema; export type DevicesPoliciesCustomCreateResponseExcludeItem = | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomCreateResponseExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomCreateResponseExcludeList = Array; export const DevicesPoliciesCustomCreateResponseExcludeList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateResponseExcludeItem, ) as any as S.Schema; export type DevicesPoliciesCustomCreateResponseFallbackDomainsItemDnsServerList = Array; export const DevicesPoliciesCustomCreateResponseFallbackDomainsItemDnsServerList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomCreateResponseFallbackDomainsItem { /** The domain suffix to match when resolving locally. */ suffix: string; /** A description of the fallback domain, displayed in the client UI. */ description?: string | null; /** A list of IP addresses to handle domain resolution. */ dnsServer?: DevicesPoliciesCustomCreateResponseFallbackDomainsItemDnsServerList | null; } export const DevicesPoliciesCustomCreateResponseFallbackDomainsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ suffix: S.String, description: S.optional(S.NullOr(S.String)), dnsServer: S.optional( S.NullOr( DevicesPoliciesCustomCreateResponseFallbackDomainsItemDnsServerList, ).pipe(T.Body("dns_server")), ), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateResponseFallbackDomainsItem", }) as any as S.Schema; export type DevicesPoliciesCustomCreateResponseFallbackDomainsList = Array; export const DevicesPoliciesCustomCreateResponseFallbackDomainsList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateResponseFallbackDomainsItem, ) as any as S.Schema; export type DevicesPoliciesCustomCreateResponseGlobalAccelerationApiEndpointsList = Array; export const DevicesPoliciesCustomCreateResponseGlobalAccelerationApiEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesCustomCreateResponseGlobalAccelerationMasqueEndpointsList = Array; export const DevicesPoliciesCustomCreateResponseGlobalAccelerationMasqueEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesCustomCreateResponseGlobalAccelerationWireguardEndpointsList = Array; export const DevicesPoliciesCustomCreateResponseGlobalAccelerationWireguardEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomCreateResponseGlobalAcceleration { /** IP:port entries for the API endpoints. */ apiEndpoints: DevicesPoliciesCustomCreateResponseGlobalAccelerationApiEndpointsList; /** Global acceleration settings are used only when "enabled". */ enabled: boolean; /** IP:port entries for the MASQUE tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ masqueEndpoints: DevicesPoliciesCustomCreateResponseGlobalAccelerationMasqueEndpointsList; /** IP:port entries for the WireGuard tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ wireguardEndpoints: DevicesPoliciesCustomCreateResponseGlobalAccelerationWireguardEndpointsList; } export const DevicesPoliciesCustomCreateResponseGlobalAcceleration = /*@__PURE__*/ S.suspend(() => S.Struct({ apiEndpoints: DevicesPoliciesCustomCreateResponseGlobalAccelerationApiEndpointsList.pipe( T.Body("api_endpoints"), ), enabled: S.Boolean, masqueEndpoints: DevicesPoliciesCustomCreateResponseGlobalAccelerationMasqueEndpointsList.pipe( T.Body("masque_endpoints"), ), wireguardEndpoints: DevicesPoliciesCustomCreateResponseGlobalAccelerationWireguardEndpointsList.pipe( T.Body("wireguard_endpoints"), ), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateResponseGlobalAcceleration", }) as any as S.Schema; export interface DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress { /** The address in CIDR format to include in the tunnel. If `address` is present, `host` must not be present. */ address: string; /** A description of the Split Tunnel item, displayed in the client UI. */ description?: string | null; } export const DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = /*@__PURE__*/ S.suspend(() => S.Struct({ address: S.String, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress", }) as any as S.Schema; export interface DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost { /** The domain name to include in the tunnel. If `host` is present, `address` must not be present. */ host: string; /** A description of the Split Tunnel item, displayed in the client UI. */ description?: string | null; } export const DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.String, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost", }) as any as S.Schema; export type DevicesPoliciesCustomCreateResponseIncludeItem = | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomCreateResponseIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomCreateResponseIncludeList = Array; export const DevicesPoliciesCustomCreateResponseIncludeList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateResponseIncludeItem, ) as any as S.Schema; export interface DevicesPoliciesCustomCreateResponseServiceModeV2 { /** The mode to run the WARP client under. */ mode?: string | null; /** The port number when used with proxy mode. */ port?: number | null; } export const DevicesPoliciesCustomCreateResponseServiceModeV2 = /*@__PURE__*/ S.suspend(() => S.Struct({ mode: S.optional(S.NullOr(S.String)), port: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateResponseServiceModeV2", }) as any as S.Schema; export interface DevicesPoliciesCustomCreateResponseTargetTestsItem { /** The id of the DEX test targeting this policy. */ id?: string | null; /** The name of the DEX test targeting this policy. */ name?: string | null; } export const DevicesPoliciesCustomCreateResponseTargetTestsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPoliciesCustomCreateResponseTargetTestsItem", }) as any as S.Schema; export type DevicesPoliciesCustomCreateResponseTargetTestsList = Array; export const DevicesPoliciesCustomCreateResponseTargetTestsList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateResponseTargetTestsItem, ) as any as S.Schema; export type DevicesPoliciesCustomCreateResponseVirtualNetworksAllowedList = Array; export const DevicesPoliciesCustomCreateResponseVirtualNetworksAllowedList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomCreateResponseVirtualNetworks { /** List of virtual network IDs the device is allowed to access. When virtual_networks is set, at least one entry is required. */ allowed: DevicesPoliciesCustomCreateResponseVirtualNetworksAllowedList; /** The default virtual network ID. Must be included in the `allowed` list. */ default: string; } export const DevicesPoliciesCustomCreateResponseVirtualNetworks = /*@__PURE__*/ S.suspend(() => S.Struct({ allowed: DevicesPoliciesCustomCreateResponseVirtualNetworksAllowedList, default: S.String, }), ).annotate({ identifier: "DevicesPoliciesCustomCreateResponseVirtualNetworks", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDevicePolicyCustomResponse { /** Whether to allow the user to switch WARP between modes. */ allowModeSwitch?: boolean | null; /** Whether to receive update notifications when a new version of the client is available. */ allowUpdates?: boolean | null; /** Whether to allow devices to leave the organization. */ allowedToLeave?: boolean | null; /** The amount of time in seconds to reconnect after having been disabled. */ autoConnect?: number | null; /** Turn on the captive portal after the specified amount of time. */ captivePortal?: number | null; /** Whether the policy is the default policy for an account. */ default?: boolean | null; /** A description of the policy. */ description?: string | null; /** If the `dns_server` field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to `true`. */ disableAutoFallback?: boolean | null; /** List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear. */ dnsSearchSuffixes?: DevicesPoliciesCustomCreateResponseDnsSearchSuffixesList | null; /** Whether the policy will be applied to matching devices. */ enabled?: boolean | null; /** List of routes excluded in the WARP client's tunnel. */ exclude?: DevicesPoliciesCustomCreateResponseExcludeList | null; /** Whether to add Microsoft IPs to Split Tunnel exclusions. */ excludeOfficeIps?: boolean | null; fallbackDomains?: DevicesPoliciesCustomCreateResponseFallbackDomainsList | null; gatewayUniqueId?: string | null; /** Global Acceleration settings for China. When configured, WARP clients connect to the Global Accelerator addresses instead of the default ones. Please contact your account representative to enable this feature on your account. See https://developers.cloudflare.com/china-network/concepts/global-acceleration/. */ globalAcceleration?: DevicesPoliciesCustomCreateResponseGlobalAcceleration | null; /** List of routes included in the WARP client's tunnel. */ include?: DevicesPoliciesCustomCreateResponseIncludeList | null; /** The amount of time in minutes a user is allowed access to their LAN. A value of 0 will allow LAN access until the next WARP reconnection, such as a reboot or a laptop waking from sleep. Note that this field is omitted from the response if null or unset. */ lanAllowMinutes?: number | null; /** The size of the subnet for the local access network. Note that this field is omitted from the response if null or unset. */ lanAllowSubnetSize?: number | null; /** The wirefilter expression to match devices. Available values: "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.service_token_uuid", "identity.saml_attributes", "network", "os.name", "os.version". */ match?: string | null; /** The name of the device settings profile. */ name?: string | null; policyId?: string | null; /** The precedence of the policy. Lower values indicate higher precedence. Policies will be evaluated in ascending order of this field. */ precedence?: number | null; /** Determines if the operating system will register WARP's local interface IP with your on-premises DNS server. */ registerInterfaceIpWithDns?: boolean | null; /** Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only). */ sccmVpnBoundarySupport?: boolean | null; serviceModeV2?: DevicesPoliciesCustomCreateResponseServiceModeV2 | null; /** The URL to launch when the Send Feedback button is clicked. */ supportUrl?: string | null; /** Whether to allow the user to turn off the WARP switch and disconnect the client. */ switchLocked?: boolean | null; targetTests?: DevicesPoliciesCustomCreateResponseTargetTestsList | null; /** Determines which tunnel protocol to use. */ tunnelProtocol?: string | null; /** Virtual network access settings for the device. */ virtualNetworks?: DevicesPoliciesCustomCreateResponseVirtualNetworks | null; } export const CreateDevicePolicyCustomResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ allowModeSwitch: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_mode_switch")), ), allowUpdates: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_updates"))), allowedToLeave: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allowed_to_leave")), ), autoConnect: S.optional(S.NullOr(S.Number).pipe(T.Body("auto_connect"))), captivePortal: S.optional( S.NullOr(S.Number).pipe(T.Body("captive_portal")), ), default: S.optional(S.NullOr(S.Boolean)), description: S.optional(S.NullOr(S.String)), disableAutoFallback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("disable_auto_fallback")), ), dnsSearchSuffixes: S.optional( S.NullOr(DevicesPoliciesCustomCreateResponseDnsSearchSuffixesList).pipe( T.Body("dns_search_suffixes"), ), ), enabled: S.optional(S.NullOr(S.Boolean)), exclude: S.optional( S.NullOr(DevicesPoliciesCustomCreateResponseExcludeList), ), excludeOfficeIps: S.optional( S.NullOr(S.Boolean).pipe(T.Body("exclude_office_ips")), ), fallbackDomains: S.optional( S.NullOr(DevicesPoliciesCustomCreateResponseFallbackDomainsList).pipe( T.Body("fallback_domains"), ), ), gatewayUniqueId: S.optional( S.NullOr(S.String).pipe(T.Body("gateway_unique_id")), ), globalAcceleration: S.optional( S.NullOr(DevicesPoliciesCustomCreateResponseGlobalAcceleration).pipe( T.Body("global_acceleration"), ), ), include: S.optional( S.NullOr(DevicesPoliciesCustomCreateResponseIncludeList), ), lanAllowMinutes: S.optional( S.NullOr(S.Number).pipe(T.Body("lan_allow_minutes")), ), lanAllowSubnetSize: S.optional( S.NullOr(S.Number).pipe(T.Body("lan_allow_subnet_size")), ), match: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policyId: S.optional(S.NullOr(S.String).pipe(T.Body("policy_id"))), precedence: S.optional(S.NullOr(S.Number)), registerInterfaceIpWithDns: S.optional( S.NullOr(S.Boolean).pipe(T.Body("register_interface_ip_with_dns")), ), sccmVpnBoundarySupport: S.optional( S.NullOr(S.Boolean).pipe(T.Body("sccm_vpn_boundary_support")), ), serviceModeV2: S.optional( S.NullOr(DevicesPoliciesCustomCreateResponseServiceModeV2).pipe( T.Body("service_mode_v2"), ), ), supportUrl: S.optional(S.NullOr(S.String).pipe(T.Body("support_url"))), switchLocked: S.optional(S.NullOr(S.Boolean).pipe(T.Body("switch_locked"))), targetTests: S.optional( S.NullOr(DevicesPoliciesCustomCreateResponseTargetTestsList).pipe( T.Body("target_tests"), ), ), tunnelProtocol: S.optional( S.NullOr(S.String).pipe(T.Body("tunnel_protocol")), ), virtualNetworks: S.optional( S.NullOr(DevicesPoliciesCustomCreateResponseVirtualNetworks).pipe( T.Body("virtual_networks"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDevicePolicyCustomResponse", }) as any as S.Schema; export type DevicesPostureCreateRequestType = | "file" | "application" | "tanium" | "gateway" | "warp" | "disk_encryption" | "serial_number" | "sentinelone" | "carbonblack" | "firewall" | "os_version" | "domain_joined" | "client_certificate" | "client_certificate_v2" | "antivirus" | "unique_client_id" | "kolide" | "tanium_s2s" | "crowdstrike_s2s" | "intune" | "workspace_one" | "sentinelone_s2s" | "custom_s2s"; export const DevicesPostureCreateRequestType = /*@__PURE__*/ S.String; export type DevicesPostureCreateRequestInputFileInputOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureCreateRequestInputFileInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestInputFileInput { /** Operating system. */ operatingSystem: | DevicesPostureCreateRequestInputFileInputOperatingSystem | (string & {}); /** File path. */ path: string; /** Whether or not file exists. */ exists?: boolean; /** SHA-256. */ sha256?: string; /** Signing certificate thumbprint. */ thumbprint?: string; } export const DevicesPostureCreateRequestInputFileInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureCreateRequestInputFileInputOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, exists: S.optional(S.Boolean), sha256: S.optional(S.String), thumbprint: S.optional(S.String), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputFileInput", }) as any as S.Schema; export type DevicesPostureCreateRequestInputUniqueClientIDInputOperatingSystem = | "android" | "ios" | "chromeos"; export const DevicesPostureCreateRequestInputUniqueClientIDInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestInputUniqueClientIDInput { /** List ID. */ id: string; /** Operating System. */ operatingSystem: | DevicesPostureCreateRequestInputUniqueClientIDInputOperatingSystem | (string & {}); } export const DevicesPostureCreateRequestInputUniqueClientIDInput = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, operatingSystem: DevicesPostureCreateRequestInputUniqueClientIDInputOperatingSystem.pipe( T.Body("operating_system"), ), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputUniqueClientIDInput", }) as any as S.Schema; export type DevicesPostureCreateRequestInputDomainJoinedInputOperatingSystem = "windows"; export const DevicesPostureCreateRequestInputDomainJoinedInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestInputDomainJoinedInput { /** Operating System. */ operatingSystem: DevicesPostureCreateRequestInputDomainJoinedInputOperatingSystem; /** Domain. */ domain?: string; } export const DevicesPostureCreateRequestInputDomainJoinedInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureCreateRequestInputDomainJoinedInputOperatingSystem.pipe( T.Body("operating_system"), ), domain: S.optional(S.String), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputDomainJoinedInput", }) as any as S.Schema; export type DevicesPostureCreateRequestInputOSVersionInputOperatingSystem = "windows"; export const DevicesPostureCreateRequestInputOSVersionInputOperatingSystem = /*@__PURE__*/ S.String; export type DevicesPostureCreateRequestInputOSVersionInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateRequestInputOSVersionInputOperator = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestInputOSVersionInput { /** Operating System. */ operatingSystem: DevicesPostureCreateRequestInputOSVersionInputOperatingSystem; /** Operator. */ operator: | DevicesPostureCreateRequestInputOSVersionInputOperator | (string & {}); /** Version of OS. */ version: string; /** Operating System Distribution Name (linux only). */ osDistroName?: string; /** Version of OS Distribution (linux only). */ osDistroRevision?: string; /** Additional operating system version details. For Windows, the UBR (Update Build Revision). For Mac or iOS, the Product Version Extra. For Linux, the distribution name and version. */ osVersionExtra?: string; } export const DevicesPostureCreateRequestInputOSVersionInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureCreateRequestInputOSVersionInputOperatingSystem.pipe( T.Body("operating_system"), ), operator: DevicesPostureCreateRequestInputOSVersionInputOperator, version: S.String, osDistroName: S.optional(S.String.pipe(T.Body("os_distro_name"))), osDistroRevision: S.optional(S.String.pipe(T.Body("os_distro_revision"))), osVersionExtra: S.optional(S.String.pipe(T.Body("os_version_extra"))), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputOSVersionInput", }) as any as S.Schema; export type DevicesPostureCreateRequestInputFirewallInputOperatingSystem = | "windows" | "mac"; export const DevicesPostureCreateRequestInputFirewallInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestInputFirewallInput { /** Enabled. */ enabled: boolean; /** Operating System. */ operatingSystem: | DevicesPostureCreateRequestInputFirewallInputOperatingSystem | (string & {}); } export const DevicesPostureCreateRequestInputFirewallInput = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, operatingSystem: DevicesPostureCreateRequestInputFirewallInputOperatingSystem.pipe( T.Body("operating_system"), ), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputFirewallInput", }) as any as S.Schema; export type DevicesPostureCreateRequestInputSentineloneInputOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureCreateRequestInputSentineloneInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestInputSentineloneInput { /** Operating system. */ operatingSystem: | DevicesPostureCreateRequestInputSentineloneInputOperatingSystem | (string & {}); /** File path. */ path: string; /** SHA-256. */ sha256?: string; /** Signing certificate thumbprint. */ thumbprint?: string; } export const DevicesPostureCreateRequestInputSentineloneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureCreateRequestInputSentineloneInputOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.String), thumbprint: S.optional(S.String), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputSentineloneInput", }) as any as S.Schema; export type DevicesPostureCreateRequestInputTeamsDevicesCarbonblackInputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureCreateRequestInputTeamsDevicesCarbonblackInputRequestOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestInputTeamsDevicesCarbonblackInputRequest { /** Operating system. */ operatingSystem: | DevicesPostureCreateRequestInputTeamsDevicesCarbonblackInputRequestOperatingSystem | (string & {}); /** File path. */ path: string; /** SHA-256. */ sha256?: string; /** Signing certificate thumbprint. */ thumbprint?: string; } export const DevicesPostureCreateRequestInputTeamsDevicesCarbonblackInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureCreateRequestInputTeamsDevicesCarbonblackInputRequestOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.String), thumbprint: S.optional(S.String), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputTeamsDevicesCarbonblackInputRequest", }) as any as S.Schema; export interface DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest { /** UUID of Access List. */ id: string; } export const DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, }), ).annotate({ identifier: "DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest", }) as any as S.Schema; export type DevicesPostureCreateRequestInputDiskEncryptionInputCheckDisksList = Array; export const DevicesPostureCreateRequestInputDiskEncryptionInputCheckDisksList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export interface DevicesPostureCreateRequestInputDiskEncryptionInput { /** List of volume names to be checked for encryption. */ checkDisks?: DevicesPostureCreateRequestInputDiskEncryptionInputCheckDisksList; /** Whether to check all disks for encryption. */ requireAll?: boolean; } export const DevicesPostureCreateRequestInputDiskEncryptionInput = /*@__PURE__*/ S.suspend(() => S.Struct({ checkDisks: S.optional( DevicesPostureCreateRequestInputDiskEncryptionInputCheckDisksList, ), requireAll: S.optional(S.Boolean), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputDiskEncryptionInput", }) as any as S.Schema; export type DevicesPostureCreateRequestInputTeamsDevicesApplicationInputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureCreateRequestInputTeamsDevicesApplicationInputRequestOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestInputTeamsDevicesApplicationInputRequest { /** Operating system. */ operatingSystem: | DevicesPostureCreateRequestInputTeamsDevicesApplicationInputRequestOperatingSystem | (string & {}); /** Path for the application. */ path: string; /** SHA-256. */ sha256?: string; /** Signing certificate thumbprint. */ thumbprint?: string; } export const DevicesPostureCreateRequestInputTeamsDevicesApplicationInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureCreateRequestInputTeamsDevicesApplicationInputRequestOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.String), thumbprint: S.optional(S.String), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputTeamsDevicesApplicationInputRequest", }) as any as S.Schema; export interface DevicesPostureCreateRequestInputClientCertificateInput { /** UUID of Cloudflare managed certificate. */ certificateId: string; /** Common Name that is protected by the certificate. */ cn: string; } export const DevicesPostureCreateRequestInputClientCertificateInput = /*@__PURE__*/ S.suspend(() => S.Struct({ certificateId: S.String.pipe(T.Body("certificate_id")), cn: S.String, }), ).annotate({ identifier: "DevicesPostureCreateRequestInputClientCertificateInput", }) as any as S.Schema; export type DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem = /*@__PURE__*/ S.String; export type DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem = | "clientAuth" | "emailProtection"; export const DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem = /*@__PURE__*/ S.String; export type DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList = Array< | DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem | (string & {}) >; export const DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList = /*@__PURE__*/ S.Array( DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem, ) as any as S.Schema; export type DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList = Array; export const DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem = | "system" | "user"; export const DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem = /*@__PURE__*/ S.String; export type DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList = Array< | DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem | (string & {}) >; export const DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList = /*@__PURE__*/ S.Array( DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem, ) as any as S.Schema; export interface DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocations { /** List of paths to check for client certificate on linux. */ paths?: DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList; /** List of trust stores to check for client certificate. */ trustStores?: DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList; } export const DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocations = /*@__PURE__*/ S.suspend(() => S.Struct({ paths: S.optional( DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList, ), trustStores: S.optional( DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList.pipe( T.Body("trust_stores"), ), ), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocations", }) as any as S.Schema; export type DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList = Array; export const DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequest { /** UUID of Cloudflare managed certificate. */ certificateId: string; /** Confirm the certificate was not imported from another device. We recommend keeping this enabled unless the certificate was deployed without a private key. */ checkPrivateKey: boolean; /** Operating system. */ operatingSystem: | DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem | (string & {}); /** Certificate Common Name. This may include one or more variables in the ${ } notation. Only ${serial_number} and ${hostname} are valid variables. */ cn?: string; /** List of values indicating purposes for which the certificate public key can be used. */ extendedKeyUsage?: DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList; locations?: DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocations; /** List of certificate Subject Alternative Names. */ subjectAlternativeNames?: DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList; } export const DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ certificateId: S.String.pipe(T.Body("certificate_id")), checkPrivateKey: S.Boolean.pipe(T.Body("check_private_key")), operatingSystem: DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem.pipe( T.Body("operating_system"), ), cn: S.optional(S.String), extendedKeyUsage: S.optional( DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList.pipe( T.Body("extended_key_usage"), ), ), locations: S.optional( DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestLocations, ), subjectAlternativeNames: S.optional( DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList.pipe( T.Body("subject_alternative_names"), ), ), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequest", }) as any as S.Schema; export interface DevicesPostureCreateRequestInputTeamsDevicesAntivirusInputRequest { /** Number of days that the antivirus should be updated within. */ updateWindowDays?: number; } export const DevicesPostureCreateRequestInputTeamsDevicesAntivirusInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ updateWindowDays: S.optional(S.Number.pipe(T.Body("update_window_days"))), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputTeamsDevicesAntivirusInputRequest", }) as any as S.Schema; export type DevicesPostureCreateRequestInputWorkspaceOneInputComplianceStatus = | "compliant" | "noncompliant" | "unknown"; export const DevicesPostureCreateRequestInputWorkspaceOneInputComplianceStatus = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestInputWorkspaceOneInput { /** Compliance Status. */ complianceStatus: | DevicesPostureCreateRequestInputWorkspaceOneInputComplianceStatus | (string & {}); /** Posture Integration ID. */ connectionId: string; } export const DevicesPostureCreateRequestInputWorkspaceOneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ complianceStatus: DevicesPostureCreateRequestInputWorkspaceOneInputComplianceStatus.pipe( T.Body("compliance_status"), ), connectionId: S.String.pipe(T.Body("connection_id")), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputWorkspaceOneInput", }) as any as S.Schema; export type DevicesPostureCreateRequestInputCrowdstrikeInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateRequestInputCrowdstrikeInputOperator = /*@__PURE__*/ S.String; export type DevicesPostureCreateRequestInputCrowdstrikeInputState = | "online" | "offline" | "unknown"; export const DevicesPostureCreateRequestInputCrowdstrikeInputState = /*@__PURE__*/ S.String; export type DevicesPostureCreateRequestInputCrowdstrikeInputVersionOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateRequestInputCrowdstrikeInputVersionOperator = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestInputCrowdstrikeInput { /** Posture Integration ID. */ connectionId: string; /** For more details on last seen, please refer to the Crowdstrike documentation. */ lastSeen?: string; /** Operator. */ operator?: | DevicesPostureCreateRequestInputCrowdstrikeInputOperator | (string & {}); /** Os Version. */ os?: string; /** Overall. */ overall?: string; /** SensorConfig. */ sensorConfig?: string; /** For more details on state, please refer to the Crowdstrike documentation. */ state?: DevicesPostureCreateRequestInputCrowdstrikeInputState | (string & {}); /** Version. */ version?: string; /** Version Operator. */ versionOperator?: | DevicesPostureCreateRequestInputCrowdstrikeInputVersionOperator | (string & {}); } export const DevicesPostureCreateRequestInputCrowdstrikeInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), lastSeen: S.optional(S.String.pipe(T.Body("last_seen"))), operator: S.optional( DevicesPostureCreateRequestInputCrowdstrikeInputOperator, ), os: S.optional(S.String), overall: S.optional(S.String), sensorConfig: S.optional(S.String.pipe(T.Body("sensor_config"))), state: S.optional(DevicesPostureCreateRequestInputCrowdstrikeInputState), version: S.optional(S.String), versionOperator: S.optional( DevicesPostureCreateRequestInputCrowdstrikeInputVersionOperator, ), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputCrowdstrikeInput", }) as any as S.Schema; export type DevicesPostureCreateRequestInputIntuneInputComplianceStatus = | "compliant" | "noncompliant" | "unknown" | "notapplicable" | "ingraceperiod" | "error"; export const DevicesPostureCreateRequestInputIntuneInputComplianceStatus = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestInputIntuneInput { /** Compliance Status. */ complianceStatus: | DevicesPostureCreateRequestInputIntuneInputComplianceStatus | (string & {}); /** Posture Integration ID. */ connectionId: string; } export const DevicesPostureCreateRequestInputIntuneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ complianceStatus: DevicesPostureCreateRequestInputIntuneInputComplianceStatus.pipe( T.Body("compliance_status"), ), connectionId: S.String.pipe(T.Body("connection_id")), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputIntuneInput", }) as any as S.Schema; export type DevicesPostureCreateRequestInputKolideInputAuthStateItem = | "Good" | "Notified" | "Will Block" | "Blocked"; export const DevicesPostureCreateRequestInputKolideInputAuthStateItem = /*@__PURE__*/ S.String; export type DevicesPostureCreateRequestInputKolideInputAuthStateList = Array< DevicesPostureCreateRequestInputKolideInputAuthStateItem | (string & {}) >; export const DevicesPostureCreateRequestInputKolideInputAuthStateList = /*@__PURE__*/ S.Array( DevicesPostureCreateRequestInputKolideInputAuthStateItem, ) as any as S.Schema; export type DevicesPostureCreateRequestInputKolideInputCountOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateRequestInputKolideInputCountOperator = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestInputKolideInput { /** Posture Integration ID. */ connectionId: string; /** The set of Kolide device authentication states that pass the posture check. Device must match one of the specified states. */ authState?: DevicesPostureCreateRequestInputKolideInputAuthStateList; /** Count Operator. */ countOperator?: | DevicesPostureCreateRequestInputKolideInputCountOperator | (string & {}); /** The Number of Issues. */ issueCount?: string; } export const DevicesPostureCreateRequestInputKolideInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), authState: S.optional( DevicesPostureCreateRequestInputKolideInputAuthStateList.pipe( T.Body("auth_state"), ), ), countOperator: S.optional( DevicesPostureCreateRequestInputKolideInputCountOperator, ), issueCount: S.optional(S.String.pipe(T.Body("issue_count"))), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputKolideInput", }) as any as S.Schema; export type DevicesPostureCreateRequestInputTaniumInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateRequestInputTaniumInputOperator = /*@__PURE__*/ S.String; export type DevicesPostureCreateRequestInputTaniumInputRiskLevel = | "low" | "medium" | "high" | "critical"; export const DevicesPostureCreateRequestInputTaniumInputRiskLevel = /*@__PURE__*/ S.String; export type DevicesPostureCreateRequestInputTaniumInputScoreOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateRequestInputTaniumInputScoreOperator = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestInputTaniumInput { /** Posture Integration ID. */ connectionId: string; /** For more details on eid last seen, refer to the Tanium documentation. */ eidLastSeen?: string; /** Operator to evaluate risk_level or eid_last_seen. */ operator?: | DevicesPostureCreateRequestInputTaniumInputOperator | (string & {}); /** For more details on risk level, refer to the Tanium documentation. */ riskLevel?: | DevicesPostureCreateRequestInputTaniumInputRiskLevel | (string & {}); /** Score Operator. */ scoreOperator?: | DevicesPostureCreateRequestInputTaniumInputScoreOperator | (string & {}); /** For more details on total score, refer to the Tanium documentation. */ totalScore?: number; } export const DevicesPostureCreateRequestInputTaniumInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), eidLastSeen: S.optional(S.String.pipe(T.Body("eid_last_seen"))), operator: S.optional(DevicesPostureCreateRequestInputTaniumInputOperator), riskLevel: S.optional( DevicesPostureCreateRequestInputTaniumInputRiskLevel.pipe( T.Body("risk_level"), ), ), scoreOperator: S.optional( DevicesPostureCreateRequestInputTaniumInputScoreOperator, ), totalScore: S.optional(S.Number.pipe(T.Body("total_score"))), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputTaniumInput", }) as any as S.Schema; export type DevicesPostureCreateRequestInputSentineloneS2sInputNetworkStatus = | "connected" | "disconnected" | "disconnecting" | "connecting"; export const DevicesPostureCreateRequestInputSentineloneS2sInputNetworkStatus = /*@__PURE__*/ S.String; export type DevicesPostureCreateRequestInputSentineloneS2sInputOperationalState = | "na" | "partially_disabled" | "auto_fully_disabled" | "fully_disabled" | "auto_partially_disabled" | "disabled_error" | "db_corruption"; export const DevicesPostureCreateRequestInputSentineloneS2sInputOperationalState = /*@__PURE__*/ S.String; export type DevicesPostureCreateRequestInputSentineloneS2sInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateRequestInputSentineloneS2sInputOperator = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestInputSentineloneS2sInput { /** Posture Integration ID. */ connectionId: string; /** The Number of active threats. */ activeThreats?: number; /** Whether device is infected. */ infected?: boolean; /** Whether device is active. */ isActive?: boolean; /** Network status of device. */ networkStatus?: | DevicesPostureCreateRequestInputSentineloneS2sInputNetworkStatus | (string & {}); /** Agent operational state. */ operationalState?: | DevicesPostureCreateRequestInputSentineloneS2sInputOperationalState | (string & {}); /** Operator. */ operator?: | DevicesPostureCreateRequestInputSentineloneS2sInputOperator | (string & {}); } export const DevicesPostureCreateRequestInputSentineloneS2sInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), activeThreats: S.optional(S.Number.pipe(T.Body("active_threats"))), infected: S.optional(S.Boolean), isActive: S.optional(S.Boolean.pipe(T.Body("is_active"))), networkStatus: S.optional( DevicesPostureCreateRequestInputSentineloneS2sInputNetworkStatus.pipe( T.Body("network_status"), ), ), operationalState: S.optional( DevicesPostureCreateRequestInputSentineloneS2sInputOperationalState.pipe( T.Body("operational_state"), ), ), operator: S.optional( DevicesPostureCreateRequestInputSentineloneS2sInputOperator, ), }), ).annotate({ identifier: "DevicesPostureCreateRequestInputSentineloneS2sInput", }) as any as S.Schema; export type DevicesPostureCreateRequestInputTeamsDevicesCustomS2sInputRequestOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateRequestInputTeamsDevicesCustomS2sInputRequestOperator = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestInputTeamsDevicesCustomS2sInputRequest { /** Posture Integration ID. */ connectionId: string; /** Operator. */ operator: | DevicesPostureCreateRequestInputTeamsDevicesCustomS2sInputRequestOperator | (string & {}); /** A value between 0-100 assigned to devices set by the 3rd party posture provider. */ score: number; } export const DevicesPostureCreateRequestInputTeamsDevicesCustomS2sInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), operator: DevicesPostureCreateRequestInputTeamsDevicesCustomS2sInputRequestOperator, score: S.Number, }), ).annotate({ identifier: "DevicesPostureCreateRequestInputTeamsDevicesCustomS2sInputRequest", }) as any as S.Schema; export type DevicesPostureCreateRequestInput = | DevicesPostureCreateRequestInputFileInput | DevicesPostureCreateRequestInputUniqueClientIDInput | DevicesPostureCreateRequestInputDomainJoinedInput | DevicesPostureCreateRequestInputOSVersionInput | DevicesPostureCreateRequestInputFirewallInput | DevicesPostureCreateRequestInputSentineloneInput | DevicesPostureCreateRequestInputTeamsDevicesCarbonblackInputRequest | DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest | DevicesPostureCreateRequestInputDiskEncryptionInput | DevicesPostureCreateRequestInputTeamsDevicesApplicationInputRequest | DevicesPostureCreateRequestInputClientCertificateInput | DevicesPostureCreateRequestInputTeamsDevicesClientCertificateV2InputRequest | DevicesPostureCreateRequestInputTeamsDevicesAntivirusInputRequest | DevicesPostureCreateRequestInputWorkspaceOneInput | DevicesPostureCreateRequestInputCrowdstrikeInput | DevicesPostureCreateRequestInputIntuneInput | DevicesPostureCreateRequestInputKolideInput | DevicesPostureCreateRequestInputTaniumInput | DevicesPostureCreateRequestInputSentineloneS2sInput | DevicesPostureCreateRequestInputTeamsDevicesCustomS2sInputRequest; export const DevicesPostureCreateRequestInput = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["operatingSystem", "path", "exists", "sha256", "thumbprint"], ["id", "operatingSystem"], ["operatingSystem", "domain"], [ "operatingSystem", "operator", "version", "osDistroName", "osDistroRevision", "osVersionExtra", ], ["enabled", "operatingSystem"], ["operatingSystem", "path", "sha256", "thumbprint"], ["operatingSystem", "path", "sha256", "thumbprint"], ["id"], ["checkDisks", "requireAll"], ["operatingSystem", "path", "sha256", "thumbprint"], ["certificateId", "cn"], [ "certificateId", "checkPrivateKey", "operatingSystem", "cn", "extendedKeyUsage", "locations", "subjectAlternativeNames", ], ["updateWindowDays"], ["complianceStatus", "connectionId"], [ "connectionId", "lastSeen", "operator", "os", "overall", "sensorConfig", "state", "version", "versionOperator", ], ["complianceStatus", "connectionId"], ["connectionId", "authState", "countOperator", "issueCount"], [ "connectionId", "eidLastSeen", "operator", "riskLevel", "scoreOperator", "totalScore", ], [ "connectionId", "activeThreats", "infected", "isActive", "networkStatus", "operationalState", "operator", ], ["connectionId", "operator", "score"], ]), ); export type DevicesPostureCreateRequestMatchItemPlatform = | "windows" | "mac" | "linux" | "android" | "ios" | "chromeos"; export const DevicesPostureCreateRequestMatchItemPlatform = /*@__PURE__*/ S.String; export interface DevicesPostureCreateRequestMatchItem { platform?: DevicesPostureCreateRequestMatchItemPlatform | (string & {}); } export const DevicesPostureCreateRequestMatchItem = /*@__PURE__*/ S.suspend( () => S.Struct({ platform: S.optional(DevicesPostureCreateRequestMatchItemPlatform), }), ).annotate({ identifier: "DevicesPostureCreateRequestMatchItem", }) as any as S.Schema; export type DevicesPostureCreateRequestMatchList = Array; export const DevicesPostureCreateRequestMatchList = /*@__PURE__*/ S.Array( DevicesPostureCreateRequestMatchItem, ) as any as S.Schema; export interface CreateDevicePostureRequest { accountId: string; /** The name of the device posture rule. */ name: string; /** The type of device posture rule. */ type: DevicesPostureCreateRequestType | (string & {}); /** The description of the device posture rule. */ description?: string; /** Sets the expiration time for a posture check result. If empty, the result remains valid until it is overwritten by new data from the WARP client. */ expiration?: string; /** The value to be checked against. */ input?: DevicesPostureCreateRequestInput; /** The conditions that the client must match to run the rule. */ match?: DevicesPostureCreateRequestMatchList; /** Polling frequency for the WARP client posture check. Default: `5m` (poll every five minutes). Minimum: `1m`. */ schedule?: string; } export const CreateDevicePostureRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.String, type: DevicesPostureCreateRequestType, description: S.optional(S.String), expiration: S.optional(S.String), input: S.optional(DevicesPostureCreateRequestInput), match: S.optional(DevicesPostureCreateRequestMatchList), schedule: S.optional(S.String), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/devices/posture", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDevicePostureRequest", }) as any as S.Schema; export type DevicesPostureCreateResponseInputFileInputOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureCreateResponseInputFileInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseInputFileInput { /** Operating system. */ operatingSystem: DevicesPostureCreateResponseInputFileInputOperatingSystem; /** File path. */ path: string; /** Whether or not file exists. */ exists?: boolean | null; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureCreateResponseInputFileInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureCreateResponseInputFileInputOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, exists: S.optional(S.NullOr(S.Boolean)), sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputFileInput", }) as any as S.Schema; export type DevicesPostureCreateResponseInputUniqueClientIDInputOperatingSystem = | "android" | "ios" | "chromeos"; export const DevicesPostureCreateResponseInputUniqueClientIDInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseInputUniqueClientIDInput { /** List ID. */ id: string; /** Operating System. */ operatingSystem: DevicesPostureCreateResponseInputUniqueClientIDInputOperatingSystem; } export const DevicesPostureCreateResponseInputUniqueClientIDInput = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, operatingSystem: DevicesPostureCreateResponseInputUniqueClientIDInputOperatingSystem.pipe( T.Body("operating_system"), ), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputUniqueClientIDInput", }) as any as S.Schema; export type DevicesPostureCreateResponseInputDomainJoinedInputOperatingSystem = "windows"; export const DevicesPostureCreateResponseInputDomainJoinedInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseInputDomainJoinedInput { /** Operating System. */ operatingSystem: DevicesPostureCreateResponseInputDomainJoinedInputOperatingSystem; /** Domain. */ domain?: string | null; } export const DevicesPostureCreateResponseInputDomainJoinedInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureCreateResponseInputDomainJoinedInputOperatingSystem.pipe( T.Body("operating_system"), ), domain: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputDomainJoinedInput", }) as any as S.Schema; export type DevicesPostureCreateResponseInputOSVersionInputOperatingSystem = "windows"; export const DevicesPostureCreateResponseInputOSVersionInputOperatingSystem = /*@__PURE__*/ S.String; export type DevicesPostureCreateResponseInputOSVersionInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateResponseInputOSVersionInputOperator = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseInputOSVersionInput { /** Operating System. */ operatingSystem: DevicesPostureCreateResponseInputOSVersionInputOperatingSystem; /** Operator. */ operator: DevicesPostureCreateResponseInputOSVersionInputOperator; /** Version of OS. */ version: string; /** Operating System Distribution Name (linux only). */ osDistroName?: string | null; /** Version of OS Distribution (linux only). */ osDistroRevision?: string | null; /** Additional operating system version details. For Windows, the UBR (Update Build Revision). For Mac or iOS, the Product Version Extra. For Linux, the distribution name and version. */ osVersionExtra?: string | null; } export const DevicesPostureCreateResponseInputOSVersionInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureCreateResponseInputOSVersionInputOperatingSystem.pipe( T.Body("operating_system"), ), operator: DevicesPostureCreateResponseInputOSVersionInputOperator, version: S.String, osDistroName: S.optional( S.NullOr(S.String).pipe(T.Body("os_distro_name")), ), osDistroRevision: S.optional( S.NullOr(S.String).pipe(T.Body("os_distro_revision")), ), osVersionExtra: S.optional( S.NullOr(S.String).pipe(T.Body("os_version_extra")), ), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputOSVersionInput", }) as any as S.Schema; export type DevicesPostureCreateResponseInputFirewallInputOperatingSystem = | "windows" | "mac"; export const DevicesPostureCreateResponseInputFirewallInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseInputFirewallInput { /** Enabled. */ enabled: boolean; /** Operating System. */ operatingSystem: DevicesPostureCreateResponseInputFirewallInputOperatingSystem; } export const DevicesPostureCreateResponseInputFirewallInput = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, operatingSystem: DevicesPostureCreateResponseInputFirewallInputOperatingSystem.pipe( T.Body("operating_system"), ), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputFirewallInput", }) as any as S.Schema; export type DevicesPostureCreateResponseInputSentineloneInputOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureCreateResponseInputSentineloneInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseInputSentineloneInput { /** Operating system. */ operatingSystem: DevicesPostureCreateResponseInputSentineloneInputOperatingSystem; /** File path. */ path: string; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureCreateResponseInputSentineloneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureCreateResponseInputSentineloneInputOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputSentineloneInput", }) as any as S.Schema; export type DevicesPostureCreateResponseInputTeamsDevicesCarbonblackInputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureCreateResponseInputTeamsDevicesCarbonblackInputRequestOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseInputTeamsDevicesCarbonblackInputRequest { /** Operating system. */ operatingSystem: DevicesPostureCreateResponseInputTeamsDevicesCarbonblackInputRequestOperatingSystem; /** File path. */ path: string; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureCreateResponseInputTeamsDevicesCarbonblackInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureCreateResponseInputTeamsDevicesCarbonblackInputRequestOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputTeamsDevicesCarbonblackInputRequest", }) as any as S.Schema; export type DevicesPostureCreateResponseInputTeamsDevicesAccessSerialNumberListInputRequest = DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest; export const DevicesPostureCreateResponseInputTeamsDevicesAccessSerialNumberListInputRequest = DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest; export type DevicesPostureCreateResponseInputDiskEncryptionInputCheckDisksList = Array; export const DevicesPostureCreateResponseInputDiskEncryptionInputCheckDisksList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export interface DevicesPostureCreateResponseInputDiskEncryptionInput { /** List of volume names to be checked for encryption. */ checkDisks?: DevicesPostureCreateResponseInputDiskEncryptionInputCheckDisksList | null; /** Whether to check all disks for encryption. */ requireAll?: boolean | null; } export const DevicesPostureCreateResponseInputDiskEncryptionInput = /*@__PURE__*/ S.suspend(() => S.Struct({ checkDisks: S.optional( S.NullOr( DevicesPostureCreateResponseInputDiskEncryptionInputCheckDisksList, ), ), requireAll: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputDiskEncryptionInput", }) as any as S.Schema; export type DevicesPostureCreateResponseInputTeamsDevicesApplicationInputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureCreateResponseInputTeamsDevicesApplicationInputRequestOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseInputTeamsDevicesApplicationInputRequest { /** Operating system. */ operatingSystem: DevicesPostureCreateResponseInputTeamsDevicesApplicationInputRequestOperatingSystem; /** Path for the application. */ path: string; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureCreateResponseInputTeamsDevicesApplicationInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureCreateResponseInputTeamsDevicesApplicationInputRequestOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputTeamsDevicesApplicationInputRequest", }) as any as S.Schema; export type DevicesPostureCreateResponseInputClientCertificateInput = DevicesPostureCreateRequestInputClientCertificateInput; export const DevicesPostureCreateResponseInputClientCertificateInput = DevicesPostureCreateRequestInputClientCertificateInput; export type DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem = /*@__PURE__*/ S.String; export type DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem = | "clientAuth" | "emailProtection"; export const DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem = /*@__PURE__*/ S.String; export type DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList = Array; export const DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList = /*@__PURE__*/ S.Array( DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem, ) as any as S.Schema; export type DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList = Array; export const DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem = | "system" | "user"; export const DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem = /*@__PURE__*/ S.String; export type DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList = Array; export const DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList = /*@__PURE__*/ S.Array( DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem, ) as any as S.Schema; export interface DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocations { /** List of paths to check for client certificate on linux. */ paths?: DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList | null; /** List of trust stores to check for client certificate. */ trustStores?: DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList | null; } export const DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocations = /*@__PURE__*/ S.suspend(() => S.Struct({ paths: S.optional( S.NullOr( DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList, ), ), trustStores: S.optional( S.NullOr( DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList, ).pipe(T.Body("trust_stores")), ), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocations", }) as any as S.Schema; export type DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList = Array; export const DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequest { /** UUID of Cloudflare managed certificate. */ certificateId: string; /** Confirm the certificate was not imported from another device. We recommend keeping this enabled unless the certificate was deployed without a private key. */ checkPrivateKey: boolean; /** Operating system. */ operatingSystem: DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem; /** Certificate Common Name. This may include one or more variables in the ${ } notation. Only ${serial_number} and ${hostname} are valid variables. */ cn?: string | null; /** List of values indicating purposes for which the certificate public key can be used. */ extendedKeyUsage?: DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList | null; locations?: DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocations | null; /** List of certificate Subject Alternative Names. */ subjectAlternativeNames?: DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList | null; } export const DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ certificateId: S.String.pipe(T.Body("certificate_id")), checkPrivateKey: S.Boolean.pipe(T.Body("check_private_key")), operatingSystem: DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem.pipe( T.Body("operating_system"), ), cn: S.optional(S.NullOr(S.String)), extendedKeyUsage: S.optional( S.NullOr( DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList, ).pipe(T.Body("extended_key_usage")), ), locations: S.optional( S.NullOr( DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestLocations, ), ), subjectAlternativeNames: S.optional( S.NullOr( DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList, ).pipe(T.Body("subject_alternative_names")), ), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequest", }) as any as S.Schema; export interface DevicesPostureCreateResponseInputTeamsDevicesAntivirusInputRequest { /** Number of days that the antivirus should be updated within. */ updateWindowDays?: number | null; } export const DevicesPostureCreateResponseInputTeamsDevicesAntivirusInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ updateWindowDays: S.optional( S.NullOr(S.Number).pipe(T.Body("update_window_days")), ), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputTeamsDevicesAntivirusInputRequest", }) as any as S.Schema; export type DevicesPostureCreateResponseInputWorkspaceOneInputComplianceStatus = | "compliant" | "noncompliant" | "unknown"; export const DevicesPostureCreateResponseInputWorkspaceOneInputComplianceStatus = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseInputWorkspaceOneInput { /** Compliance Status. */ complianceStatus: DevicesPostureCreateResponseInputWorkspaceOneInputComplianceStatus; /** Posture Integration ID. */ connectionId: string; } export const DevicesPostureCreateResponseInputWorkspaceOneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ complianceStatus: DevicesPostureCreateResponseInputWorkspaceOneInputComplianceStatus.pipe( T.Body("compliance_status"), ), connectionId: S.String.pipe(T.Body("connection_id")), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputWorkspaceOneInput", }) as any as S.Schema; export type DevicesPostureCreateResponseInputCrowdstrikeInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateResponseInputCrowdstrikeInputOperator = /*@__PURE__*/ S.String; export type DevicesPostureCreateResponseInputCrowdstrikeInputState = | "online" | "offline" | "unknown"; export const DevicesPostureCreateResponseInputCrowdstrikeInputState = /*@__PURE__*/ S.String; export type DevicesPostureCreateResponseInputCrowdstrikeInputVersionOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateResponseInputCrowdstrikeInputVersionOperator = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseInputCrowdstrikeInput { /** Posture Integration ID. */ connectionId: string; /** For more details on last seen, please refer to the Crowdstrike documentation. */ lastSeen?: string | null; /** Operator. */ operator?: DevicesPostureCreateResponseInputCrowdstrikeInputOperator | null; /** Os Version. */ os?: string | null; /** Overall. */ overall?: string | null; /** SensorConfig. */ sensorConfig?: string | null; /** For more details on state, please refer to the Crowdstrike documentation. */ state?: DevicesPostureCreateResponseInputCrowdstrikeInputState | null; /** Version. */ version?: string | null; /** Version Operator. */ versionOperator?: DevicesPostureCreateResponseInputCrowdstrikeInputVersionOperator | null; } export const DevicesPostureCreateResponseInputCrowdstrikeInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), lastSeen: S.optional(S.NullOr(S.String).pipe(T.Body("last_seen"))), operator: S.optional( S.NullOr(DevicesPostureCreateResponseInputCrowdstrikeInputOperator), ), os: S.optional(S.NullOr(S.String)), overall: S.optional(S.NullOr(S.String)), sensorConfig: S.optional( S.NullOr(S.String).pipe(T.Body("sensor_config")), ), state: S.optional( S.NullOr(DevicesPostureCreateResponseInputCrowdstrikeInputState), ), version: S.optional(S.NullOr(S.String)), versionOperator: S.optional( S.NullOr( DevicesPostureCreateResponseInputCrowdstrikeInputVersionOperator, ), ), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputCrowdstrikeInput", }) as any as S.Schema; export type DevicesPostureCreateResponseInputIntuneInputComplianceStatus = | "compliant" | "noncompliant" | "unknown" | "notapplicable" | "ingraceperiod" | "error"; export const DevicesPostureCreateResponseInputIntuneInputComplianceStatus = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseInputIntuneInput { /** Compliance Status. */ complianceStatus: DevicesPostureCreateResponseInputIntuneInputComplianceStatus; /** Posture Integration ID. */ connectionId: string; } export const DevicesPostureCreateResponseInputIntuneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ complianceStatus: DevicesPostureCreateResponseInputIntuneInputComplianceStatus.pipe( T.Body("compliance_status"), ), connectionId: S.String.pipe(T.Body("connection_id")), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputIntuneInput", }) as any as S.Schema; export type DevicesPostureCreateResponseInputKolideInputAuthStateItem = | "Good" | "Notified" | "Will Block" | "Blocked"; export const DevicesPostureCreateResponseInputKolideInputAuthStateItem = /*@__PURE__*/ S.String; export type DevicesPostureCreateResponseInputKolideInputAuthStateList = Array; export const DevicesPostureCreateResponseInputKolideInputAuthStateList = /*@__PURE__*/ S.Array( DevicesPostureCreateResponseInputKolideInputAuthStateItem, ) as any as S.Schema; export type DevicesPostureCreateResponseInputKolideInputCountOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateResponseInputKolideInputCountOperator = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseInputKolideInput { /** Posture Integration ID. */ connectionId: string; /** The set of Kolide device authentication states that pass the posture check. Device must match one of the specified states. */ authState?: DevicesPostureCreateResponseInputKolideInputAuthStateList | null; /** Count Operator. */ countOperator?: DevicesPostureCreateResponseInputKolideInputCountOperator | null; /** The Number of Issues. */ issueCount?: string | null; } export const DevicesPostureCreateResponseInputKolideInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), authState: S.optional( S.NullOr( DevicesPostureCreateResponseInputKolideInputAuthStateList, ).pipe(T.Body("auth_state")), ), countOperator: S.optional( S.NullOr(DevicesPostureCreateResponseInputKolideInputCountOperator), ), issueCount: S.optional(S.NullOr(S.String).pipe(T.Body("issue_count"))), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputKolideInput", }) as any as S.Schema; export type DevicesPostureCreateResponseInputTaniumInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateResponseInputTaniumInputOperator = /*@__PURE__*/ S.String; export type DevicesPostureCreateResponseInputTaniumInputRiskLevel = | "low" | "medium" | "high" | "critical"; export const DevicesPostureCreateResponseInputTaniumInputRiskLevel = /*@__PURE__*/ S.String; export type DevicesPostureCreateResponseInputTaniumInputScoreOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateResponseInputTaniumInputScoreOperator = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseInputTaniumInput { /** Posture Integration ID. */ connectionId: string; /** For more details on eid last seen, refer to the Tanium documentation. */ eidLastSeen?: string | null; /** Operator to evaluate risk_level or eid_last_seen. */ operator?: DevicesPostureCreateResponseInputTaniumInputOperator | null; /** For more details on risk level, refer to the Tanium documentation. */ riskLevel?: DevicesPostureCreateResponseInputTaniumInputRiskLevel | null; /** Score Operator. */ scoreOperator?: DevicesPostureCreateResponseInputTaniumInputScoreOperator | null; /** For more details on total score, refer to the Tanium documentation. */ totalScore?: number | null; } export const DevicesPostureCreateResponseInputTaniumInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), eidLastSeen: S.optional(S.NullOr(S.String).pipe(T.Body("eid_last_seen"))), operator: S.optional( S.NullOr(DevicesPostureCreateResponseInputTaniumInputOperator), ), riskLevel: S.optional( S.NullOr(DevicesPostureCreateResponseInputTaniumInputRiskLevel).pipe( T.Body("risk_level"), ), ), scoreOperator: S.optional( S.NullOr(DevicesPostureCreateResponseInputTaniumInputScoreOperator), ), totalScore: S.optional(S.NullOr(S.Number).pipe(T.Body("total_score"))), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputTaniumInput", }) as any as S.Schema; export type DevicesPostureCreateResponseInputSentineloneS2sInputNetworkStatus = | "connected" | "disconnected" | "disconnecting" | "connecting"; export const DevicesPostureCreateResponseInputSentineloneS2sInputNetworkStatus = /*@__PURE__*/ S.String; export type DevicesPostureCreateResponseInputSentineloneS2sInputOperationalState = | "na" | "partially_disabled" | "auto_fully_disabled" | "fully_disabled" | "auto_partially_disabled" | "disabled_error" | "db_corruption"; export const DevicesPostureCreateResponseInputSentineloneS2sInputOperationalState = /*@__PURE__*/ S.String; export type DevicesPostureCreateResponseInputSentineloneS2sInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateResponseInputSentineloneS2sInputOperator = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseInputSentineloneS2sInput { /** Posture Integration ID. */ connectionId: string; /** The Number of active threats. */ activeThreats?: number | null; /** Whether device is infected. */ infected?: boolean | null; /** Whether device is active. */ isActive?: boolean | null; /** Network status of device. */ networkStatus?: DevicesPostureCreateResponseInputSentineloneS2sInputNetworkStatus | null; /** Agent operational state. */ operationalState?: DevicesPostureCreateResponseInputSentineloneS2sInputOperationalState | null; /** Operator. */ operator?: DevicesPostureCreateResponseInputSentineloneS2sInputOperator | null; } export const DevicesPostureCreateResponseInputSentineloneS2sInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), activeThreats: S.optional( S.NullOr(S.Number).pipe(T.Body("active_threats")), ), infected: S.optional(S.NullOr(S.Boolean)), isActive: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_active"))), networkStatus: S.optional( S.NullOr( DevicesPostureCreateResponseInputSentineloneS2sInputNetworkStatus, ).pipe(T.Body("network_status")), ), operationalState: S.optional( S.NullOr( DevicesPostureCreateResponseInputSentineloneS2sInputOperationalState, ).pipe(T.Body("operational_state")), ), operator: S.optional( S.NullOr(DevicesPostureCreateResponseInputSentineloneS2sInputOperator), ), }), ).annotate({ identifier: "DevicesPostureCreateResponseInputSentineloneS2sInput", }) as any as S.Schema; export type DevicesPostureCreateResponseInputTeamsDevicesCustomS2sInputRequestOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureCreateResponseInputTeamsDevicesCustomS2sInputRequestOperator = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseInputTeamsDevicesCustomS2sInputRequest { /** Posture Integration ID. */ connectionId: string; /** Operator. */ operator: DevicesPostureCreateResponseInputTeamsDevicesCustomS2sInputRequestOperator; /** A value between 0-100 assigned to devices set by the 3rd party posture provider. */ score: number; } export const DevicesPostureCreateResponseInputTeamsDevicesCustomS2sInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), operator: DevicesPostureCreateResponseInputTeamsDevicesCustomS2sInputRequestOperator, score: S.Number, }), ).annotate({ identifier: "DevicesPostureCreateResponseInputTeamsDevicesCustomS2sInputRequest", }) as any as S.Schema; export type DevicesPostureCreateResponseInput = | DevicesPostureCreateResponseInputFileInput | DevicesPostureCreateResponseInputUniqueClientIDInput | DevicesPostureCreateResponseInputDomainJoinedInput | DevicesPostureCreateResponseInputOSVersionInput | DevicesPostureCreateResponseInputFirewallInput | DevicesPostureCreateResponseInputSentineloneInput | DevicesPostureCreateResponseInputTeamsDevicesCarbonblackInputRequest | DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest | DevicesPostureCreateResponseInputDiskEncryptionInput | DevicesPostureCreateResponseInputTeamsDevicesApplicationInputRequest | DevicesPostureCreateRequestInputClientCertificateInput | DevicesPostureCreateResponseInputTeamsDevicesClientCertificateV2InputRequest | DevicesPostureCreateResponseInputTeamsDevicesAntivirusInputRequest | DevicesPostureCreateResponseInputWorkspaceOneInput | DevicesPostureCreateResponseInputCrowdstrikeInput | DevicesPostureCreateResponseInputIntuneInput | DevicesPostureCreateResponseInputKolideInput | DevicesPostureCreateResponseInputTaniumInput | DevicesPostureCreateResponseInputSentineloneS2sInput | DevicesPostureCreateResponseInputTeamsDevicesCustomS2sInputRequest; export const DevicesPostureCreateResponseInput = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["operatingSystem", "path", "exists", "sha256", "thumbprint"], ["id", "operatingSystem"], ["operatingSystem", "domain"], [ "operatingSystem", "operator", "version", "osDistroName", "osDistroRevision", "osVersionExtra", ], ["enabled", "operatingSystem"], ["operatingSystem", "path", "sha256", "thumbprint"], ["operatingSystem", "path", "sha256", "thumbprint"], ["id"], ["checkDisks", "requireAll"], ["operatingSystem", "path", "sha256", "thumbprint"], ["certificateId", "cn"], [ "certificateId", "checkPrivateKey", "operatingSystem", "cn", "extendedKeyUsage", "locations", "subjectAlternativeNames", ], ["updateWindowDays"], ["complianceStatus", "connectionId"], [ "connectionId", "lastSeen", "operator", "os", "overall", "sensorConfig", "state", "version", "versionOperator", ], ["complianceStatus", "connectionId"], ["connectionId", "authState", "countOperator", "issueCount"], [ "connectionId", "eidLastSeen", "operator", "riskLevel", "scoreOperator", "totalScore", ], [ "connectionId", "activeThreats", "infected", "isActive", "networkStatus", "operationalState", "operator", ], ["connectionId", "operator", "score"], ]), ); export type DevicesPostureCreateResponseMatchItemPlatform = | "windows" | "mac" | "linux" | "android" | "ios" | "chromeos"; export const DevicesPostureCreateResponseMatchItemPlatform = /*@__PURE__*/ S.String; export interface DevicesPostureCreateResponseMatchItem { platform?: DevicesPostureCreateResponseMatchItemPlatform | null; } export const DevicesPostureCreateResponseMatchItem = /*@__PURE__*/ S.suspend( () => S.Struct({ platform: S.optional( S.NullOr(DevicesPostureCreateResponseMatchItemPlatform), ), }), ).annotate({ identifier: "DevicesPostureCreateResponseMatchItem", }) as any as S.Schema; export type DevicesPostureCreateResponseMatchList = Array; export const DevicesPostureCreateResponseMatchList = /*@__PURE__*/ S.Array( DevicesPostureCreateResponseMatchItem, ) as any as S.Schema; export type DevicesPostureCreateResponseType = | "file" | "application" | "tanium" | "gateway" | "warp" | "disk_encryption" | "serial_number" | "sentinelone" | "carbonblack" | "firewall" | "os_version" | "domain_joined" | "client_certificate" | "client_certificate_v2" | "antivirus" | "unique_client_id" | "kolide" | "tanium_s2s" | "crowdstrike_s2s" | "intune" | "workspace_one" | "sentinelone_s2s" | "custom_s2s"; export const DevicesPostureCreateResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDevicePostureResponse { /** API UUID. */ id?: string | null; /** The description of the device posture rule. */ description?: string | null; /** Sets the expiration time for a posture check result. If empty, the result remains valid until it is overwritten by new data from the WARP client. */ expiration?: string | null; /** The value to be checked against. */ input?: DevicesPostureCreateResponseInput | null; /** The conditions that the client must match to run the rule. */ match?: DevicesPostureCreateResponseMatchList | null; /** The name of the device posture rule. */ name?: string | null; /** Polling frequency for the WARP client posture check. Default: `5m` (poll every five minutes). Minimum: `1m`. */ schedule?: string | null; /** The type of device posture rule. */ type?: DevicesPostureCreateResponseType | null; } export const CreateDevicePostureResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), description: S.optional(S.NullOr(S.String)), expiration: S.optional(S.NullOr(S.String)), input: S.optional(S.NullOr(DevicesPostureCreateResponseInput)), match: S.optional(S.NullOr(DevicesPostureCreateResponseMatchList)), name: S.optional(S.NullOr(S.String)), schedule: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(DevicesPostureCreateResponseType)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDevicePostureResponse", }) as any as S.Schema; export type DevicesPostureIntegrationsCreateRequestConfig = { [key: string]: string | undefined; }; export const DevicesPostureIntegrationsCreateRequestConfig = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export type DevicesPostureIntegrationsCreateRequestType = | "workspace_one" | "crowdstrike_s2s" | "uptycs" | "intune" | "kolide" | "tanium_s2s" | "sentinelone_s2s" | "custom_s2s"; export const DevicesPostureIntegrationsCreateRequestType = /*@__PURE__*/ S.String; export interface CreateDevicePostureIntegrationRequest { accountId: string; /** The configuration object containing third-party integration information. */ config: DevicesPostureIntegrationsCreateRequestConfig; /** The interval between each posture check with the third-party API. Use `m` for minutes (e.g. `5m`) and `h` for hours (e.g. `12h`). */ interval: string; /** The name of the device posture integration. */ name: string; /** The type of device posture integration. */ type: DevicesPostureIntegrationsCreateRequestType | (string & {}); } export const CreateDevicePostureIntegrationRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), config: DevicesPostureIntegrationsCreateRequestConfig, interval: S.String, name: S.String, type: DevicesPostureIntegrationsCreateRequestType, }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/devices/posture/integration", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDevicePostureIntegrationRequest", }) as any as S.Schema; export interface DevicesPostureIntegrationsCreateResponseConfig { /** The Workspace One API URL provided in the Workspace One Admin Dashboard. */ apiUrl: string; /** The Workspace One Authorization URL depending on your region. */ authUrl: string; /** The Workspace One client ID provided in the Workspace One Admin Dashboard. */ clientId: string; } export const DevicesPostureIntegrationsCreateResponseConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ apiUrl: S.String.pipe(T.Body("api_url")), authUrl: S.String.pipe(T.Body("auth_url")), clientId: S.String.pipe(T.Body("client_id")), }), ).annotate({ identifier: "DevicesPostureIntegrationsCreateResponseConfig", }) as any as S.Schema; export type DevicesPostureIntegrationsCreateResponseType = | "workspace_one" | "crowdstrike_s2s" | "uptycs" | "intune" | "kolide" | "tanium_s2s" | "sentinelone_s2s" | "custom_s2s"; export const DevicesPostureIntegrationsCreateResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDevicePostureIntegrationResponse { /** API UUID. */ id?: string | null; /** The configuration object containing third-party integration information. */ config?: DevicesPostureIntegrationsCreateResponseConfig | null; /** The interval between each posture check with the third-party API. Use `m` for minutes (e.g. `5m`) and `h` for hours (e.g. `12h`). */ interval?: string | null; /** The name of the device posture integration. */ name?: string | null; /** The type of device posture integration. */ type?: DevicesPostureIntegrationsCreateResponseType | null; } export const CreateDevicePostureIntegrationResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), config: S.optional( S.NullOr(DevicesPostureIntegrationsCreateResponseConfig), ), interval: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(DevicesPostureIntegrationsCreateResponseType)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDevicePostureIntegrationResponse", }) as any as S.Schema; export interface CreateDeviceResilienceGlobalWarpOverrideRequest { accountId: string; /** Disconnects all devices on the account using Global WARP override. */ disconnect: boolean; /** Reasoning for setting the Global WARP override state. This will be surfaced in the audit log. */ justification?: string; } export const CreateDeviceResilienceGlobalWarpOverrideRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), disconnect: S.Boolean, justification: S.optional(S.String), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/devices/resilience/disconnect", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDeviceResilienceGlobalWarpOverrideRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDeviceResilienceGlobalWarpOverrideResponse { /** Disconnects all devices on the account using Global WARP override. */ disconnect?: boolean | null; /** When the Global WARP override state was updated. */ timestamp?: string | null; } export const CreateDeviceResilienceGlobalWarpOverrideResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ disconnect: S.optional(S.NullOr(S.Boolean)), timestamp: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDeviceResilienceGlobalWarpOverrideResponse", }) as any as S.Schema; export type DevicesRevokeCreateRequestBodyList = Array; export const DevicesRevokeCreateRequestBodyList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface CreateDeviceRevokeRequest { accountId: string; /** A list of Registration IDs to revoke. */ body: DevicesRevokeCreateRequestBodyList; } export const CreateDeviceRevokeRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), body: DevicesRevokeCreateRequestBodyList.pipe(T.HttpBody()), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/devices/revoke", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDeviceRevokeRequest", }) as any as S.Schema; export type CreateDeviceRevokeResponse = unknown; export const CreateDeviceRevokeResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDeviceRevokeResponse", }) as any as S.Schema; export type DevicesUnrevokeCreateRequestBodyList = Array; export const DevicesUnrevokeCreateRequestBodyList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface CreateDeviceUnrevokeRequest { accountId: string; /** A list of Registration IDs to unrevoke. */ body: DevicesUnrevokeCreateRequestBodyList; } export const CreateDeviceUnrevokeRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), body: DevicesUnrevokeCreateRequestBodyList.pipe(T.HttpBody()), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/devices/unrevoke", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDeviceUnrevokeRequest", }) as any as S.Schema; export type CreateDeviceUnrevokeResponse = unknown; export const CreateDeviceUnrevokeResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDeviceUnrevokeResponse", }) as any as S.Schema; export type DexCommandsCreateRequestCommandsItemType = | "pcap" | "speed-test" | "warp-diag"; export const DexCommandsCreateRequestCommandsItemType = /*@__PURE__*/ S.String; export interface DexCommandsCreateRequestCommandsItemArgsWARPDiagArgs { /** Test an IP address from all included or excluded ranges. Essentially the same as running 'route get ' and collecting the results. This option may increase the time taken to collect the warp-diag. */ testAllRoutes?: boolean; } export const DexCommandsCreateRequestCommandsItemArgsWARPDiagArgs = /*@__PURE__*/ S.suspend(() => S.Struct({ testAllRoutes: S.optional(S.Boolean.pipe(T.Body("test-all-routes"))), }), ).annotate({ identifier: "DexCommandsCreateRequestCommandsItemArgsWARPDiagArgs", }) as any as S.Schema; export interface DexCommandsCreateRequestCommandsItemArgsPCAPArgs { /** Maximum file size (in MB) for the capture file. If the capture artifact exceeds the specified max file size, it will NOT be uploaded. */ maxFileSizeMb?: number; /** Maximum number of bytes to save for each packet */ packetSizeBytes?: number; /** Limit on capture duration (in minutes) */ timeLimitMin?: number; } export const DexCommandsCreateRequestCommandsItemArgsPCAPArgs = /*@__PURE__*/ S.suspend(() => S.Struct({ maxFileSizeMb: S.optional(S.Number.pipe(T.Body("max-file-size-mb"))), packetSizeBytes: S.optional(S.Number.pipe(T.Body("packet-size-bytes"))), timeLimitMin: S.optional(S.Number.pipe(T.Body("time-limit-min"))), }), ).annotate({ identifier: "DexCommandsCreateRequestCommandsItemArgsPCAPArgs", }) as any as S.Schema; export type DexCommandsCreateRequestCommandsItemArgsSpeedTestArgsInterfacesItem = | "default" | "tunnel"; export const DexCommandsCreateRequestCommandsItemArgsSpeedTestArgsInterfacesItem = /*@__PURE__*/ S.String; export type DexCommandsCreateRequestCommandsItemArgsSpeedTestArgsInterfacesList = Array< | DexCommandsCreateRequestCommandsItemArgsSpeedTestArgsInterfacesItem | (string & {}) >; export const DexCommandsCreateRequestCommandsItemArgsSpeedTestArgsInterfacesList = /*@__PURE__*/ S.Array( DexCommandsCreateRequestCommandsItemArgsSpeedTestArgsInterfacesItem, ) as any as S.Schema; export interface DexCommandsCreateRequestCommandsItemArgsSpeedTestArgs { /** List of interfaces to run the speed test on */ interfaces?: DexCommandsCreateRequestCommandsItemArgsSpeedTestArgsInterfacesList; } export const DexCommandsCreateRequestCommandsItemArgsSpeedTestArgs = /*@__PURE__*/ S.suspend(() => S.Struct({ interfaces: S.optional( DexCommandsCreateRequestCommandsItemArgsSpeedTestArgsInterfacesList, ), }), ).annotate({ identifier: "DexCommandsCreateRequestCommandsItemArgsSpeedTestArgs", }) as any as S.Schema; export type DexCommandsCreateRequestCommandsItemArgs = | DexCommandsCreateRequestCommandsItemArgsWARPDiagArgs | DexCommandsCreateRequestCommandsItemArgsPCAPArgs | DexCommandsCreateRequestCommandsItemArgsSpeedTestArgs; export const DexCommandsCreateRequestCommandsItemArgs = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["testAllRoutes"], ["maxFileSizeMb", "packetSizeBytes", "timeLimitMin"], ["interfaces"], ]), ); export interface DexCommandsCreateRequestCommandsItem { /** Unique identifier for the physical device */ deviceId: string; /** Type of command to execute on the device */ type: DexCommandsCreateRequestCommandsItemType | (string & {}); /** Email tied to the device */ userEmail: string; /** Command arguments. Allowed fields depend on `type`. */ args?: DexCommandsCreateRequestCommandsItemArgs; /** Unique identifier for the device registration. Required for multi-user devices to target the correct user session. */ registrationId?: string; } export const DexCommandsCreateRequestCommandsItem = /*@__PURE__*/ S.suspend( () => S.Struct({ deviceId: S.String.pipe(T.Body("device_id")), type: DexCommandsCreateRequestCommandsItemType, userEmail: S.String.pipe(T.Body("user_email")), args: S.optional(DexCommandsCreateRequestCommandsItemArgs), registrationId: S.optional(S.String.pipe(T.Body("registration_id"))), }), ).annotate({ identifier: "DexCommandsCreateRequestCommandsItem", }) as any as S.Schema; export type DexCommandsCreateRequestCommandsList = Array; export const DexCommandsCreateRequestCommandsList = /*@__PURE__*/ S.Array( DexCommandsCreateRequestCommandsItem, ) as any as S.Schema; export interface CreateDexCommandRequest { /** Unique identifier linked to an account. */ accountId: string; /** List of device-level commands to execute */ commands: DexCommandsCreateRequestCommandsList; } export const CreateDexCommandRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), commands: DexCommandsCreateRequestCommandsList, }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dex/commands", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDexCommandRequest", }) as any as S.Schema; export type DexCommandsCreateResponseCommandsItemArgsMap = { [key: string]: string | undefined; }; export const DexCommandsCreateResponseCommandsItemArgsMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export type DexCommandsCreateResponseCommandsItemStatus = | "PENDING_EXEC" | "PENDING_UPLOAD" | "SUCCESS" | "FAILED"; export const DexCommandsCreateResponseCommandsItemStatus = /*@__PURE__*/ S.String; export interface DexCommandsCreateResponseCommandsItem { /** Unique identifier for the command */ id?: string | null; /** Command arguments */ args?: DexCommandsCreateResponseCommandsItemArgsMap | null; /** Identifier for the device associated with the command */ deviceId?: string | null; /** Unique identifier for the device registration */ registrationId?: string | null; /** Current status of the command */ status?: DexCommandsCreateResponseCommandsItemStatus | null; /** Type of the command (e.g., "pcap", "speed-test", or "warp-diag") */ type?: string | null; } export const DexCommandsCreateResponseCommandsItem = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), args: S.optional(S.NullOr(DexCommandsCreateResponseCommandsItemArgsMap)), deviceId: S.optional(S.NullOr(S.String).pipe(T.Body("device_id"))), registrationId: S.optional( S.NullOr(S.String).pipe(T.Body("registration_id")), ), status: S.optional(S.NullOr(DexCommandsCreateResponseCommandsItemStatus)), type: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DexCommandsCreateResponseCommandsItem", }) as any as S.Schema; export type DexCommandsCreateResponseCommandsList = Array; export const DexCommandsCreateResponseCommandsList = /*@__PURE__*/ S.Array( DexCommandsCreateResponseCommandsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDexCommandResponse { /** List of created commands */ commands?: DexCommandsCreateResponseCommandsList | null; } export const CreateDexCommandResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ commands: S.optional(S.NullOr(DexCommandsCreateResponseCommandsList)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDexCommandResponse", }) as any as S.Schema; export interface CreateDexRuleRequest { /** Unique identifier linked to an account. */ accountId: string; /** The wirefilter expression to match. */ match: string; /** The name of the Rule. */ name: string; description?: string; } export const CreateDexRuleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), match: S.String, name: S.String, description: S.optional(S.String), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dex/rules", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDexRuleRequest", }) as any as S.Schema; export type DexRulesCreateResponseTargetedTestsItemDataKind = | "http" | "traceroute"; export const DexRulesCreateResponseTargetedTestsItemDataKind = /*@__PURE__*/ S.String; export type DexRulesCreateResponseTargetedTestsItemDataMethod = "GET"; export const DexRulesCreateResponseTargetedTestsItemDataMethod = /*@__PURE__*/ S.String; export interface DexRulesCreateResponseTargetedTestsItemData { /** The desired endpoint to test. */ host: string; /** The type of test. */ kind: DexRulesCreateResponseTargetedTestsItemDataKind; /** The HTTP request method type. */ method?: DexRulesCreateResponseTargetedTestsItemDataMethod | null; } export const DexRulesCreateResponseTargetedTestsItemData = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.String, kind: DexRulesCreateResponseTargetedTestsItemDataKind, method: S.optional( S.NullOr(DexRulesCreateResponseTargetedTestsItemDataMethod), ), }), ).annotate({ identifier: "DexRulesCreateResponseTargetedTestsItemData", }) as any as S.Schema; export interface DexRulesCreateResponseTargetedTestsItem { /** The configuration object which contains the details for the WARP client to conduct the test. */ data: DexRulesCreateResponseTargetedTestsItemData; enabled: boolean; name: string; testId: string; } export const DexRulesCreateResponseTargetedTestsItem = /*@__PURE__*/ S.suspend( () => S.Struct({ data: DexRulesCreateResponseTargetedTestsItemData, enabled: S.Boolean, name: S.String, testId: S.String.pipe(T.Body("test_id")), }), ).annotate({ identifier: "DexRulesCreateResponseTargetedTestsItem", }) as any as S.Schema; export type DexRulesCreateResponseTargetedTestsList = Array; export const DexRulesCreateResponseTargetedTestsList = /*@__PURE__*/ S.Array( DexRulesCreateResponseTargetedTestsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDexRuleResponse { /** API Resource UUID tag. */ id: string; createdAt: string; match: string; name: string; description?: string | null; targetedTests?: DexRulesCreateResponseTargetedTestsList | null; updatedAt?: string | null; } export const CreateDexRuleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), match: S.String, name: S.String, description: S.optional(S.NullOr(S.String)), targetedTests: S.optional( S.NullOr(DexRulesCreateResponseTargetedTestsList).pipe( T.Body("targeted_tests"), ), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDexRuleResponse", }) as any as S.Schema; export type CreateDlpCustomEntryRequestPatternValidation = "luhn"; export const CreateDlpCustomEntryRequestPatternValidation = /*@__PURE__*/ S.String; export interface CreateDlpCustomEntryRequestPattern { regex: string; validation?: CreateDlpCustomEntryRequestPatternValidation | (string & {}); } export const CreateDlpCustomEntryRequestPattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional(CreateDlpCustomEntryRequestPatternValidation), }), ).annotate({ identifier: "CreateDlpCustomEntryRequestPattern", }) as any as S.Schema; export interface CreateDlpCustomEntryRequest { accountId: string; enabled: boolean; name: string; pattern: CreateDlpCustomEntryRequestPattern; description?: string; profileId?: string; } export const CreateDlpCustomEntryRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), enabled: S.Boolean, name: S.String, pattern: CreateDlpCustomEntryRequestPattern, description: S.optional(S.String), profileId: S.optional(S.String.pipe(T.Body("profile_id"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/entries", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpCustomEntryRequest", }) as any as S.Schema; export type CreateDlpCustomEntryResponsePatternValidation = "luhn"; export const CreateDlpCustomEntryResponsePatternValidation = /*@__PURE__*/ S.String; export interface CreateDlpCustomEntryResponsePattern { regex: string; validation?: CreateDlpCustomEntryResponsePatternValidation | null; } export const CreateDlpCustomEntryResponsePattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( S.NullOr(CreateDlpCustomEntryResponsePatternValidation), ), }), ).annotate({ identifier: "CreateDlpCustomEntryResponsePattern", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDlpCustomEntryResponse { id: string; createdAt: string; enabled: boolean; name: string; pattern: CreateDlpCustomEntryResponsePattern; updatedAt: string; description?: string | null; profileId?: string | null; } export const CreateDlpCustomEntryResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: CreateDlpCustomEntryResponsePattern, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpCustomEntryResponse", }) as any as S.Schema; export interface CreateDlpCustomPromptTopicRequest { accountId: string; enabled: boolean; name: string; topic: string; description?: string; profileId?: string; } export const CreateDlpCustomPromptTopicRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), enabled: S.Boolean, name: S.String, topic: S.String, description: S.optional(S.String), profileId: S.optional(S.String.pipe(T.Body("profile_id"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/custom_prompt_topics", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpCustomPromptTopicRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDlpCustomPromptTopicResponse { id: string; createdAt: string; enabled: boolean; name: string; topic: string; updatedAt: string; description?: string | null; profileId?: string | null; } export const CreateDlpCustomPromptTopicResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, topic: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpCustomPromptTopicResponse", }) as any as S.Schema; export type DlpDataClassesCreateRequestDataTagsList = Array; export const DlpDataClassesCreateRequestDataTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DlpDataClassesCreateRequestSensitivityLevelsItem { groupId: string; levelId: string; } export const DlpDataClassesCreateRequestSensitivityLevelsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ groupId: S.String.pipe(T.Body("group_id")), levelId: S.String.pipe(T.Body("level_id")), }), ).annotate({ identifier: "DlpDataClassesCreateRequestSensitivityLevelsItem", }) as any as S.Schema; export type DlpDataClassesCreateRequestSensitivityLevelsList = Array; export const DlpDataClassesCreateRequestSensitivityLevelsList = /*@__PURE__*/ S.Array( DlpDataClassesCreateRequestSensitivityLevelsItem, ) as any as S.Schema; export interface CreateDlpDataClassRequest { accountId: string; dataTags: DlpDataClassesCreateRequestDataTagsList; expression: string; name: string; sensitivityLevels: DlpDataClassesCreateRequestSensitivityLevelsList; description?: string; } export const CreateDlpDataClassRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), dataTags: DlpDataClassesCreateRequestDataTagsList.pipe(T.Body("data_tags")), expression: S.String, name: S.String, sensitivityLevels: DlpDataClassesCreateRequestSensitivityLevelsList.pipe( T.Body("sensitivity_levels"), ), description: S.optional(S.String), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/data_classes", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpDataClassRequest", }) as any as S.Schema; export type DlpDataClassesCreateResponseDataTagsList = Array; export const DlpDataClassesCreateResponseDataTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpDataClassesCreateResponseSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export const DlpDataClassesCreateResponseSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export type DlpDataClassesCreateResponseSensitivityLevelsList = Array; export const DlpDataClassesCreateResponseSensitivityLevelsList = /*@__PURE__*/ S.Array( DlpDataClassesCreateRequestSensitivityLevelsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDlpDataClassResponse { id: string; createdAt: string; dataTags: DlpDataClassesCreateResponseDataTagsList; expression: string; name: string; sensitivityLevels: DlpDataClassesCreateResponseSensitivityLevelsList; updatedAt: string; description?: string | null; } export const CreateDlpDataClassResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), dataTags: DlpDataClassesCreateResponseDataTagsList.pipe( T.Body("data_tags"), ), expression: S.String, name: S.String, sensitivityLevels: DlpDataClassesCreateResponseSensitivityLevelsList.pipe( T.Body("sensitivity_levels"), ), updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpDataClassResponse", }) as any as S.Schema; export interface CreateDlpDatasetRequest { accountId: string; name: string; /** Only applies to custom word lists. */ caseSensitive?: boolean; /** The description of the dataset. */ description?: string; /** Dataset encoding version */ encodingVersion?: number; /** Generate a secret dataset. */ secret?: boolean; } export const CreateDlpDatasetRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.String, caseSensitive: S.optional(S.Boolean.pipe(T.Body("case_sensitive"))), description: S.optional(S.String), encodingVersion: S.optional(S.Number.pipe(T.Body("encoding_version"))), secret: S.optional(S.Boolean), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/datasets", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpDatasetRequest", }) as any as S.Schema; export type DlpDatasetsCreateResponseDatasetColumnsItemUploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsCreateResponseDatasetColumnsItemUploadStatus = /*@__PURE__*/ S.String; export interface DlpDatasetsCreateResponseDatasetColumnsItem { entryId: string; headerName: string; numCells: number; uploadStatus: DlpDatasetsCreateResponseDatasetColumnsItemUploadStatus; } export const DlpDatasetsCreateResponseDatasetColumnsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ entryId: S.String.pipe(T.Body("entry_id")), headerName: S.String.pipe(T.Body("header_name")), numCells: S.Number.pipe(T.Body("num_cells")), uploadStatus: DlpDatasetsCreateResponseDatasetColumnsItemUploadStatus.pipe( T.Body("upload_status"), ), }), ).annotate({ identifier: "DlpDatasetsCreateResponseDatasetColumnsItem", }) as any as S.Schema; export type DlpDatasetsCreateResponseDatasetColumnsList = Array; export const DlpDatasetsCreateResponseDatasetColumnsList = /*@__PURE__*/ S.Array( DlpDatasetsCreateResponseDatasetColumnsItem, ) as any as S.Schema; export type DlpDatasetsCreateResponseDatasetStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsCreateResponseDatasetStatus = /*@__PURE__*/ S.String; export type DlpDatasetsCreateResponseDatasetUploadsItemStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsCreateResponseDatasetUploadsItemStatus = /*@__PURE__*/ S.String; export interface DlpDatasetsCreateResponseDatasetUploadsItem { numCells: number; status: DlpDatasetsCreateResponseDatasetUploadsItemStatus; version: number; } export const DlpDatasetsCreateResponseDatasetUploadsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ numCells: S.Number.pipe(T.Body("num_cells")), status: DlpDatasetsCreateResponseDatasetUploadsItemStatus, version: S.Number, }), ).annotate({ identifier: "DlpDatasetsCreateResponseDatasetUploadsItem", }) as any as S.Schema; export type DlpDatasetsCreateResponseDatasetUploadsList = Array; export const DlpDatasetsCreateResponseDatasetUploadsList = /*@__PURE__*/ S.Array( DlpDatasetsCreateResponseDatasetUploadsItem, ) as any as S.Schema; export interface DlpDatasetsCreateResponseDataset { id: string; columns: DlpDatasetsCreateResponseDatasetColumnsList; createdAt: string; encodingVersion: number; name: string; numCells: number; secret: boolean; status: DlpDatasetsCreateResponseDatasetStatus; /** Stores when the dataset was last updated. */ updatedAt: string; uploads: DlpDatasetsCreateResponseDatasetUploadsList; caseSensitive?: boolean | null; /** The description of the dataset. */ description?: string | null; } export const DlpDatasetsCreateResponseDataset = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, columns: DlpDatasetsCreateResponseDatasetColumnsList, createdAt: S.String.pipe(T.Body("created_at")), encodingVersion: S.Number.pipe(T.Body("encoding_version")), name: S.String, numCells: S.Number.pipe(T.Body("num_cells")), secret: S.Boolean, status: DlpDatasetsCreateResponseDatasetStatus, updatedAt: S.String.pipe(T.Body("updated_at")), uploads: DlpDatasetsCreateResponseDatasetUploadsList, caseSensitive: S.optional( S.NullOr(S.Boolean).pipe(T.Body("case_sensitive")), ), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpDatasetsCreateResponseDataset", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDlpDatasetResponse { dataset: DlpDatasetsCreateResponseDataset; /** Encoding version to use for dataset. */ encodingVersion: number; maxCells: number; /** The version to use when uploading the dataset. */ version: number; /** The secret to use for Exact Data Match datasets. */ secret?: string | null; } export const CreateDlpDatasetResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ dataset: DlpDatasetsCreateResponseDataset, encodingVersion: S.Number.pipe(T.Body("encoding_version")), maxCells: S.Number.pipe(T.Body("max_cells")), version: S.Number, secret: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpDatasetResponse", }) as any as S.Schema; export interface CreateDlpDatasetUploadRequest { accountId: string; datasetId: string; } export const CreateDlpDatasetUploadRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), datasetId: S.String.pipe(T.Label("dataset_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/datasets/{dataset_id}/upload", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpDatasetUploadRequest", }) as any as S.Schema; export type DlpDatasetsUploadCreateResponseColumnsItemUploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsUploadCreateResponseColumnsItemUploadStatus = /*@__PURE__*/ S.String; export interface DlpDatasetsUploadCreateResponseColumnsItem { entryId: string; headerName: string; numCells: number; uploadStatus: DlpDatasetsUploadCreateResponseColumnsItemUploadStatus; } export const DlpDatasetsUploadCreateResponseColumnsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ entryId: S.String.pipe(T.Body("entry_id")), headerName: S.String.pipe(T.Body("header_name")), numCells: S.Number.pipe(T.Body("num_cells")), uploadStatus: DlpDatasetsUploadCreateResponseColumnsItemUploadStatus.pipe( T.Body("upload_status"), ), }), ).annotate({ identifier: "DlpDatasetsUploadCreateResponseColumnsItem", }) as any as S.Schema; export type DlpDatasetsUploadCreateResponseColumnsList = Array; export const DlpDatasetsUploadCreateResponseColumnsList = /*@__PURE__*/ S.Array( DlpDatasetsUploadCreateResponseColumnsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDlpDatasetUploadResponse { encodingVersion: number; maxCells: number; version: number; caseSensitive?: boolean | null; columns?: DlpDatasetsUploadCreateResponseColumnsList | null; secret?: string | null; } export const CreateDlpDatasetUploadResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ encodingVersion: S.Number.pipe(T.Body("encoding_version")), maxCells: S.Number.pipe(T.Body("max_cells")), version: S.Number, caseSensitive: S.optional( S.NullOr(S.Boolean).pipe(T.Body("case_sensitive")), ), columns: S.optional(S.NullOr(DlpDatasetsUploadCreateResponseColumnsList)), secret: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpDatasetUploadResponse", }) as any as S.Schema; export interface DlpDatasetsVersionsCreateRequestBodyItemExistingColumn { entryId: string; headerName?: string; numCells?: number; } export const DlpDatasetsVersionsCreateRequestBodyItemExistingColumn = /*@__PURE__*/ S.suspend(() => S.Struct({ entryId: S.String.pipe(T.Body("entry_id")), headerName: S.optional(S.String.pipe(T.Body("header_name"))), numCells: S.optional(S.Number.pipe(T.Body("num_cells"))), }), ).annotate({ identifier: "DlpDatasetsVersionsCreateRequestBodyItemExistingColumn", }) as any as S.Schema; export interface DlpDatasetsVersionsCreateRequestBodyItemNewColumn { entryName: string; headerName?: string; numCells?: number; } export const DlpDatasetsVersionsCreateRequestBodyItemNewColumn = /*@__PURE__*/ S.suspend(() => S.Struct({ entryName: S.String.pipe(T.Body("entry_name")), headerName: S.optional(S.String.pipe(T.Body("header_name"))), numCells: S.optional(S.Number.pipe(T.Body("num_cells"))), }), ).annotate({ identifier: "DlpDatasetsVersionsCreateRequestBodyItemNewColumn", }) as any as S.Schema; export type DlpDatasetsVersionsCreateRequestBodyItem = | DlpDatasetsVersionsCreateRequestBodyItemExistingColumn | DlpDatasetsVersionsCreateRequestBodyItemNewColumn; export const DlpDatasetsVersionsCreateRequestBodyItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["entryId", "headerName", "numCells"], ["entryName", "headerName", "numCells"], ]), ); export type DlpDatasetsVersionsCreateRequestBodyList = Array; export const DlpDatasetsVersionsCreateRequestBodyList = /*@__PURE__*/ S.Array( DlpDatasetsVersionsCreateRequestBodyItem, ) as any as S.Schema; export interface CreateDlpDatasetVersionRequest { accountId: string; datasetId: string; version: number; body: DlpDatasetsVersionsCreateRequestBodyList; } export const CreateDlpDatasetVersionRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), datasetId: S.String.pipe(T.Label("dataset_id")), version: S.Number.pipe(T.Label()), body: DlpDatasetsVersionsCreateRequestBodyList.pipe(T.HttpBody()), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/datasets/{dataset_id}/versions/{version}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpDatasetVersionRequest", }) as any as S.Schema; export type DlpDatasetsVersionsCreateResultItemUploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsVersionsCreateResultItemUploadStatus = /*@__PURE__*/ S.String; export interface DlpDatasetsVersionsCreateResultItem { entryId: string; headerName: string; numCells: number; uploadStatus: DlpDatasetsVersionsCreateResultItemUploadStatus; } export const DlpDatasetsVersionsCreateResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ entryId: S.String.pipe(T.Body("entry_id")), headerName: S.String.pipe(T.Body("header_name")), numCells: S.Number.pipe(T.Body("num_cells")), uploadStatus: DlpDatasetsVersionsCreateResultItemUploadStatus.pipe( T.Body("upload_status"), ), }), ).annotate({ identifier: "DlpDatasetsVersionsCreateResultItem", }) as any as S.Schema; export type DlpDatasetsVersionsCreateResultList = Array; export const DlpDatasetsVersionsCreateResultList = /*@__PURE__*/ S.Array( DlpDatasetsVersionsCreateResultItem, ) as any as S.Schema; export interface CreateDlpDatasetVersionResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DlpDatasetsVersionsCreateResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const CreateDlpDatasetVersionResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DlpDatasetsVersionsCreateResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpDatasetVersionResponse", }) as any as S.Schema; export interface CreateDlpDatasetVersionEntryRequest { accountId: string; datasetId: string; version: number; entryId: string; } export const CreateDlpDatasetVersionEntryRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), datasetId: S.String.pipe(T.Label("dataset_id")), version: S.Number.pipe(T.Label()), entryId: S.String.pipe(T.Label("entry_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/datasets/{dataset_id}/versions/{version}/entries/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpDatasetVersionEntryRequest", }) as any as S.Schema; export type DlpDatasetsVersionsEntriesCreateResponseUploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsVersionsEntriesCreateResponseUploadStatus = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDlpDatasetVersionEntryResponse { entryId: string; headerName: string; numCells: number; uploadStatus: DlpDatasetsVersionsEntriesCreateResponseUploadStatus; } export const CreateDlpDatasetVersionEntryResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ entryId: S.String.pipe(T.Body("entry_id")), headerName: S.String.pipe(T.Body("header_name")), numCells: S.Number.pipe(T.Body("num_cells")), uploadStatus: DlpDatasetsVersionsEntriesCreateResponseUploadStatus.pipe( T.Body("upload_status"), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpDatasetVersionEntryResponse", }) as any as S.Schema; export interface DlpDataTagCategoriesCreateRequestTagsItem { name: string; description?: string; } export const DlpDataTagCategoriesCreateRequestTagsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.String, description: S.optional(S.String), }), ).annotate({ identifier: "DlpDataTagCategoriesCreateRequestTagsItem", }) as any as S.Schema; export type DlpDataTagCategoriesCreateRequestTagsList = Array; export const DlpDataTagCategoriesCreateRequestTagsList = /*@__PURE__*/ S.Array( DlpDataTagCategoriesCreateRequestTagsItem, ) as any as S.Schema; export interface CreateDlpDataTagCategoryRequest { accountId: string; name: string; description?: string; /** Tags to create with the category. Mutually exclusive with `template_id`. */ tags?: DlpDataTagCategoriesCreateRequestTagsList; templateId?: string; } export const CreateDlpDataTagCategoryRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.String, description: S.optional(S.String), tags: S.optional(DlpDataTagCategoriesCreateRequestTagsList), templateId: S.optional(S.String.pipe(T.Body("template_id"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/data_tag_categories", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpDataTagCategoryRequest", }) as any as S.Schema; export interface DlpDataTagCategoriesCreateResponseTagsItem { id: string; createdAt: string; name: string; updatedAt: string; description?: string | null; } export const DlpDataTagCategoriesCreateResponseTagsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpDataTagCategoriesCreateResponseTagsItem", }) as any as S.Schema; export type DlpDataTagCategoriesCreateResponseTagsList = Array; export const DlpDataTagCategoriesCreateResponseTagsList = /*@__PURE__*/ S.Array( DlpDataTagCategoriesCreateResponseTagsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDlpDataTagCategoryResponse { id: string; createdAt: string; name: string; tags: DlpDataTagCategoriesCreateResponseTagsList; updatedAt: string; description?: string | null; templateId?: string | null; } export const CreateDlpDataTagCategoryResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), name: S.String, tags: DlpDataTagCategoriesCreateResponseTagsList, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), templateId: S.optional(S.NullOr(S.String).pipe(T.Body("template_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpDataTagCategoryResponse", }) as any as S.Schema; export interface CreateDlpDataTagCategoryDataTagRequest { accountId: string; categoryId: string; name: string; description?: string; } export const CreateDlpDataTagCategoryDataTagRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), categoryId: S.String.pipe(T.Label("category_id")), name: S.String, description: S.optional(S.String), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/data_tag_categories/{category_id}/data_tags", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpDataTagCategoryDataTagRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDlpDataTagCategoryDataTagResponse { id: string; createdAt: string; name: string; updatedAt: string; description?: string | null; } export const CreateDlpDataTagCategoryDataTagResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpDataTagCategoryDataTagResponse", }) as any as S.Schema; export type DlpEmailAccountMappingCreateRequestAuthRequirementsCase0AllowedMicrosoftOrganizationsList = Array; export const DlpEmailAccountMappingCreateRequestAuthRequirementsCase0AllowedMicrosoftOrganizationsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpEmailAccountMappingCreateRequestAuthRequirementsCase0Type = "Org"; export const DlpEmailAccountMappingCreateRequestAuthRequirementsCase0Type = /*@__PURE__*/ S.String; export interface DlpEmailAccountMappingCreateRequestAuthRequirementsCase0 { allowedMicrosoftOrganizations: DlpEmailAccountMappingCreateRequestAuthRequirementsCase0AllowedMicrosoftOrganizationsList; type: DlpEmailAccountMappingCreateRequestAuthRequirementsCase0Type; } export const DlpEmailAccountMappingCreateRequestAuthRequirementsCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedMicrosoftOrganizations: DlpEmailAccountMappingCreateRequestAuthRequirementsCase0AllowedMicrosoftOrganizationsList.pipe( T.Body("allowed_microsoft_organizations"), ), type: DlpEmailAccountMappingCreateRequestAuthRequirementsCase0Type, }), ).annotate({ identifier: "DlpEmailAccountMappingCreateRequestAuthRequirementsCase0", }) as any as S.Schema; export type DlpEmailAccountMappingCreateRequestAuthRequirementsTypeType = "NoAuth"; export const DlpEmailAccountMappingCreateRequestAuthRequirementsTypeType = /*@__PURE__*/ S.String; export interface DlpEmailAccountMappingCreateRequestAuthRequirementsType { type: DlpEmailAccountMappingCreateRequestAuthRequirementsTypeType; } export const DlpEmailAccountMappingCreateRequestAuthRequirementsType = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpEmailAccountMappingCreateRequestAuthRequirementsTypeType, }), ).annotate({ identifier: "DlpEmailAccountMappingCreateRequestAuthRequirementsType", }) as any as S.Schema; export type DlpEmailAccountMappingCreateRequestAuthRequirements = | DlpEmailAccountMappingCreateRequestAuthRequirementsCase0 | DlpEmailAccountMappingCreateRequestAuthRequirementsType; export const DlpEmailAccountMappingCreateRequestAuthRequirements = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([["allowedMicrosoftOrganizations", "type"], ["type"]]), ); export interface CreateDlpEmailAccountMappingRequest { accountId: string; authRequirements: DlpEmailAccountMappingCreateRequestAuthRequirements; } export const CreateDlpEmailAccountMappingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), authRequirements: DlpEmailAccountMappingCreateRequestAuthRequirements.pipe( T.Body("auth_requirements"), ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/email/account_mapping", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpEmailAccountMappingRequest", }) as any as S.Schema; export type DlpEmailAccountMappingCreateResponseAuthRequirementsCase0AllowedMicrosoftOrganizationsList = Array; export const DlpEmailAccountMappingCreateResponseAuthRequirementsCase0AllowedMicrosoftOrganizationsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpEmailAccountMappingCreateResponseAuthRequirementsCase0Type = "Org"; export const DlpEmailAccountMappingCreateResponseAuthRequirementsCase0Type = /*@__PURE__*/ S.String; export interface DlpEmailAccountMappingCreateResponseAuthRequirementsCase0 { allowedMicrosoftOrganizations: DlpEmailAccountMappingCreateResponseAuthRequirementsCase0AllowedMicrosoftOrganizationsList; type: DlpEmailAccountMappingCreateResponseAuthRequirementsCase0Type; } export const DlpEmailAccountMappingCreateResponseAuthRequirementsCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedMicrosoftOrganizations: DlpEmailAccountMappingCreateResponseAuthRequirementsCase0AllowedMicrosoftOrganizationsList.pipe( T.Body("allowed_microsoft_organizations"), ), type: DlpEmailAccountMappingCreateResponseAuthRequirementsCase0Type, }), ).annotate({ identifier: "DlpEmailAccountMappingCreateResponseAuthRequirementsCase0", }) as any as S.Schema; export type DlpEmailAccountMappingCreateResponseAuthRequirementsTypeType = "NoAuth"; export const DlpEmailAccountMappingCreateResponseAuthRequirementsTypeType = /*@__PURE__*/ S.String; export interface DlpEmailAccountMappingCreateResponseAuthRequirementsType { type: DlpEmailAccountMappingCreateResponseAuthRequirementsTypeType; } export const DlpEmailAccountMappingCreateResponseAuthRequirementsType = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpEmailAccountMappingCreateResponseAuthRequirementsTypeType, }), ).annotate({ identifier: "DlpEmailAccountMappingCreateResponseAuthRequirementsType", }) as any as S.Schema; export type DlpEmailAccountMappingCreateResponseAuthRequirements = | DlpEmailAccountMappingCreateResponseAuthRequirementsCase0 | DlpEmailAccountMappingCreateResponseAuthRequirementsType; export const DlpEmailAccountMappingCreateResponseAuthRequirements = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([["allowedMicrosoftOrganizations", "type"], ["type"]]), ); /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDlpEmailAccountMappingResponse { addinIdentifierToken: string; authRequirements: DlpEmailAccountMappingCreateResponseAuthRequirements; } export const CreateDlpEmailAccountMappingResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ addinIdentifierToken: S.String.pipe(T.Body("addin_identifier_token")), authRequirements: DlpEmailAccountMappingCreateResponseAuthRequirements.pipe( T.Body("auth_requirements"), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpEmailAccountMappingResponse", }) as any as S.Schema; export type DlpEmailRulesCreateRequestActionAction = "Block"; export const DlpEmailRulesCreateRequestActionAction = /*@__PURE__*/ S.String; export interface DlpEmailRulesCreateRequestAction { action: DlpEmailRulesCreateRequestActionAction | (string & {}); message?: string; } export const DlpEmailRulesCreateRequestAction = /*@__PURE__*/ S.suspend(() => S.Struct({ action: DlpEmailRulesCreateRequestActionAction, message: S.optional(S.String), }), ).annotate({ identifier: "DlpEmailRulesCreateRequestAction", }) as any as S.Schema; export type DlpEmailRulesCreateRequestConditionsItemOperator = | "InList" | "NotInList" | "MatchRegex" | "NotMatchRegex"; export const DlpEmailRulesCreateRequestConditionsItemOperator = /*@__PURE__*/ S.String; export type DlpEmailRulesCreateRequestConditionsItemSelector = | "Recipients" | "Sender" | "DLPProfiles"; export const DlpEmailRulesCreateRequestConditionsItemSelector = /*@__PURE__*/ S.String; export type DlpEmailRulesCreateRequestConditionsItemValueCase0List = Array; export const DlpEmailRulesCreateRequestConditionsItemValueCase0List = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpEmailRulesCreateRequestConditionsItemValue = | string | DlpEmailRulesCreateRequestConditionsItemValueCase0List; export const DlpEmailRulesCreateRequestConditionsItemValue = /*@__PURE__*/ S.Unknown.pipe(T.UnionCases([[], []])); export interface DlpEmailRulesCreateRequestConditionsItem { operator: DlpEmailRulesCreateRequestConditionsItemOperator | (string & {}); selector: DlpEmailRulesCreateRequestConditionsItemSelector | (string & {}); value: DlpEmailRulesCreateRequestConditionsItemValue; } export const DlpEmailRulesCreateRequestConditionsItem = /*@__PURE__*/ S.suspend( () => S.Struct({ operator: DlpEmailRulesCreateRequestConditionsItemOperator, selector: DlpEmailRulesCreateRequestConditionsItemSelector, value: DlpEmailRulesCreateRequestConditionsItemValue, }), ).annotate({ identifier: "DlpEmailRulesCreateRequestConditionsItem", }) as any as S.Schema; export type DlpEmailRulesCreateRequestConditionsList = Array; export const DlpEmailRulesCreateRequestConditionsList = /*@__PURE__*/ S.Array( DlpEmailRulesCreateRequestConditionsItem, ) as any as S.Schema; export interface CreateDlpEmailRuleRequest { accountId: string; action: DlpEmailRulesCreateRequestAction; /** Triggered if all conditions match. */ conditions: DlpEmailRulesCreateRequestConditionsList; enabled: boolean; name: string; description?: string; } export const CreateDlpEmailRuleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), action: DlpEmailRulesCreateRequestAction, conditions: DlpEmailRulesCreateRequestConditionsList, enabled: S.Boolean, name: S.String, description: S.optional(S.String), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/email/rules", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpEmailRuleRequest", }) as any as S.Schema; export type DlpEmailRulesCreateResponseActionAction = "Block"; export const DlpEmailRulesCreateResponseActionAction = /*@__PURE__*/ S.String; export interface DlpEmailRulesCreateResponseAction { action: DlpEmailRulesCreateResponseActionAction; message?: string | null; } export const DlpEmailRulesCreateResponseAction = /*@__PURE__*/ S.suspend(() => S.Struct({ action: DlpEmailRulesCreateResponseActionAction, message: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEmailRulesCreateResponseAction", }) as any as S.Schema; export type DlpEmailRulesCreateResponseConditionsItemOperator = | "InList" | "NotInList" | "MatchRegex" | "NotMatchRegex"; export const DlpEmailRulesCreateResponseConditionsItemOperator = /*@__PURE__*/ S.String; export type DlpEmailRulesCreateResponseConditionsItemSelector = | "Recipients" | "Sender" | "DLPProfiles"; export const DlpEmailRulesCreateResponseConditionsItemSelector = /*@__PURE__*/ S.String; export type DlpEmailRulesCreateResponseConditionsItemValueCase0List = Array; export const DlpEmailRulesCreateResponseConditionsItemValueCase0List = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpEmailRulesCreateResponseConditionsItemValue = | string | DlpEmailRulesCreateResponseConditionsItemValueCase0List; export const DlpEmailRulesCreateResponseConditionsItemValue = /*@__PURE__*/ S.Unknown.pipe(T.UnionCases([[], []])); export interface DlpEmailRulesCreateResponseConditionsItem { operator: DlpEmailRulesCreateResponseConditionsItemOperator; selector: DlpEmailRulesCreateResponseConditionsItemSelector; value: DlpEmailRulesCreateResponseConditionsItemValue; } export const DlpEmailRulesCreateResponseConditionsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ operator: DlpEmailRulesCreateResponseConditionsItemOperator, selector: DlpEmailRulesCreateResponseConditionsItemSelector, value: DlpEmailRulesCreateResponseConditionsItemValue, }), ).annotate({ identifier: "DlpEmailRulesCreateResponseConditionsItem", }) as any as S.Schema; export type DlpEmailRulesCreateResponseConditionsList = Array; export const DlpEmailRulesCreateResponseConditionsList = /*@__PURE__*/ S.Array( DlpEmailRulesCreateResponseConditionsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDlpEmailRuleResponse { action: DlpEmailRulesCreateResponseAction; /** Triggered if all conditions match. */ conditions: DlpEmailRulesCreateResponseConditionsList; createdAt: string; enabled: boolean; name: string; priority: number; ruleId: string; updatedAt: string; description?: string | null; } export const CreateDlpEmailRuleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ action: DlpEmailRulesCreateResponseAction, conditions: DlpEmailRulesCreateResponseConditionsList, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, priority: S.Number, ruleId: S.String.pipe(T.Body("rule_id")), updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpEmailRuleResponse", }) as any as S.Schema; export type DlpEntriesCreateRequestPatternValidation = "luhn"; export const DlpEntriesCreateRequestPatternValidation = /*@__PURE__*/ S.String; export interface DlpEntriesCreateRequestPattern { regex: string; validation?: DlpEntriesCreateRequestPatternValidation | (string & {}); } export const DlpEntriesCreateRequestPattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional(DlpEntriesCreateRequestPatternValidation), }), ).annotate({ identifier: "DlpEntriesCreateRequestPattern", }) as any as S.Schema; export interface CreateDlpEntryRequest { accountId: string; enabled: boolean; name: string; pattern: DlpEntriesCreateRequestPattern; description?: string; profileId?: string; } export const CreateDlpEntryRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), enabled: S.Boolean, name: S.String, pattern: DlpEntriesCreateRequestPattern, description: S.optional(S.String), profileId: S.optional(S.String.pipe(T.Body("profile_id"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/entries", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpEntryRequest", }) as any as S.Schema; export type DlpEntriesCreateResponsePatternValidation = "luhn"; export const DlpEntriesCreateResponsePatternValidation = /*@__PURE__*/ S.String; export interface DlpEntriesCreateResponsePattern { regex: string; validation?: DlpEntriesCreateResponsePatternValidation | null; } export const DlpEntriesCreateResponsePattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional(S.NullOr(DlpEntriesCreateResponsePatternValidation)), }), ).annotate({ identifier: "DlpEntriesCreateResponsePattern", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDlpEntryResponse { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpEntriesCreateResponsePattern; updatedAt: string; description?: string | null; profileId?: string | null; } export const CreateDlpEntryResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpEntriesCreateResponsePattern, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpEntryResponse", }) as any as S.Schema; export interface CreateDlpEntryIntegrationRequest { accountId: string; enabled: boolean; entryId: string; /** This field is not used as the owning profile. */ profileId?: string; } export const CreateDlpEntryIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), enabled: S.Boolean, entryId: S.String.pipe(T.Body("entry_id")), profileId: S.optional(S.String.pipe(T.Body("profile_id"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/entries/integration", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpEntryIntegrationRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDlpEntryIntegrationResponse { id: string; createdAt: string; enabled: boolean; name: string; updatedAt: string; profileId?: string | null; } export const CreateDlpEntryIntegrationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpEntryIntegrationResponse", }) as any as S.Schema; export interface CreateDlpEntryPredefinedRequest { accountId: string; enabled: boolean; entryId: string; /** This field is not used as the owning profile. */ profileId?: string; } export const CreateDlpEntryPredefinedRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), enabled: S.Boolean, entryId: S.String.pipe(T.Body("entry_id")), profileId: S.optional(S.String.pipe(T.Body("profile_id"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/entries/predefined", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpEntryPredefinedRequest", }) as any as S.Schema; export interface DlpEntriesPredefinedCreateResponseConfidence { /** Indicates whether this entry has AI remote service validation. */ aiContextAvailable: boolean; /** Indicates whether this entry has any form of validation that is not an AI remote service. */ available: boolean; } export const DlpEntriesPredefinedCreateResponseConfidence = /*@__PURE__*/ S.suspend(() => S.Struct({ aiContextAvailable: S.Boolean.pipe(T.Body("ai_context_available")), available: S.Boolean, }), ).annotate({ identifier: "DlpEntriesPredefinedCreateResponseConfidence", }) as any as S.Schema; export type DlpEntriesPredefinedCreateResponseVariantCase0TopicType = | "Intent" | "Content"; export const DlpEntriesPredefinedCreateResponseVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpEntriesPredefinedCreateResponseVariantCase0Type = "PromptTopic"; export const DlpEntriesPredefinedCreateResponseVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpEntriesPredefinedCreateResponseVariantCase0 { topicType: DlpEntriesPredefinedCreateResponseVariantCase0TopicType; type: DlpEntriesPredefinedCreateResponseVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpEntriesPredefinedCreateResponseVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpEntriesPredefinedCreateResponseVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpEntriesPredefinedCreateResponseVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEntriesPredefinedCreateResponseVariantCase0", }) as any as S.Schema; export type DlpEntriesPredefinedCreateResponseVariantCase1Type = "General"; export const DlpEntriesPredefinedCreateResponseVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpEntriesPredefinedCreateResponseVariantCase1 { type: DlpEntriesPredefinedCreateResponseVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpEntriesPredefinedCreateResponseVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpEntriesPredefinedCreateResponseVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEntriesPredefinedCreateResponseVariantCase1", }) as any as S.Schema; export type DlpEntriesPredefinedCreateResponseVariant = | DlpEntriesPredefinedCreateResponseVariantCase0 | DlpEntriesPredefinedCreateResponseVariantCase1; export const DlpEntriesPredefinedCreateResponseVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDlpEntryPredefinedResponse { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpEntriesPredefinedCreateResponseVariant | null; } export const CreateDlpEntryPredefinedResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional(S.NullOr(DlpEntriesPredefinedCreateResponseVariant)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpEntryPredefinedResponse", }) as any as S.Schema; export interface DlpProfilesCustomCreateRequestContextAwarenessSkip { /** If the content type is a file, skip context analysis and return all matches. */ files: boolean; } export const DlpProfilesCustomCreateRequestContextAwarenessSkip = /*@__PURE__*/ S.suspend(() => S.Struct({ files: S.Boolean, }), ).annotate({ identifier: "DlpProfilesCustomCreateRequestContextAwarenessSkip", }) as any as S.Schema; export interface DlpProfilesCustomCreateRequestContextAwareness { /** If true, scan the context of predefined entries to only return matches surrounded by keywords. */ enabled: boolean; /** Content types to exclude from context analysis and return all matches. */ skip: DlpProfilesCustomCreateRequestContextAwarenessSkip; } export const DlpProfilesCustomCreateRequestContextAwareness = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, skip: DlpProfilesCustomCreateRequestContextAwarenessSkip, }), ).annotate({ identifier: "DlpProfilesCustomCreateRequestContextAwareness", }) as any as S.Schema; export type DlpProfilesCustomCreateRequestDataClassesList = Array; export const DlpProfilesCustomCreateRequestDataClassesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesCustomCreateRequestDataTagsList = Array; export const DlpProfilesCustomCreateRequestDataTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesCustomCreateRequestEntriesItemDLPNewCustomEntryPatternValidation = "luhn"; export const DlpProfilesCustomCreateRequestEntriesItemDLPNewCustomEntryPatternValidation = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateRequestEntriesItemDLPNewCustomEntryPattern { regex: string; validation?: | DlpProfilesCustomCreateRequestEntriesItemDLPNewCustomEntryPatternValidation | (string & {}); } export const DlpProfilesCustomCreateRequestEntriesItemDLPNewCustomEntryPattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( DlpProfilesCustomCreateRequestEntriesItemDLPNewCustomEntryPatternValidation, ), }), ).annotate({ identifier: "DlpProfilesCustomCreateRequestEntriesItemDLPNewCustomEntryPattern", }) as any as S.Schema; export interface DlpProfilesCustomCreateRequestEntriesItemDLPNewCustomEntry { enabled: boolean; name: string; pattern: DlpProfilesCustomCreateRequestEntriesItemDLPNewCustomEntryPattern; description?: string | null; } export const DlpProfilesCustomCreateRequestEntriesItemDLPNewCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomCreateRequestEntriesItemDLPNewCustomEntryPattern, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateRequestEntriesItemDLPNewCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateRequestEntriesItemDLPNewWordListEntryWordsList = Array; export const DlpProfilesCustomCreateRequestEntriesItemDLPNewWordListEntryWordsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DlpProfilesCustomCreateRequestEntriesItemDLPNewWordListEntry { enabled: boolean; name: string; words: DlpProfilesCustomCreateRequestEntriesItemDLPNewWordListEntryWordsList; } export const DlpProfilesCustomCreateRequestEntriesItemDLPNewWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, name: S.String, words: DlpProfilesCustomCreateRequestEntriesItemDLPNewWordListEntryWordsList, }), ).annotate({ identifier: "DlpProfilesCustomCreateRequestEntriesItemDLPNewWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateRequestEntriesItem = | DlpProfilesCustomCreateRequestEntriesItemDLPNewCustomEntry | DlpProfilesCustomCreateRequestEntriesItemDLPNewWordListEntry; export const DlpProfilesCustomCreateRequestEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["enabled", "name", "pattern", "description"], ["enabled", "name", "words"], ]), ); export type DlpProfilesCustomCreateRequestEntriesList = Array; export const DlpProfilesCustomCreateRequestEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomCreateRequestEntriesItem, ) as any as S.Schema; export type DlpProfilesCustomCreateRequestSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export const DlpProfilesCustomCreateRequestSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export type DlpProfilesCustomCreateRequestSensitivityLevelsList = Array; export const DlpProfilesCustomCreateRequestSensitivityLevelsList = /*@__PURE__*/ S.Array( DlpDataClassesCreateRequestSensitivityLevelsItem, ) as any as S.Schema; export interface DlpProfilesCustomCreateRequestSharedEntriesItem { enabled: boolean; entryId: string; } export const DlpProfilesCustomCreateRequestSharedEntriesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, entryId: S.String.pipe(T.Body("entry_id")), }), ).annotate({ identifier: "DlpProfilesCustomCreateRequestSharedEntriesItem", }) as any as S.Schema; export type DlpProfilesCustomCreateRequestSharedEntriesList = Array; export const DlpProfilesCustomCreateRequestSharedEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomCreateRequestSharedEntriesItem, ) as any as S.Schema; export interface CreateDlpProfileCustomRequest { accountId: string; name: string; aiContextEnabled?: boolean; /** Related DLP policies will trigger when the match count exceeds the number set. */ allowedMatchCount?: number; confidenceThreshold?: string; /** Scan the context of predefined entries to only return matches surrounded by keywords. */ contextAwareness?: DlpProfilesCustomCreateRequestContextAwareness; /** Data class IDs to associate with the profile. */ dataClasses?: DlpProfilesCustomCreateRequestDataClassesList; /** Data tag IDs to associate with the profile. */ dataTags?: DlpProfilesCustomCreateRequestDataTagsList; /** The description of the profile. */ description?: string | null; entries?: DlpProfilesCustomCreateRequestEntriesList; ocrEnabled?: boolean; /** Sensitivity levels to associate with the profile. */ sensitivityLevels?: DlpProfilesCustomCreateRequestSensitivityLevelsList; /** Entries from other profiles (e.g. pre-defined Cloudflare profiles, or your Microsoft Information Protection profiles). */ sharedEntries?: DlpProfilesCustomCreateRequestSharedEntriesList; } export const CreateDlpProfileCustomRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.String, aiContextEnabled: S.optional(S.Boolean.pipe(T.Body("ai_context_enabled"))), allowedMatchCount: S.optional(S.Number.pipe(T.Body("allowed_match_count"))), confidenceThreshold: S.optional( S.String.pipe(T.Body("confidence_threshold")), ), contextAwareness: S.optional( DlpProfilesCustomCreateRequestContextAwareness.pipe( T.Body("context_awareness"), ), ), dataClasses: S.optional( DlpProfilesCustomCreateRequestDataClassesList.pipe( T.Body("data_classes"), ), ), dataTags: S.optional( DlpProfilesCustomCreateRequestDataTagsList.pipe(T.Body("data_tags")), ), description: S.optional(S.NullOr(S.String)), entries: S.optional(DlpProfilesCustomCreateRequestEntriesList), ocrEnabled: S.optional(S.Boolean.pipe(T.Body("ocr_enabled"))), sensitivityLevels: S.optional( DlpProfilesCustomCreateRequestSensitivityLevelsList.pipe( T.Body("sensitivity_levels"), ), ), sharedEntries: S.optional( DlpProfilesCustomCreateRequestSharedEntriesList.pipe( T.Body("shared_entries"), ), ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/profiles/custom", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpProfileCustomRequest", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileType = "custom"; export const DlpProfilesCustomCreateResultCustomProfileType = /*@__PURE__*/ S.String; export type DlpProfilesCustomCreateResultCustomProfileConfidenceThreshold = | "low" | "medium" | "high" | "very_high"; export const DlpProfilesCustomCreateResultCustomProfileConfidenceThreshold = /*@__PURE__*/ S.String; export type DlpProfilesCustomCreateResultCustomProfileContextAwarenessSkip = DlpProfilesCustomCreateRequestContextAwarenessSkip; export const DlpProfilesCustomCreateResultCustomProfileContextAwarenessSkip = DlpProfilesCustomCreateRequestContextAwarenessSkip; export type DlpProfilesCustomCreateResultCustomProfileContextAwareness = DlpProfilesCustomCreateRequestContextAwareness; export const DlpProfilesCustomCreateResultCustomProfileContextAwareness = DlpProfilesCustomCreateRequestContextAwareness; export type DlpProfilesCustomCreateResultCustomProfileDataClassesList = Array; export const DlpProfilesCustomCreateResultCustomProfileDataClassesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileDataTagsList = Array; export const DlpProfilesCustomCreateResultCustomProfileDataTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPatternValidation = "luhn"; export const DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPatternValidation = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPattern { regex: string; validation?: DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPatternValidation | null; } export const DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( S.NullOr( DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPatternValidation, ), ), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPattern", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryType = "custom"; export const DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariant = | DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase0 | DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesCustomCreateResultCustomProfileEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultCustomProfileEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultCustomProfileEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesCustomCreateResultCustomProfileEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesCustomCreateResultCustomProfileEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesCustomCreateResultCustomProfileEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesCustomCreateResultCustomProfileEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultCustomProfileEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultCustomProfileEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileEntriesItemWordListEntryType = "word_list"; export const DlpProfilesCustomCreateResultCustomProfileEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultCustomProfileEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultCustomProfileEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileEntriesItem = | DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntry | DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomPromptTopicEntry | DlpProfilesCustomCreateResultCustomProfileEntriesItemPredefinedEntry | DlpProfilesCustomCreateResultCustomProfileEntriesItemIntegrationEntry | DlpProfilesCustomCreateResultCustomProfileEntriesItemExactDataEntry | DlpProfilesCustomCreateResultCustomProfileEntriesItemDocumentFingerprintEntry | DlpProfilesCustomCreateResultCustomProfileEntriesItemWordListEntry; export const DlpProfilesCustomCreateResultCustomProfileEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesCustomCreateResultCustomProfileEntriesList = Array; export const DlpProfilesCustomCreateResultCustomProfileEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomCreateResultCustomProfileEntriesItem, ) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export const DlpProfilesCustomCreateResultCustomProfileSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export type DlpProfilesCustomCreateResultCustomProfileSensitivityLevelsList = Array; export const DlpProfilesCustomCreateResultCustomProfileSensitivityLevelsList = /*@__PURE__*/ S.Array( DlpDataClassesCreateRequestSensitivityLevelsItem, ) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomEntryType = "custom"; export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariant = | DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0 | DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemWordListEntryType = "word_list"; export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultCustomProfileSharedEntriesItem = | DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomEntry | DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemCustomPromptTopicEntry | DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemPredefinedEntry | DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemIntegrationEntry | DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemExactDataEntry | DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemDocumentFingerprintEntry | DlpProfilesCustomCreateResultCustomProfileSharedEntriesItemWordListEntry; export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesCustomCreateResultCustomProfileSharedEntriesList = Array; export const DlpProfilesCustomCreateResultCustomProfileSharedEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomCreateResultCustomProfileSharedEntriesItem, ) as any as S.Schema; export interface DlpProfilesCustomCreateResultCustomProfile { /** The id of the profile (uuid). */ id: string; /** Related DLP policies will trigger when the match count exceeds the number set. */ allowedMatchCount: number; /** When the profile was created. */ createdAt: string; /** The name of the profile. */ name: string; ocrEnabled: boolean; type: DlpProfilesCustomCreateResultCustomProfileType; /** When the profile was lasted updated. */ updatedAt: string; aiContextEnabled?: boolean | null; confidenceThreshold?: DlpProfilesCustomCreateResultCustomProfileConfidenceThreshold | null; /** Scan the context of predefined entries to only return matches surrounded by keywords. */ contextAwareness?: DlpProfilesCustomCreateRequestContextAwareness | null; /** Data classes associated with this profile. */ dataClasses?: DlpProfilesCustomCreateResultCustomProfileDataClassesList | null; /** Data tags associated with this profile. */ dataTags?: DlpProfilesCustomCreateResultCustomProfileDataTagsList | null; /** The description of the profile. */ description?: string | null; entries?: DlpProfilesCustomCreateResultCustomProfileEntriesList | null; /** Sensitivity levels associated with this profile. */ sensitivityLevels?: DlpProfilesCustomCreateResultCustomProfileSensitivityLevelsList | null; sharedEntries?: DlpProfilesCustomCreateResultCustomProfileSharedEntriesList | null; } export const DlpProfilesCustomCreateResultCustomProfile = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, allowedMatchCount: S.Number.pipe(T.Body("allowed_match_count")), createdAt: S.String.pipe(T.Body("created_at")), name: S.String, ocrEnabled: S.Boolean.pipe(T.Body("ocr_enabled")), type: DlpProfilesCustomCreateResultCustomProfileType, updatedAt: S.String.pipe(T.Body("updated_at")), aiContextEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ai_context_enabled")), ), confidenceThreshold: S.optional( S.NullOr( DlpProfilesCustomCreateResultCustomProfileConfidenceThreshold, ).pipe(T.Body("confidence_threshold")), ), contextAwareness: S.optional( S.NullOr(DlpProfilesCustomCreateRequestContextAwareness).pipe( T.Body("context_awareness"), ), ), dataClasses: S.optional( S.NullOr( DlpProfilesCustomCreateResultCustomProfileDataClassesList, ).pipe(T.Body("data_classes")), ), dataTags: S.optional( S.NullOr(DlpProfilesCustomCreateResultCustomProfileDataTagsList).pipe( T.Body("data_tags"), ), ), description: S.optional(S.NullOr(S.String)), entries: S.optional( S.NullOr(DlpProfilesCustomCreateResultCustomProfileEntriesList), ), sensitivityLevels: S.optional( S.NullOr( DlpProfilesCustomCreateResultCustomProfileSensitivityLevelsList, ).pipe(T.Body("sensitivity_levels")), ), sharedEntries: S.optional( S.NullOr( DlpProfilesCustomCreateResultCustomProfileSharedEntriesList, ).pipe(T.Body("shared_entries")), ), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultCustomProfile", }) as any as S.Schema; export type DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomEntryType = "custom"; export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariant = | DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0 | DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultPredefinedProfileEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultPredefinedProfileEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultPredefinedProfileEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultPredefinedProfileEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultPredefinedProfileEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultPredefinedProfileEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultPredefinedProfileEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultPredefinedProfileEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultPredefinedProfileEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultPredefinedProfileEntriesItemWordListEntryType = "word_list"; export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultPredefinedProfileEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultPredefinedProfileEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultPredefinedProfileEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultPredefinedProfileEntriesItem = | DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomEntry | DlpProfilesCustomCreateResultPredefinedProfileEntriesItemCustomPromptTopicEntry | DlpProfilesCustomCreateResultPredefinedProfileEntriesItemPredefinedEntry | DlpProfilesCustomCreateResultPredefinedProfileEntriesItemIntegrationEntry | DlpProfilesCustomCreateResultPredefinedProfileEntriesItemExactDataEntry | DlpProfilesCustomCreateResultPredefinedProfileEntriesItemDocumentFingerprintEntry | DlpProfilesCustomCreateResultPredefinedProfileEntriesItemWordListEntry; export const DlpProfilesCustomCreateResultPredefinedProfileEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesCustomCreateResultPredefinedProfileEntriesList = Array; export const DlpProfilesCustomCreateResultPredefinedProfileEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomCreateResultPredefinedProfileEntriesItem, ) as any as S.Schema; export type DlpProfilesCustomCreateResultPredefinedProfileType = "predefined"; export const DlpProfilesCustomCreateResultPredefinedProfileType = /*@__PURE__*/ S.String; export type DlpProfilesCustomCreateResultPredefinedProfileConfidenceThreshold = | "low" | "medium" | "high" | "very_high"; export const DlpProfilesCustomCreateResultPredefinedProfileConfidenceThreshold = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultPredefinedProfile { /** The id of the predefined profile (uuid). */ id: string; allowedMatchCount: number; entries: DlpProfilesCustomCreateResultPredefinedProfileEntriesList; /** The name of the predefined profile. */ name: string; type: DlpProfilesCustomCreateResultPredefinedProfileType; aiContextEnabled?: boolean | null; confidenceThreshold?: DlpProfilesCustomCreateResultPredefinedProfileConfidenceThreshold | null; /** Scan the context of predefined entries to only return matches surrounded by keywords. */ contextAwareness?: DlpProfilesCustomCreateRequestContextAwareness | null; ocrEnabled?: boolean | null; /** Whether this profile can be accessed by anyone. */ openAccess?: boolean | null; } export const DlpProfilesCustomCreateResultPredefinedProfile = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, allowedMatchCount: S.Number.pipe(T.Body("allowed_match_count")), entries: DlpProfilesCustomCreateResultPredefinedProfileEntriesList, name: S.String, type: DlpProfilesCustomCreateResultPredefinedProfileType, aiContextEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ai_context_enabled")), ), confidenceThreshold: S.optional( S.NullOr( DlpProfilesCustomCreateResultPredefinedProfileConfidenceThreshold, ).pipe(T.Body("confidence_threshold")), ), contextAwareness: S.optional( S.NullOr(DlpProfilesCustomCreateRequestContextAwareness).pipe( T.Body("context_awareness"), ), ), ocrEnabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("ocr_enabled"))), openAccess: S.optional(S.NullOr(S.Boolean).pipe(T.Body("open_access"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultPredefinedProfile", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomEntryType = "custom"; export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariant = | DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0 | DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileEntriesItemWordListEntryType = "word_list"; export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultIntegrationProfileEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileEntriesItem = | DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomEntry | DlpProfilesCustomCreateResultIntegrationProfileEntriesItemCustomPromptTopicEntry | DlpProfilesCustomCreateResultIntegrationProfileEntriesItemPredefinedEntry | DlpProfilesCustomCreateResultIntegrationProfileEntriesItemIntegrationEntry | DlpProfilesCustomCreateResultIntegrationProfileEntriesItemExactDataEntry | DlpProfilesCustomCreateResultIntegrationProfileEntriesItemDocumentFingerprintEntry | DlpProfilesCustomCreateResultIntegrationProfileEntriesItemWordListEntry; export const DlpProfilesCustomCreateResultIntegrationProfileEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesCustomCreateResultIntegrationProfileEntriesList = Array; export const DlpProfilesCustomCreateResultIntegrationProfileEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomCreateResultIntegrationProfileEntriesItem, ) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomEntryType = "custom"; export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomCreateResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant = | DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0 | DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemWordListEntryType = "word_list"; export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItem = | DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomEntry | DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry | DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemPredefinedEntry | DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemIntegrationEntry | DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemExactDataEntry | DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry | DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItemWordListEntry; export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesList = Array; export const DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesItem, ) as any as S.Schema; export type DlpProfilesCustomCreateResultIntegrationProfileType = "integration"; export const DlpProfilesCustomCreateResultIntegrationProfileType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomCreateResultIntegrationProfile { id: string; createdAt: string; entries: DlpProfilesCustomCreateResultIntegrationProfileEntriesList; name: string; sharedEntries: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesList; type: DlpProfilesCustomCreateResultIntegrationProfileType; updatedAt: string; /** The description of the profile. */ description?: string | null; } export const DlpProfilesCustomCreateResultIntegrationProfile = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), entries: DlpProfilesCustomCreateResultIntegrationProfileEntriesList, name: S.String, sharedEntries: DlpProfilesCustomCreateResultIntegrationProfileSharedEntriesList.pipe( T.Body("shared_entries"), ), type: DlpProfilesCustomCreateResultIntegrationProfileType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomCreateResultIntegrationProfile", }) as any as S.Schema; export type DlpProfilesCustomCreateResult = | DlpProfilesCustomCreateResultCustomProfile | DlpProfilesCustomCreateResultPredefinedProfile | DlpProfilesCustomCreateResultIntegrationProfile; export const DlpProfilesCustomCreateResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "allowedMatchCount", "createdAt", "name", "ocrEnabled", "type", "updatedAt", "aiContextEnabled", "confidenceThreshold", "contextAwareness", "dataClasses", "dataTags", "description", "entries", "sensitivityLevels", "sharedEntries", ], [ "id", "allowedMatchCount", "entries", "name", "type", "aiContextEnabled", "confidenceThreshold", "contextAwareness", "ocrEnabled", "openAccess", ], [ "id", "createdAt", "entries", "name", "sharedEntries", "type", "updatedAt", "description", ], ]), ); export type CreateDlpProfileCustomResponse = DlpProfilesCustomCreateResult; export const CreateDlpProfileCustomResponse = /*@__PURE__*/ S.suspend(() => DlpProfilesCustomCreateResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "CreateDlpProfileCustomResponse", }) as any as S.Schema; export type DlpSensitivityGroupsCreateRequestLevelsItem = DlpDataTagCategoriesCreateRequestTagsItem; export const DlpSensitivityGroupsCreateRequestLevelsItem = DlpDataTagCategoriesCreateRequestTagsItem; export type DlpSensitivityGroupsCreateRequestLevelsList = Array; export const DlpSensitivityGroupsCreateRequestLevelsList = /*@__PURE__*/ S.Array( DlpDataTagCategoriesCreateRequestTagsItem, ) as any as S.Schema; export interface CreateDlpSensitivityGroupRequest { accountId: string; name: string; description?: string; /** Levels to create with the group. Mutually exclusive with `template_id`. */ levels?: DlpSensitivityGroupsCreateRequestLevelsList; templateId?: string; } export const CreateDlpSensitivityGroupRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.String, description: S.optional(S.String), levels: S.optional(DlpSensitivityGroupsCreateRequestLevelsList), templateId: S.optional(S.String.pipe(T.Body("template_id"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/sensitivity_groups", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpSensitivityGroupRequest", }) as any as S.Schema; export type DlpSensitivityGroupsCreateResponseLevelsItem = DlpDataTagCategoriesCreateResponseTagsItem; export const DlpSensitivityGroupsCreateResponseLevelsItem = DlpDataTagCategoriesCreateResponseTagsItem; export type DlpSensitivityGroupsCreateResponseLevelsList = Array; export const DlpSensitivityGroupsCreateResponseLevelsList = /*@__PURE__*/ S.Array( DlpDataTagCategoriesCreateResponseTagsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDlpSensitivityGroupResponse { id: string; createdAt: string; levels: DlpSensitivityGroupsCreateResponseLevelsList; name: string; updatedAt: string; description?: string | null; templateId?: string | null; } export const CreateDlpSensitivityGroupResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), levels: DlpSensitivityGroupsCreateResponseLevelsList, name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), templateId: S.optional(S.NullOr(S.String).pipe(T.Body("template_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpSensitivityGroupResponse", }) as any as S.Schema; export interface CreateDlpSensitivityGroupLevelRequest { accountId: string; sensitivityGroupId: string; name: string; description?: string; } export const CreateDlpSensitivityGroupLevelRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), sensitivityGroupId: S.String.pipe(T.Label("sensitivity_group_id")), name: S.String, description: S.optional(S.String), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}/levels", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpSensitivityGroupLevelRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateDlpSensitivityGroupLevelResponse { id: string; createdAt: string; name: string; updatedAt: string; description?: string | null; } export const CreateDlpSensitivityGroupLevelResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateDlpSensitivityGroupLevelResponse", }) as any as S.Schema; export interface CreateGatewayRequest { accountId: string; } export const CreateGatewayRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/gateway", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateGatewayRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateGatewayResponse { /** Specify the Cloudflare account ID. */ id?: string | null; /** Specify the gateway internal ID. */ gatewayTag?: string | null; /** Specify the provider name (usually Cloudflare). */ providerName?: string | null; } export const CreateGatewayResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), gatewayTag: S.optional(S.NullOr(S.String).pipe(T.Body("gateway_tag"))), providerName: S.optional(S.NullOr(S.String).pipe(T.Body("provider_name"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateGatewayResponse", }) as any as S.Schema; export interface CreateGatewayCertificateRequest { accountId: string; /** Sets the certificate validity period in days (range: 1-10,950 days / ~30 years). Defaults to 1,825 days (5 years). **Important**: This field is only settable during the certificate creation. Certificates becomes immutable after creation - use the `/activate` and `/deactivate` endpoints to manage certificate lifecycle. */ validityPeriodDays?: number; } export const CreateGatewayCertificateRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), validityPeriodDays: S.optional( S.Number.pipe(T.Body("validity_period_days")), ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/gateway/certificates", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateGatewayCertificateRequest", }) as any as S.Schema; export type GatewayCertificatesCreateResponseBindingStatus = | "pending_deployment" | "available" | "pending_deletion" | "inactive"; export const GatewayCertificatesCreateResponseBindingStatus = /*@__PURE__*/ S.String; export type GatewayCertificatesCreateResponseType = | "custom" | "gateway_managed"; export const GatewayCertificatesCreateResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateGatewayCertificateResponse { /** Identify the certificate with a UUID. */ id?: string | null; /** Indicate the read-only deployment status of the certificate on Cloudflare's edge. Gateway TLS interception can use certificates in the 'available' (previously called 'active') state. */ bindingStatus?: GatewayCertificatesCreateResponseBindingStatus | null; /** Provide the CA certificate (read-only). */ certificate?: string | null; createdAt?: string | null; expiresOn?: string | null; /** Provide the SHA256 fingerprint of the certificate (read-only). */ fingerprint?: string | null; /** Indicate whether Gateway TLS interception uses this certificate (read-only). You cannot set this value directly. To configure interception, use the Gateway configuration setting named `certificate` (read-only). */ inUse?: boolean | null; /** Indicate the organization that issued the certificate (read-only). */ issuerOrg?: string | null; /** Provide the entire issuer field of the certificate (read-only). */ issuerRaw?: string | null; /** Indicate the read-only certificate type, BYO-PKI (custom) or Gateway-managed. */ type?: GatewayCertificatesCreateResponseType | null; updatedAt?: string | null; uploadedOn?: string | null; } export const CreateGatewayCertificateResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), bindingStatus: S.optional( S.NullOr(GatewayCertificatesCreateResponseBindingStatus).pipe( T.Body("binding_status"), ), ), certificate: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), expiresOn: S.optional(S.NullOr(S.String).pipe(T.Body("expires_on"))), fingerprint: S.optional(S.NullOr(S.String)), inUse: S.optional(S.NullOr(S.Boolean).pipe(T.Body("in_use"))), issuerOrg: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_org"))), issuerRaw: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_raw"))), type: S.optional(S.NullOr(GatewayCertificatesCreateResponseType)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), uploadedOn: S.optional(S.NullOr(S.String).pipe(T.Body("uploaded_on"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateGatewayCertificateResponse", }) as any as S.Schema; export type GatewayListsCreateRequestType = | "SERIAL" | "URL" | "DOMAIN" | "EMAIL" | "IP" | "CATEGORY" | "LOCATION" | "DEVICE" | "AAGUID"; export const GatewayListsCreateRequestType = /*@__PURE__*/ S.String; export interface GatewayListsCreateRequestItemsItem { /** Provide the list item description (optional). */ description?: string; /** Specify the item value. */ value?: string; } export const GatewayListsCreateRequestItemsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ description: S.optional(S.String), value: S.optional(S.String), }), ).annotate({ identifier: "GatewayListsCreateRequestItemsItem", }) as any as S.Schema; export type GatewayListsCreateRequestItemsList = Array; export const GatewayListsCreateRequestItemsList = /*@__PURE__*/ S.Array( GatewayListsCreateRequestItemsItem, ) as any as S.Schema; export interface CreateGatewayListRequest { accountId: string; /** Specify the list name. */ name: string; /** Specify the list type. */ type: GatewayListsCreateRequestType | (string & {}); /** Provide the list description. */ description?: string; /** Add items to the list. */ items?: GatewayListsCreateRequestItemsList; } export const CreateGatewayListRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.String, type: GatewayListsCreateRequestType, description: S.optional(S.String), items: S.optional(GatewayListsCreateRequestItemsList), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/gateway/lists", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateGatewayListRequest", }) as any as S.Schema; export interface GatewayListsCreateResponseItemsItem { createdAt?: string | null; /** Provide the list item description (optional). */ description?: string | null; /** Specify the item value. */ value?: string | null; } export const GatewayListsCreateResponseItemsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), description: S.optional(S.NullOr(S.String)), value: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "GatewayListsCreateResponseItemsItem", }) as any as S.Schema; export type GatewayListsCreateResponseItemsList = Array; export const GatewayListsCreateResponseItemsList = /*@__PURE__*/ S.Array( GatewayListsCreateResponseItemsItem, ) as any as S.Schema; export type GatewayListsCreateResponseType = | "SERIAL" | "URL" | "DOMAIN" | "EMAIL" | "IP" | "CATEGORY" | "LOCATION" | "DEVICE" | "AAGUID"; export const GatewayListsCreateResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateGatewayListResponse { /** Identify the API resource with a UUID. */ id?: string | null; createdAt?: string | null; /** Provide the list description. */ description?: string | null; /** Provide the list items. */ items?: GatewayListsCreateResponseItemsList | null; /** Specify the list name. */ name?: string | null; /** Specify the list type. */ type?: GatewayListsCreateResponseType | null; updatedAt?: string | null; } export const CreateGatewayListResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), description: S.optional(S.NullOr(S.String)), items: S.optional(S.NullOr(GatewayListsCreateResponseItemsList)), name: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(GatewayListsCreateResponseType)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateGatewayListResponse", }) as any as S.Schema; export interface GatewayLocationsCreateRequestEndpointsDohNetworksItem { /** Specify the IP address or IP CIDR. */ network: string; } export const GatewayLocationsCreateRequestEndpointsDohNetworksItem = /*@__PURE__*/ S.suspend(() => S.Struct({ network: S.String, }), ).annotate({ identifier: "GatewayLocationsCreateRequestEndpointsDohNetworksItem", }) as any as S.Schema; export type GatewayLocationsCreateRequestEndpointsDohNetworksList = Array; export const GatewayLocationsCreateRequestEndpointsDohNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsDohNetworksItem, ) as any as S.Schema; export interface GatewayLocationsCreateRequestEndpointsDoh { /** Indicate whether the DOH endpoint is enabled for this location. */ enabled?: boolean; /** Specify the list of allowed source IP network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsCreateRequestEndpointsDohNetworksList; /** Specify whether the DOH endpoint requires user identity authentication. */ requireToken?: boolean; } export const GatewayLocationsCreateRequestEndpointsDoh = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), networks: S.optional( GatewayLocationsCreateRequestEndpointsDohNetworksList, ), requireToken: S.optional(S.Boolean.pipe(T.Body("require_token"))), }), ).annotate({ identifier: "GatewayLocationsCreateRequestEndpointsDoh", }) as any as S.Schema; export type GatewayLocationsCreateRequestEndpointsDotNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export const GatewayLocationsCreateRequestEndpointsDotNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export type GatewayLocationsCreateRequestEndpointsDotNetworksList = Array; export const GatewayLocationsCreateRequestEndpointsDotNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsDohNetworksItem, ) as any as S.Schema; export interface GatewayLocationsCreateRequestEndpointsDot { /** Indicate whether the DOT endpoint is enabled for this location. */ enabled?: boolean; /** Specify the list of allowed source IP network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsCreateRequestEndpointsDotNetworksList; } export const GatewayLocationsCreateRequestEndpointsDot = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), networks: S.optional( GatewayLocationsCreateRequestEndpointsDotNetworksList, ), }), ).annotate({ identifier: "GatewayLocationsCreateRequestEndpointsDot", }) as any as S.Schema; export interface GatewayLocationsCreateRequestEndpointsIpv4 { /** Indicate whether the IPv4 endpoint is enabled for this location. */ enabled?: boolean; } export const GatewayLocationsCreateRequestEndpointsIpv4 = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), }), ).annotate({ identifier: "GatewayLocationsCreateRequestEndpointsIpv4", }) as any as S.Schema; export interface GatewayLocationsCreateRequestEndpointsIpv6NetworksItem { /** Specify the IPv6 address or IPv6 CIDR. */ network: string; } export const GatewayLocationsCreateRequestEndpointsIpv6NetworksItem = /*@__PURE__*/ S.suspend(() => S.Struct({ network: S.String, }), ).annotate({ identifier: "GatewayLocationsCreateRequestEndpointsIpv6NetworksItem", }) as any as S.Schema; export type GatewayLocationsCreateRequestEndpointsIpv6NetworksList = Array; export const GatewayLocationsCreateRequestEndpointsIpv6NetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsIpv6NetworksItem, ) as any as S.Schema; export interface GatewayLocationsCreateRequestEndpointsIpv6 { /** Indicate whether the IPV6 endpoint is enabled for this location. */ enabled?: boolean; /** Specify the list of allowed source IPv6 network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsCreateRequestEndpointsIpv6NetworksList; } export const GatewayLocationsCreateRequestEndpointsIpv6 = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), networks: S.optional( GatewayLocationsCreateRequestEndpointsIpv6NetworksList, ), }), ).annotate({ identifier: "GatewayLocationsCreateRequestEndpointsIpv6", }) as any as S.Schema; export interface GatewayLocationsCreateRequestEndpoints { doh: GatewayLocationsCreateRequestEndpointsDoh; dot: GatewayLocationsCreateRequestEndpointsDot; ipv4: GatewayLocationsCreateRequestEndpointsIpv4; ipv6: GatewayLocationsCreateRequestEndpointsIpv6; } export const GatewayLocationsCreateRequestEndpoints = /*@__PURE__*/ S.suspend( () => S.Struct({ doh: GatewayLocationsCreateRequestEndpointsDoh, dot: GatewayLocationsCreateRequestEndpointsDot, ipv4: GatewayLocationsCreateRequestEndpointsIpv4, ipv6: GatewayLocationsCreateRequestEndpointsIpv6, }), ).annotate({ identifier: "GatewayLocationsCreateRequestEndpoints", }) as any as S.Schema; export type GatewayLocationsCreateRequestMaxTtlMode = | "inherit" | "override" | "disabled"; export const GatewayLocationsCreateRequestMaxTtlMode = /*@__PURE__*/ S.String; export interface GatewayLocationsCreateRequestMaxTtl { /** `inherit` uses the account `max_ttl_secs`. `override` uses this location's `ttl_secs`. `disabled` leaves returned TTLs unchanged. */ mode: GatewayLocationsCreateRequestMaxTtlMode | (string & {}); /** Location-specific cap on DNS response TTLs, in seconds. Required when `mode` is `override`. Must be omitted when `mode` is `inherit` or `disabled`. */ ttlSecs?: number; } export const GatewayLocationsCreateRequestMaxTtl = /*@__PURE__*/ S.suspend(() => S.Struct({ mode: GatewayLocationsCreateRequestMaxTtlMode, ttlSecs: S.optional(S.Number.pipe(T.Body("ttl_secs"))), }), ).annotate({ identifier: "GatewayLocationsCreateRequestMaxTtl", }) as any as S.Schema; export interface GatewayLocationsCreateRequestNetworksItem { /** Specify the IPv4 address or IPv4 CIDR. Limit IPv4 CIDRs to a maximum of /24. */ network: string; } export const GatewayLocationsCreateRequestNetworksItem = /*@__PURE__*/ S.suspend(() => S.Struct({ network: S.String, }), ).annotate({ identifier: "GatewayLocationsCreateRequestNetworksItem", }) as any as S.Schema; export type GatewayLocationsCreateRequestNetworksList = Array; export const GatewayLocationsCreateRequestNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestNetworksItem, ) as any as S.Schema; export interface CreateGatewayLocationRequest { accountId: string; /** Specify the location name. */ name: string; /** Indicate whether this location is the default location. */ clientDefault?: boolean; /** Specify the identifier of the pair of IPv4 addresses assigned to this location. When creating a location, if this field is absent or set to null, the pair of shared IPv4 addresses (0e4a32c6-6fb8-4858-9296-98f51631e8e6) is auto-assigned. When updating a location, if this field is absent or set to null, the pre-assigned pair remains unchanged. */ dnsDestinationIpsId?: string; /** Indicate whether the location must resolve EDNS queries. */ ecsSupport?: boolean; /** Configure the destination endpoints for this location. */ endpoints?: GatewayLocationsCreateRequestEndpoints; /** Controls how DNS response TTLs are capped for this location relative to the account `max_ttl_secs` setting. Omitting `max_ttl` on update resets it to `inherit`. */ maxTtl?: GatewayLocationsCreateRequestMaxTtl; /** Specify the list of network ranges from which requests at this location originate. The list takes effect only if it is non-empty and the IPv4 endpoint is enabled for this location. */ networks?: GatewayLocationsCreateRequestNetworksList; } export const CreateGatewayLocationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.String, clientDefault: S.optional(S.Boolean.pipe(T.Body("client_default"))), dnsDestinationIpsId: S.optional( S.String.pipe(T.Body("dns_destination_ips_id")), ), ecsSupport: S.optional(S.Boolean.pipe(T.Body("ecs_support"))), endpoints: S.optional(GatewayLocationsCreateRequestEndpoints), maxTtl: S.optional( GatewayLocationsCreateRequestMaxTtl.pipe(T.Body("max_ttl")), ), networks: S.optional(GatewayLocationsCreateRequestNetworksList), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/gateway/locations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateGatewayLocationRequest", }) as any as S.Schema; export type GatewayLocationsCreateResponseEndpointsDohNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export const GatewayLocationsCreateResponseEndpointsDohNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export type GatewayLocationsCreateResponseEndpointsDohNetworksList = Array; export const GatewayLocationsCreateResponseEndpointsDohNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsDohNetworksItem, ) as any as S.Schema; export interface GatewayLocationsCreateResponseEndpointsDoh { /** Indicate whether the DOH endpoint is enabled for this location. */ enabled?: boolean | null; /** Specify the list of allowed source IP network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsCreateResponseEndpointsDohNetworksList | null; /** Specify whether the DOH endpoint requires user identity authentication. */ requireToken?: boolean | null; } export const GatewayLocationsCreateResponseEndpointsDoh = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), networks: S.optional( S.NullOr(GatewayLocationsCreateResponseEndpointsDohNetworksList), ), requireToken: S.optional( S.NullOr(S.Boolean).pipe(T.Body("require_token")), ), }), ).annotate({ identifier: "GatewayLocationsCreateResponseEndpointsDoh", }) as any as S.Schema; export type GatewayLocationsCreateResponseEndpointsDotNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export const GatewayLocationsCreateResponseEndpointsDotNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export type GatewayLocationsCreateResponseEndpointsDotNetworksList = Array; export const GatewayLocationsCreateResponseEndpointsDotNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsDohNetworksItem, ) as any as S.Schema; export interface GatewayLocationsCreateResponseEndpointsDot { /** Indicate whether the DOT endpoint is enabled for this location. */ enabled?: boolean | null; /** Specify the list of allowed source IP network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsCreateResponseEndpointsDotNetworksList | null; } export const GatewayLocationsCreateResponseEndpointsDot = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), networks: S.optional( S.NullOr(GatewayLocationsCreateResponseEndpointsDotNetworksList), ), }), ).annotate({ identifier: "GatewayLocationsCreateResponseEndpointsDot", }) as any as S.Schema; export interface GatewayLocationsCreateResponseEndpointsIpv4 { /** Indicate whether the IPv4 endpoint is enabled for this location. */ enabled?: boolean | null; } export const GatewayLocationsCreateResponseEndpointsIpv4 = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "GatewayLocationsCreateResponseEndpointsIpv4", }) as any as S.Schema; export type GatewayLocationsCreateResponseEndpointsIpv6NetworksItem = GatewayLocationsCreateRequestEndpointsIpv6NetworksItem; export const GatewayLocationsCreateResponseEndpointsIpv6NetworksItem = GatewayLocationsCreateRequestEndpointsIpv6NetworksItem; export type GatewayLocationsCreateResponseEndpointsIpv6NetworksList = Array; export const GatewayLocationsCreateResponseEndpointsIpv6NetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsIpv6NetworksItem, ) as any as S.Schema; export interface GatewayLocationsCreateResponseEndpointsIpv6 { /** Indicate whether the IPV6 endpoint is enabled for this location. */ enabled?: boolean | null; /** Specify the list of allowed source IPv6 network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsCreateResponseEndpointsIpv6NetworksList | null; } export const GatewayLocationsCreateResponseEndpointsIpv6 = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), networks: S.optional( S.NullOr(GatewayLocationsCreateResponseEndpointsIpv6NetworksList), ), }), ).annotate({ identifier: "GatewayLocationsCreateResponseEndpointsIpv6", }) as any as S.Schema; export interface GatewayLocationsCreateResponseEndpoints { doh: GatewayLocationsCreateResponseEndpointsDoh; dot: GatewayLocationsCreateResponseEndpointsDot; ipv4: GatewayLocationsCreateResponseEndpointsIpv4; ipv6: GatewayLocationsCreateResponseEndpointsIpv6; } export const GatewayLocationsCreateResponseEndpoints = /*@__PURE__*/ S.suspend( () => S.Struct({ doh: GatewayLocationsCreateResponseEndpointsDoh, dot: GatewayLocationsCreateResponseEndpointsDot, ipv4: GatewayLocationsCreateResponseEndpointsIpv4, ipv6: GatewayLocationsCreateResponseEndpointsIpv6, }), ).annotate({ identifier: "GatewayLocationsCreateResponseEndpoints", }) as any as S.Schema; export type GatewayLocationsCreateResponseMaxTtlMode = | "inherit" | "override" | "disabled"; export const GatewayLocationsCreateResponseMaxTtlMode = /*@__PURE__*/ S.String; export interface GatewayLocationsCreateResponseMaxTtl { /** `inherit` uses the account `max_ttl_secs`. `override` uses this location's `ttl_secs`. `disabled` leaves returned TTLs unchanged. */ mode: GatewayLocationsCreateResponseMaxTtlMode; /** Location-specific cap on DNS response TTLs, in seconds. Required when `mode` is `override`. Must be omitted when `mode` is `inherit` or `disabled`. */ ttlSecs?: number | null; } export const GatewayLocationsCreateResponseMaxTtl = /*@__PURE__*/ S.suspend( () => S.Struct({ mode: GatewayLocationsCreateResponseMaxTtlMode, ttlSecs: S.optional(S.NullOr(S.Number).pipe(T.Body("ttl_secs"))), }), ).annotate({ identifier: "GatewayLocationsCreateResponseMaxTtl", }) as any as S.Schema; export type GatewayLocationsCreateResponseNetworksItem = GatewayLocationsCreateRequestNetworksItem; export const GatewayLocationsCreateResponseNetworksItem = GatewayLocationsCreateRequestNetworksItem; export type GatewayLocationsCreateResponseNetworksList = Array; export const GatewayLocationsCreateResponseNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestNetworksItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateGatewayLocationResponse { id?: string | null; /** Indicate whether this location is the default location. */ clientDefault?: boolean | null; createdAt?: string | null; /** Indicate the identifier of the pair of IPv4 addresses assigned to this location. */ dnsDestinationIpsId?: string | null; /** Specify the UUID of the IPv6 block brought to the gateway so that this location's IPv6 address is allocated from the Bring Your Own IPv6 (BYOIPv6) block rather than the standard Cloudflare IPv6 block. */ dnsDestinationIpv6BlockId?: string | null; /** Specify the DNS over HTTPS domain that receives DNS requests. Gateway automatically generates this value. */ dohSubdomain?: string | null; /** Indicate whether the location must resolve EDNS queries. */ ecsSupport?: boolean | null; /** Configure the destination endpoints for this location. */ endpoints?: GatewayLocationsCreateResponseEndpoints | null; /** Defines the automatically generated IPv6 destination IP assigned to this location. Gateway counts all DNS requests sent to this IP as requests under this location. */ ip?: string | null; /** Show the primary destination IPv4 address from the pair identified dns_destination_ips_id. This field read-only. */ ipv4Destination?: string | null; /** Show the backup destination IPv4 address from the pair identified dns_destination_ips_id. This field read-only. */ ipv4DestinationBackup?: string | null; /** Controls how DNS response TTLs are capped for this location relative to the account `max_ttl_secs` setting. Omitting `max_ttl` on update resets it to `inherit`. */ maxTtl?: GatewayLocationsCreateResponseMaxTtl | null; /** Specify the location name. */ name?: string | null; /** Specify the list of network ranges from which requests at this location originate. The list takes effect only if it is non-empty and the IPv4 endpoint is enabled for this location. */ networks?: GatewayLocationsCreateResponseNetworksList | null; updatedAt?: string | null; } export const CreateGatewayLocationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), clientDefault: S.optional( S.NullOr(S.Boolean).pipe(T.Body("client_default")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), dnsDestinationIpsId: S.optional( S.NullOr(S.String).pipe(T.Body("dns_destination_ips_id")), ), dnsDestinationIpv6BlockId: S.optional( S.NullOr(S.String).pipe(T.Body("dns_destination_ipv6_block_id")), ), dohSubdomain: S.optional(S.NullOr(S.String).pipe(T.Body("doh_subdomain"))), ecsSupport: S.optional(S.NullOr(S.Boolean).pipe(T.Body("ecs_support"))), endpoints: S.optional(S.NullOr(GatewayLocationsCreateResponseEndpoints)), ip: S.optional(S.NullOr(S.String)), ipv4Destination: S.optional( S.NullOr(S.String).pipe(T.Body("ipv4_destination")), ), ipv4DestinationBackup: S.optional( S.NullOr(S.String).pipe(T.Body("ipv4_destination_backup")), ), maxTtl: S.optional( S.NullOr(GatewayLocationsCreateResponseMaxTtl).pipe(T.Body("max_ttl")), ), name: S.optional(S.NullOr(S.String)), networks: S.optional(S.NullOr(GatewayLocationsCreateResponseNetworksList)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateGatewayLocationResponse", }) as any as S.Schema; export interface CreateGatewayPacfileRequest { accountId: string; /** Actual contents of the PAC file */ contents: string; /** Name of the PAC file. */ name: string; /** Detailed description of the PAC file. */ description?: string; /** URL-friendly version of the PAC file name. If not provided, it will be auto-generated */ slug?: string; } export const CreateGatewayPacfileRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), contents: S.String, name: S.String, description: S.optional(S.String), slug: S.optional(S.String), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/gateway/pacfiles", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateGatewayPacfileRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateGatewayPacfileResponse { id?: string | null; /** Actual contents of the PAC file */ contents?: string | null; createdAt?: string | null; /** Detailed description of the PAC file. */ description?: string | null; /** Name of the PAC file. */ name?: string | null; /** URL-friendly version of the PAC file name. */ slug?: string | null; updatedAt?: string | null; /** Unique URL to download the PAC file. */ url?: string | null; } export const CreateGatewayPacfileResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), contents: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), description: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), slug: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), url: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateGatewayPacfileResponse", }) as any as S.Schema; export type GatewayProxyEndpointsCreateRequestKind = "ip" | "identity"; export const GatewayProxyEndpointsCreateRequestKind = /*@__PURE__*/ S.String; export type CreateGatewayProxyEndpointRequestIpsList = Array; export const CreateGatewayProxyEndpointRequestIpsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface CreateGatewayProxyEndpointRequest { accountId: string; /** Specify the name of the proxy endpoint. */ name: string; /** The proxy endpoint kind */ kind?: GatewayProxyEndpointsCreateRequestKind | (string & {}); /** Specify the list of CIDRs to restrict ingress connections. Required when creating an ip-kind proxy endpoint. */ ips?: CreateGatewayProxyEndpointRequestIpsList; } export const CreateGatewayProxyEndpointRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.String, kind: S.optional(GatewayProxyEndpointsCreateRequestKind), ips: S.optional(CreateGatewayProxyEndpointRequestIpsList), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/gateway/proxy_endpoints", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateGatewayProxyEndpointRequest", }) as any as S.Schema; export type GatewayProxyEndpointsCreateResultIPIpsList = Array; export const GatewayProxyEndpointsCreateResultIPIpsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayProxyEndpointsCreateResultIPKind = "ip"; export const GatewayProxyEndpointsCreateResultIPKind = /*@__PURE__*/ S.String; export interface GatewayProxyEndpointsCreateResultIP { /** Specify the list of CIDRs to restrict ingress connections. */ ips?: GatewayProxyEndpointsCreateResultIPIpsList | null; /** Specify the name of the proxy endpoint. */ name: string; id?: string | null; createdAt?: string | null; /** The proxy endpoint kind */ kind?: GatewayProxyEndpointsCreateResultIPKind | null; /** Specify the subdomain to use as the destination in the proxy client. */ subdomain?: string | null; updatedAt?: string | null; } export const GatewayProxyEndpointsCreateResultIP = /*@__PURE__*/ S.suspend(() => S.Struct({ ips: S.optional(S.NullOr(GatewayProxyEndpointsCreateResultIPIpsList)), name: S.String, id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), kind: S.optional(S.NullOr(GatewayProxyEndpointsCreateResultIPKind)), subdomain: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "GatewayProxyEndpointsCreateResultIP", }) as any as S.Schema; export type GatewayProxyEndpointsCreateResultIdentityKind = "identity"; export const GatewayProxyEndpointsCreateResultIdentityKind = /*@__PURE__*/ S.String; export interface GatewayProxyEndpointsCreateResultIdentity { /** The proxy endpoint kind */ kind: GatewayProxyEndpointsCreateResultIdentityKind; /** Specify the name of the proxy endpoint. */ name: string; id?: string | null; createdAt?: string | null; /** Specify the subdomain to use as the destination in the proxy client. */ subdomain?: string | null; updatedAt?: string | null; } export const GatewayProxyEndpointsCreateResultIdentity = /*@__PURE__*/ S.suspend(() => S.Struct({ kind: GatewayProxyEndpointsCreateResultIdentityKind, name: S.String, id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), subdomain: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "GatewayProxyEndpointsCreateResultIdentity", }) as any as S.Schema; export type GatewayProxyEndpointsCreateResult = | GatewayProxyEndpointsCreateResultIP | GatewayProxyEndpointsCreateResultIdentity; export const GatewayProxyEndpointsCreateResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["ips", "name", "id", "createdAt", "kind", "subdomain", "updatedAt"], ["kind", "name", "id", "createdAt", "subdomain", "updatedAt"], ]), ); export type CreateGatewayProxyEndpointResponse = GatewayProxyEndpointsCreateResult; export const CreateGatewayProxyEndpointResponse = /*@__PURE__*/ S.suspend(() => GatewayProxyEndpointsCreateResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "CreateGatewayProxyEndpointResponse", }) as any as S.Schema; export type GatewayRulesCreateRequestAction = | "on" | "off" | "allow" | "block" | "scan" | "noscan" | "safesearch" | "ytrestricted" | "isolate" | "noisolate" | "override" | "l4_override" | "egress" | "resolve" | "quarantine" | "redirect"; export const GatewayRulesCreateRequestAction = /*@__PURE__*/ S.String; export interface GatewayRulesCreateRequestExpiration { /** Show the timestamp when the policy expires and stops applying. The value must follow RFC 3339 and include a UTC offset. The system accepts non-zero offsets but converts them to the equivalent UTC+00:00 value and returns timestamps with a trailing Z. Expiration policies ignore client timezones and expire globally at the specified expires_at time. */ expiresAt: string; /** Defines the default duration a policy active in minutes. Must set in order to use the `reset_expiration` endpoint on this rule. */ duration?: number; /** Indicates whether the policy is expired. */ expired?: boolean; } export const GatewayRulesCreateRequestExpiration = /*@__PURE__*/ S.suspend(() => S.Struct({ expiresAt: S.String.pipe(T.Body("expires_at")), duration: S.optional(S.Number), expired: S.optional(S.Boolean), }), ).annotate({ identifier: "GatewayRulesCreateRequestExpiration", }) as any as S.Schema; export type GatewayRulesCreateRequestFiltersItem = | "http" | "dns" | "l4" | "egress" | "dns_resolver"; export const GatewayRulesCreateRequestFiltersItem = /*@__PURE__*/ S.String; export type GatewayRulesCreateRequestFiltersList = Array< GatewayRulesCreateRequestFiltersItem | (string & {}) >; export const GatewayRulesCreateRequestFiltersList = /*@__PURE__*/ S.Array( GatewayRulesCreateRequestFiltersItem, ) as any as S.Schema; export type GatewayRulesCreateRequestRuleSettingsAddHeadersValueList = Array; export const GatewayRulesCreateRequestRuleSettingsAddHeadersValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayRulesCreateRequestRuleSettingsAddHeadersMap = { [key: string]: | GatewayRulesCreateRequestRuleSettingsAddHeadersValueList | undefined; }; export const GatewayRulesCreateRequestRuleSettingsAddHeadersMap = /*@__PURE__*/ S.Record( S.String, GatewayRulesCreateRequestRuleSettingsAddHeadersValueList, ) as any as S.Schema; export interface GatewayRulesCreateRequestRuleSettingsAuditSsh { /** Enable SSH command logging. */ commandLogging?: boolean; } export const GatewayRulesCreateRequestRuleSettingsAuditSsh = /*@__PURE__*/ S.suspend(() => S.Struct({ commandLogging: S.optional(S.Boolean.pipe(T.Body("command_logging"))), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsAuditSsh", }) as any as S.Schema; export type GatewayRulesCreateRequestRuleSettingsBisoAdminControlsCopy = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesCreateRequestRuleSettingsBisoAdminControlsCopy = /*@__PURE__*/ S.String; export type GatewayRulesCreateRequestRuleSettingsBisoAdminControlsDownload = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesCreateRequestRuleSettingsBisoAdminControlsDownload = /*@__PURE__*/ S.String; export type GatewayRulesCreateRequestRuleSettingsBisoAdminControlsKeyboard = | "enabled" | "disabled"; export const GatewayRulesCreateRequestRuleSettingsBisoAdminControlsKeyboard = /*@__PURE__*/ S.String; export type GatewayRulesCreateRequestRuleSettingsBisoAdminControlsPaste = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesCreateRequestRuleSettingsBisoAdminControlsPaste = /*@__PURE__*/ S.String; export type GatewayRulesCreateRequestRuleSettingsBisoAdminControlsPrinting = | "enabled" | "disabled"; export const GatewayRulesCreateRequestRuleSettingsBisoAdminControlsPrinting = /*@__PURE__*/ S.String; export type GatewayRulesCreateRequestRuleSettingsBisoAdminControlsUpload = | "enabled" | "disabled"; export const GatewayRulesCreateRequestRuleSettingsBisoAdminControlsUpload = /*@__PURE__*/ S.String; export type GatewayRulesCreateRequestRuleSettingsBisoAdminControlsVersion = | "v1" | "v2"; export const GatewayRulesCreateRequestRuleSettingsBisoAdminControlsVersion = /*@__PURE__*/ S.String; export interface GatewayRulesCreateRequestRuleSettingsBisoAdminControls { /** Configure copy behavior. If set to remote_only, users cannot copy isolated content from the remote browser to the local clipboard. If this field is absent, copying remains enabled. Applies only when version == "v2". */ copy?: | GatewayRulesCreateRequestRuleSettingsBisoAdminControlsCopy | (string & {}); /** Set to false to enable copy-pasting. Only applies when `version == "v1"`. */ dcp?: boolean; /** Set to false to enable downloading. Only applies when `version == "v1"`. */ dd?: boolean; /** Set to false to enable keyboard usage. Only applies when `version == "v1"`. */ dk?: boolean; /** Configure download behavior. When set to remote_only, users can view downloads but cannot save them. If this field is absent, downloading remains enabled. Applies only when version == "v2". */ download?: | GatewayRulesCreateRequestRuleSettingsBisoAdminControlsDownload | (string & {}); /** Set to false to enable printing. Only applies when `version == "v1"`. */ dp?: boolean; /** Set to false to enable uploading. Only applies when `version == "v1"`. */ du?: boolean; /** Configure keyboard usage behavior. If this field is absent, keyboard usage remains enabled. Applies only when version == "v2". */ keyboard?: | GatewayRulesCreateRequestRuleSettingsBisoAdminControlsKeyboard | (string & {}); /** Configure paste behavior. If set to remote_only, users cannot paste content from the local clipboard into isolated pages. If this field is absent, pasting remains enabled. Applies only when version == "v2". */ paste?: | GatewayRulesCreateRequestRuleSettingsBisoAdminControlsPaste | (string & {}); /** Configure print behavior. Default, Printing is enabled. Applies only when version == "v2". */ printing?: | GatewayRulesCreateRequestRuleSettingsBisoAdminControlsPrinting | (string & {}); /** Configure upload behavior. If this field is absent, uploading remains enabled. Applies only when version == "v2". */ upload?: | GatewayRulesCreateRequestRuleSettingsBisoAdminControlsUpload | (string & {}); /** Indicate which version of the browser isolation controls should apply. */ version?: | GatewayRulesCreateRequestRuleSettingsBisoAdminControlsVersion | (string & {}); /** Specify the watermark ID (UUID) to apply to the isolated browser session. When present, enables watermark rendering in the isolated browser. */ wmId?: string; } export const GatewayRulesCreateRequestRuleSettingsBisoAdminControls = /*@__PURE__*/ S.suspend(() => S.Struct({ copy: S.optional( GatewayRulesCreateRequestRuleSettingsBisoAdminControlsCopy, ), dcp: S.optional(S.Boolean), dd: S.optional(S.Boolean), dk: S.optional(S.Boolean), download: S.optional( GatewayRulesCreateRequestRuleSettingsBisoAdminControlsDownload, ), dp: S.optional(S.Boolean), du: S.optional(S.Boolean), keyboard: S.optional( GatewayRulesCreateRequestRuleSettingsBisoAdminControlsKeyboard, ), paste: S.optional( GatewayRulesCreateRequestRuleSettingsBisoAdminControlsPaste, ), printing: S.optional( GatewayRulesCreateRequestRuleSettingsBisoAdminControlsPrinting, ), upload: S.optional( GatewayRulesCreateRequestRuleSettingsBisoAdminControlsUpload, ), version: S.optional( GatewayRulesCreateRequestRuleSettingsBisoAdminControlsVersion, ), wmId: S.optional(S.String.pipe(T.Body("wm_id"))), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsBisoAdminControls", }) as any as S.Schema; export interface GatewayRulesCreateRequestRuleSettingsBlockPage { /** Specify the URI to which the user is redirected. */ targetUri: string; /** Specify whether to pass the context information as query parameters. */ includeContext?: boolean; } export const GatewayRulesCreateRequestRuleSettingsBlockPage = /*@__PURE__*/ S.suspend(() => S.Struct({ targetUri: S.String.pipe(T.Body("target_uri")), includeContext: S.optional(S.Boolean.pipe(T.Body("include_context"))), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsBlockPage", }) as any as S.Schema; export interface GatewayRulesCreateRequestRuleSettingsCheckSession { /** Sets the required session freshness threshold. The API returns a normalized version of this value. */ duration?: string; /** Enable session enforcement. */ enforce?: boolean; } export const GatewayRulesCreateRequestRuleSettingsCheckSession = /*@__PURE__*/ S.suspend(() => S.Struct({ duration: S.optional(S.String), enforce: S.optional(S.Boolean), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsCheckSession", }) as any as S.Schema; export interface GatewayRulesCreateRequestRuleSettingsDnsResolversIpv4Item { /** Specify the IPv4 address of the upstream resolver. */ ip: string; /** Specify a port number to use for the upstream resolver. Defaults to 53 if unspecified. */ port?: number; /** Indicate whether to connect to this resolver over a private network. Must set when vnet_id set. */ routeThroughPrivateNetwork?: boolean; /** Specify an optional virtual network for this resolver. Uses default virtual network id if omitted. */ vnetId?: string; } export const GatewayRulesCreateRequestRuleSettingsDnsResolversIpv4Item = /*@__PURE__*/ S.suspend(() => S.Struct({ ip: S.String, port: S.optional(S.Number), routeThroughPrivateNetwork: S.optional( S.Boolean.pipe(T.Body("route_through_private_network")), ), vnetId: S.optional(S.String.pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsDnsResolversIpv4Item", }) as any as S.Schema; export type GatewayRulesCreateRequestRuleSettingsDnsResolversIpv4List = Array; export const GatewayRulesCreateRequestRuleSettingsDnsResolversIpv4List = /*@__PURE__*/ S.Array( GatewayRulesCreateRequestRuleSettingsDnsResolversIpv4Item, ) as any as S.Schema; export interface GatewayRulesCreateRequestRuleSettingsDnsResolversIpv6Item { /** Specify the IPv6 address of the upstream resolver. */ ip: string; /** Specify a port number to use for the upstream resolver. Defaults to 53 if unspecified. */ port?: number; /** Indicate whether to connect to this resolver over a private network. Must set when vnet_id set. */ routeThroughPrivateNetwork?: boolean; /** Specify an optional virtual network for this resolver. Uses default virtual network id if omitted. */ vnetId?: string; } export const GatewayRulesCreateRequestRuleSettingsDnsResolversIpv6Item = /*@__PURE__*/ S.suspend(() => S.Struct({ ip: S.String, port: S.optional(S.Number), routeThroughPrivateNetwork: S.optional( S.Boolean.pipe(T.Body("route_through_private_network")), ), vnetId: S.optional(S.String.pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsDnsResolversIpv6Item", }) as any as S.Schema; export type GatewayRulesCreateRequestRuleSettingsDnsResolversIpv6List = Array; export const GatewayRulesCreateRequestRuleSettingsDnsResolversIpv6List = /*@__PURE__*/ S.Array( GatewayRulesCreateRequestRuleSettingsDnsResolversIpv6Item, ) as any as S.Schema; export interface GatewayRulesCreateRequestRuleSettingsDnsResolvers { ipv4?: GatewayRulesCreateRequestRuleSettingsDnsResolversIpv4List; ipv6?: GatewayRulesCreateRequestRuleSettingsDnsResolversIpv6List; } export const GatewayRulesCreateRequestRuleSettingsDnsResolvers = /*@__PURE__*/ S.suspend(() => S.Struct({ ipv4: S.optional( GatewayRulesCreateRequestRuleSettingsDnsResolversIpv4List, ), ipv6: S.optional( GatewayRulesCreateRequestRuleSettingsDnsResolversIpv6List, ), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsDnsResolvers", }) as any as S.Schema; export interface GatewayRulesCreateRequestRuleSettingsEgress { /** Specify the IPv4 address to use for egress. */ ipv4?: string; /** Specify the fallback IPv4 address to use for egress when the primary IPv4 fails. Set '0.0.0.0' to indicate local egress via WARP IPs. */ ipv4Fallback?: string; /** Specify the IPv6 range to use for egress. */ ipv6?: string; } export const GatewayRulesCreateRequestRuleSettingsEgress = /*@__PURE__*/ S.suspend(() => S.Struct({ ipv4: S.optional(S.String), ipv4Fallback: S.optional(S.String.pipe(T.Body("ipv4_fallback"))), ipv6: S.optional(S.String), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsEgress", }) as any as S.Schema; export interface GatewayRulesCreateRequestRuleSettingsForensicCopy { /** Enable sending the copy to storage. */ enabled?: boolean; } export const GatewayRulesCreateRequestRuleSettingsForensicCopy = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsForensicCopy", }) as any as S.Schema; export interface GatewayRulesCreateRequestRuleSettingsL4override { /** Defines the IPv4 or IPv6 address. */ ip?: string; /** Defines a port number to use for TCP/UDP overrides. */ port?: number; } export const GatewayRulesCreateRequestRuleSettingsL4override = /*@__PURE__*/ S.suspend(() => S.Struct({ ip: S.optional(S.String), port: S.optional(S.Number), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsL4override", }) as any as S.Schema; export interface GatewayRulesCreateRequestRuleSettingsNotificationSettings { /** Enable notification. */ enabled?: boolean; /** Indicates whether to pass the context information as query parameters. */ includeContext?: boolean; /** Customize the message shown in the notification. */ msg?: string; /** Defines an optional URL to direct users to additional information. If unset, the notification opens a block page. */ supportUrl?: string; } export const GatewayRulesCreateRequestRuleSettingsNotificationSettings = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), includeContext: S.optional(S.Boolean.pipe(T.Body("include_context"))), msg: S.optional(S.String), supportUrl: S.optional(S.String.pipe(T.Body("support_url"))), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsNotificationSettings", }) as any as S.Schema; export type GatewayRulesCreateRequestRuleSettingsOverrideIpsList = Array; export const GatewayRulesCreateRequestRuleSettingsOverrideIpsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface GatewayRulesCreateRequestRuleSettingsPayloadLog { /** Enable DLP payload logging for this rule. */ enabled?: boolean; } export const GatewayRulesCreateRequestRuleSettingsPayloadLog = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsPayloadLog", }) as any as S.Schema; export type GatewayRulesCreateRequestRuleSettingsQuarantineFileTypesItem = | "exe" | "pdf" | "doc" | "docm" | "docx" | "rtf" | "ppt" | "pptx" | "xls" | "xlsm" | "xlsx" | "zip" | "rar"; export const GatewayRulesCreateRequestRuleSettingsQuarantineFileTypesItem = /*@__PURE__*/ S.String; export type GatewayRulesCreateRequestRuleSettingsQuarantineFileTypesList = Array< GatewayRulesCreateRequestRuleSettingsQuarantineFileTypesItem | (string & {}) >; export const GatewayRulesCreateRequestRuleSettingsQuarantineFileTypesList = /*@__PURE__*/ S.Array( GatewayRulesCreateRequestRuleSettingsQuarantineFileTypesItem, ) as any as S.Schema; export interface GatewayRulesCreateRequestRuleSettingsQuarantine { /** Specify the types of files to sandbox. */ fileTypes?: GatewayRulesCreateRequestRuleSettingsQuarantineFileTypesList; } export const GatewayRulesCreateRequestRuleSettingsQuarantine = /*@__PURE__*/ S.suspend(() => S.Struct({ fileTypes: S.optional( GatewayRulesCreateRequestRuleSettingsQuarantineFileTypesList.pipe( T.Body("file_types"), ), ), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsQuarantine", }) as any as S.Schema; export interface GatewayRulesCreateRequestRuleSettingsRedirect { /** Specify the URI to which the user is redirected. */ targetUri: string; /** Specify whether to pass the context information as query parameters. */ includeContext?: boolean; /** Specify whether to append the path and query parameters from the original request to target_uri. */ preservePathAndQuery?: boolean; } export const GatewayRulesCreateRequestRuleSettingsRedirect = /*@__PURE__*/ S.suspend(() => S.Struct({ targetUri: S.String.pipe(T.Body("target_uri")), includeContext: S.optional(S.Boolean.pipe(T.Body("include_context"))), preservePathAndQuery: S.optional( S.Boolean.pipe(T.Body("preserve_path_and_query")), ), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsRedirect", }) as any as S.Schema; export type GatewayRulesCreateRequestRuleSettingsResolveDnsInternallyFallback = | "none" | "public_dns"; export const GatewayRulesCreateRequestRuleSettingsResolveDnsInternallyFallback = /*@__PURE__*/ S.String; export interface GatewayRulesCreateRequestRuleSettingsResolveDnsInternally { /** Specify the fallback behavior to apply when the internal DNS response code differs from 'NOERROR' or when the response data contains only CNAME records for 'A' or 'AAAA' queries. */ fallback?: | GatewayRulesCreateRequestRuleSettingsResolveDnsInternallyFallback | (string & {}); /** Specify the internal DNS view identifier to pass to the internal DNS service. */ viewId?: string; } export const GatewayRulesCreateRequestRuleSettingsResolveDnsInternally = /*@__PURE__*/ S.suspend(() => S.Struct({ fallback: S.optional( GatewayRulesCreateRequestRuleSettingsResolveDnsInternallyFallback, ), viewId: S.optional(S.String.pipe(T.Body("view_id"))), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsResolveDnsInternally", }) as any as S.Schema; export type GatewayRulesCreateRequestRuleSettingsUntrustedCertAction = | "pass_through" | "block" | "error"; export const GatewayRulesCreateRequestRuleSettingsUntrustedCertAction = /*@__PURE__*/ S.String; export interface GatewayRulesCreateRequestRuleSettingsUntrustedCert { /** Defines the action performed when an untrusted certificate seen. The default action an error with HTTP code 526. */ action?: | GatewayRulesCreateRequestRuleSettingsUntrustedCertAction | (string & {}); } export const GatewayRulesCreateRequestRuleSettingsUntrustedCert = /*@__PURE__*/ S.suspend(() => S.Struct({ action: S.optional( GatewayRulesCreateRequestRuleSettingsUntrustedCertAction, ), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettingsUntrustedCert", }) as any as S.Schema; export interface GatewayRulesCreateRequestRuleSettings { /** Add custom headers to allowed requests as key-value pairs. Use header names as keys that map to arrays of header values. Settable only for `http` rules with the action set to `allow`. */ addHeaders?: GatewayRulesCreateRequestRuleSettingsAddHeadersMap; /** Set to enable MSP children to bypass this rule. Only parent MSP accounts can set this. this rule. Settable for all types of rules. */ allowChildBypass?: boolean; /** Define the settings for the Audit SSH action. Settable only for `l4` rules with `audit_ssh` action. */ auditSsh?: GatewayRulesCreateRequestRuleSettingsAuditSsh; /** Configure browser isolation behavior. Settable only for `http` rules with the action set to `isolate`. */ bisoAdminControls?: GatewayRulesCreateRequestRuleSettingsBisoAdminControls; /** Configure custom block page settings. If missing or null, use the account settings. Settable only for `http` rules with the action set to `block`. */ blockPage?: GatewayRulesCreateRequestRuleSettingsBlockPage; /** Enable the custom block page. Settable only for `dns` rules with action `block`. */ blockPageEnabled?: boolean; /** Explain why the rule blocks the request. The custom block page shows this text (if enabled). Settable only for `dns`, `l4`, and `http` rules when the action set to `block`. */ blockReason?: string; /** Set to enable MSP accounts to bypass their parent's rules. Only MSP child accounts can set this. Settable for all types of rules. */ bypassParentRule?: boolean; /** Configure session check behavior. Settable only for `l4` and `http` rules with the action set to `allow`. */ checkSession?: GatewayRulesCreateRequestRuleSettingsCheckSession; /** Configure custom resolvers to route queries that match the resolver policy. Unused with 'resolve_dns_through_cloudflare' or 'resolve_dns_internally' settings. DNS queries get routed to the address closest to their origin. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ dnsResolvers?: GatewayRulesCreateRequestRuleSettingsDnsResolvers; /** Configure how Gateway Proxy traffic egresses. You can enable this setting for rules with Egress actions and filters, or omit it to indicate local egress via WARP IPs. Settable only for `egress` rules. */ egress?: GatewayRulesCreateRequestRuleSettingsEgress; /** Configure whether a copy of the HTTP request will be sent to storage when the rule matches. */ forensicCopy?: GatewayRulesCreateRequestRuleSettingsForensicCopy; /** Ignore category matches at CNAME domains in a response. When off, evaluate categories in this rule against all CNAME domain categories in the response. Settable only for `dns` and `dns_resolver` rules. */ ignoreCnameCategoryMatches?: boolean; /** Specify whether to disable DNSSEC validation (for Allow actions) [INSECURE]. Settable only for `dns` rules. */ insecureDisableDnssecValidation?: boolean; /** Enable IPs in DNS resolver category blocks. The system blocks only domain name categories unless you enable this setting. Settable only for `dns` and `dns_resolver` rules. */ ipCategories?: boolean; /** Indicates whether to include IPs in DNS resolver indicator feed blocks. Default, indicator feeds block only domain names. Settable only for `dns` and `dns_resolver` rules. */ ipIndicatorFeeds?: boolean; /** Send matching traffic to the supplied destination IP address and port. Settable only for `l4` rules with the action set to `l4_override`. */ l4override?: GatewayRulesCreateRequestRuleSettingsL4override; /** Configure a notification to display on the user's device when this rule matched. Settable for all types of rules with the action set to `block`. */ notificationSettings?: GatewayRulesCreateRequestRuleSettingsNotificationSettings; /** Defines a hostname for override, for the matching DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideHost?: string; /** Defines a an IP or set of IPs for overriding matched DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideIps?: GatewayRulesCreateRequestRuleSettingsOverrideIpsList; /** Configure DLP payload logging. Settable only for `http` rules. */ payloadLog?: GatewayRulesCreateRequestRuleSettingsPayloadLog; /** Configure settings that apply to quarantine rules. Settable only for `http` rules. */ quarantine?: GatewayRulesCreateRequestRuleSettingsQuarantine; /** Apply settings to redirect rules. Settable only for `http` rules with the action set to `redirect`. */ redirect?: GatewayRulesCreateRequestRuleSettingsRedirect; /** Configure to forward the query to the internal DNS service, passing the specified 'view_id' as input. Not used when 'dns_resolvers' is specified or 'resolve_dns_through_cloudflare' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsInternally?: GatewayRulesCreateRequestRuleSettingsResolveDnsInternally; /** Enable to send queries that match the policy to Cloudflare's default 1.1.1.1 DNS resolver. Cannot set when 'dns_resolvers' specified or 'resolve_dns_internally' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsThroughCloudflare?: boolean; /** Configure behavior when an upstream certificate is invalid or an SSL error occurs. Settable only for `http` rules with the action set to `allow`. */ untrustedCert?: GatewayRulesCreateRequestRuleSettingsUntrustedCert; } export const GatewayRulesCreateRequestRuleSettings = /*@__PURE__*/ S.suspend( () => S.Struct({ addHeaders: S.optional( GatewayRulesCreateRequestRuleSettingsAddHeadersMap.pipe( T.Body("add_headers"), ), ), allowChildBypass: S.optional( S.Boolean.pipe(T.Body("allow_child_bypass")), ), auditSsh: S.optional( GatewayRulesCreateRequestRuleSettingsAuditSsh.pipe(T.Body("audit_ssh")), ), bisoAdminControls: S.optional( GatewayRulesCreateRequestRuleSettingsBisoAdminControls.pipe( T.Body("biso_admin_controls"), ), ), blockPage: S.optional( GatewayRulesCreateRequestRuleSettingsBlockPage.pipe( T.Body("block_page"), ), ), blockPageEnabled: S.optional( S.Boolean.pipe(T.Body("block_page_enabled")), ), blockReason: S.optional(S.String.pipe(T.Body("block_reason"))), bypassParentRule: S.optional( S.Boolean.pipe(T.Body("bypass_parent_rule")), ), checkSession: S.optional( GatewayRulesCreateRequestRuleSettingsCheckSession.pipe( T.Body("check_session"), ), ), dnsResolvers: S.optional( GatewayRulesCreateRequestRuleSettingsDnsResolvers.pipe( T.Body("dns_resolvers"), ), ), egress: S.optional(GatewayRulesCreateRequestRuleSettingsEgress), forensicCopy: S.optional( GatewayRulesCreateRequestRuleSettingsForensicCopy.pipe( T.Body("forensic_copy"), ), ), ignoreCnameCategoryMatches: S.optional( S.Boolean.pipe(T.Body("ignore_cname_category_matches")), ), insecureDisableDnssecValidation: S.optional( S.Boolean.pipe(T.Body("insecure_disable_dnssec_validation")), ), ipCategories: S.optional(S.Boolean.pipe(T.Body("ip_categories"))), ipIndicatorFeeds: S.optional( S.Boolean.pipe(T.Body("ip_indicator_feeds")), ), l4override: S.optional(GatewayRulesCreateRequestRuleSettingsL4override), notificationSettings: S.optional( GatewayRulesCreateRequestRuleSettingsNotificationSettings.pipe( T.Body("notification_settings"), ), ), overrideHost: S.optional(S.String.pipe(T.Body("override_host"))), overrideIps: S.optional( GatewayRulesCreateRequestRuleSettingsOverrideIpsList.pipe( T.Body("override_ips"), ), ), payloadLog: S.optional( GatewayRulesCreateRequestRuleSettingsPayloadLog.pipe( T.Body("payload_log"), ), ), quarantine: S.optional(GatewayRulesCreateRequestRuleSettingsQuarantine), redirect: S.optional(GatewayRulesCreateRequestRuleSettingsRedirect), resolveDnsInternally: S.optional( GatewayRulesCreateRequestRuleSettingsResolveDnsInternally.pipe( T.Body("resolve_dns_internally"), ), ), resolveDnsThroughCloudflare: S.optional( S.Boolean.pipe(T.Body("resolve_dns_through_cloudflare")), ), untrustedCert: S.optional( GatewayRulesCreateRequestRuleSettingsUntrustedCert.pipe( T.Body("untrusted_cert"), ), ), }), ).annotate({ identifier: "GatewayRulesCreateRequestRuleSettings", }) as any as S.Schema; export interface GatewayRulesCreateRequestSchedule { /** Specify the time intervals when the rule is active on Fridays, in the increasing order from 00:00-24:00. If this parameter omitted, the rule is deactivated on Fridays. API returns a formatted version of this string, which may cause Terraform drift if a unformatted value is used. */ fri?: string; /** Specify the time intervals when the rule is active on Mondays, in the increasing order from 00:00-24:00(capped at maximum of 6 time splits). If this parameter omitted, the rule is deactivated on Mondays. API returns a formatted version of this string, which may cause Terraform drift if a unformatted value is used. */ mon?: string; /** Specify the time intervals when the rule is active on Saturdays, in the increasing order from 00:00-24:00. If this parameter omitted, the rule is deactivated on Saturdays. API returns a formatted version of this string, which may cause Terraform drift if a unformatted value is used. */ sat?: string; /** Specify the time intervals when the rule is active on Sundays, in the increasing order from 00:00-24:00. If this parameter omitted, the rule is deactivated on Sundays. API returns a formatted version of this string, which may cause Terraform drift if a unformatted value is used. */ sun?: string; /** Specify the time intervals when the rule is active on Thursdays, in the increasing order from 00:00-24:00. If this parameter omitted, the rule is deactivated on Thursdays. API returns a formatted version of this string, which may cause Terraform drift if a unformatted value is used. */ thu?: string; /** Specify the time zone for rule evaluation. When a [valid time zone city name](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List) is provided, Gateway always uses the current time for that time zone. When this parameter is omitted, Gateway uses the time zone determined from the user's IP address. Colo time zone is used when the user's IP address does not resolve to a location. */ timeZone?: string; /** Specify the time intervals when the rule is active on Tuesdays, in the increasing order from 00:00-24:00. If this parameter omitted, the rule is deactivated on Tuesdays. API returns a formatted version of this string, which may cause Terraform drift if a unformatted value is used. */ tue?: string; /** Specify the time intervals when the rule is active on Wednesdays, in the increasing order from 00:00-24:00. If this parameter omitted, the rule is deactivated on Wednesdays. API returns a formatted version of this string, which may cause Terraform drift if a unformatted value is used. */ wed?: string; } export const GatewayRulesCreateRequestSchedule = /*@__PURE__*/ S.suspend(() => S.Struct({ fri: S.optional(S.String), mon: S.optional(S.String), sat: S.optional(S.String), sun: S.optional(S.String), thu: S.optional(S.String), timeZone: S.optional(S.String.pipe(T.Body("time_zone"))), tue: S.optional(S.String), wed: S.optional(S.String), }), ).annotate({ identifier: "GatewayRulesCreateRequestSchedule", }) as any as S.Schema; export interface CreateGatewayRuleRequest { accountId: string; /** Specify the action to perform when the associated traffic, identity, and device posture expressions either absent or evaluate to `true`. */ action: GatewayRulesCreateRequestAction | (string & {}); /** Specify the rule name. */ name: string; /** Specify the rule description. */ description?: string; /** Specify the wirefilter expression used for device posture check. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ devicePosture?: string; /** Specify whether the rule is enabled. */ enabled?: boolean; /** Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This does not apply to HTTP or network policies. Settable only for `dns` rules. */ expiration?: GatewayRulesCreateRequestExpiration; /** Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value. */ filters?: GatewayRulesCreateRequestFiltersList; /** Specify the wirefilter expression used for identity matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ identity?: string; /** Set the order of your rules. Lower values indicate higher precedence. At each processing phase, evaluate applicable rules in ascending order of this value. Refer to [Order of enforcement](http://developers.cloudflare.com/learning-paths/secure-internet-traffic/understand-policies/order-of-enforcement/#manage-precedence-with-terraform) to manage precedence via Terraform. */ precedence?: number; /** Defines settings for this rule. Settings apply only to specific rule types and must use compatible selectors. If Terraform detects drift, confirm the setting supports your rule type and check whether the API modifies the value. Use API-returned values in your configuration to prevent drift. */ ruleSettings?: GatewayRulesCreateRequestRuleSettings; /** Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules. */ schedule?: GatewayRulesCreateRequestSchedule; /** Specify the wirefilter expression used for traffic matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ traffic?: string; } export const CreateGatewayRuleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), action: GatewayRulesCreateRequestAction, name: S.String, description: S.optional(S.String), devicePosture: S.optional(S.String.pipe(T.Body("device_posture"))), enabled: S.optional(S.Boolean), expiration: S.optional(GatewayRulesCreateRequestExpiration), filters: S.optional(GatewayRulesCreateRequestFiltersList), identity: S.optional(S.String), precedence: S.optional(S.Number), ruleSettings: S.optional( GatewayRulesCreateRequestRuleSettings.pipe(T.Body("rule_settings")), ), schedule: S.optional(GatewayRulesCreateRequestSchedule), traffic: S.optional(S.String), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/gateway/rules", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateGatewayRuleRequest", }) as any as S.Schema; export type GatewayRulesCreateResponseAction = | "on" | "off" | "allow" | "block" | "scan" | "noscan" | "safesearch" | "ytrestricted" | "isolate" | "noisolate" | "override" | "l4_override" | "egress" | "resolve" | "quarantine" | "redirect"; export const GatewayRulesCreateResponseAction = /*@__PURE__*/ S.String; export type GatewayRulesCreateResponseFiltersItem = | "http" | "dns" | "l4" | "egress" | "dns_resolver"; export const GatewayRulesCreateResponseFiltersItem = /*@__PURE__*/ S.String; export type GatewayRulesCreateResponseFiltersList = Array; export const GatewayRulesCreateResponseFiltersList = /*@__PURE__*/ S.Array( GatewayRulesCreateResponseFiltersItem, ) as any as S.Schema; export interface GatewayRulesCreateResponseExpiration { /** Show the timestamp when the policy expires and stops applying. The value must follow RFC 3339 and include a UTC offset. The system accepts non-zero offsets but converts them to the equivalent UTC+00:00 value and returns timestamps with a trailing Z. Expiration policies ignore client timezones and expire globally at the specified expires_at time. */ expiresAt: string; /** Defines the default duration a policy active in minutes. Must set in order to use the `reset_expiration` endpoint on this rule. */ duration?: number | null; /** Indicates whether the policy is expired. */ expired?: boolean | null; } export const GatewayRulesCreateResponseExpiration = /*@__PURE__*/ S.suspend( () => S.Struct({ expiresAt: S.String.pipe(T.Body("expires_at")), duration: S.optional(S.NullOr(S.Number)), expired: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "GatewayRulesCreateResponseExpiration", }) as any as S.Schema; export type GatewayRulesCreateResponseRuleSettingsAddHeadersValueList = Array; export const GatewayRulesCreateResponseRuleSettingsAddHeadersValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayRulesCreateResponseRuleSettingsAddHeadersMap = { [key: string]: | GatewayRulesCreateResponseRuleSettingsAddHeadersValueList | undefined; }; export const GatewayRulesCreateResponseRuleSettingsAddHeadersMap = /*@__PURE__*/ S.Record( S.String, GatewayRulesCreateResponseRuleSettingsAddHeadersValueList, ) as any as S.Schema; export interface GatewayRulesCreateResponseRuleSettingsAuditSsh { /** Enable SSH command logging. */ commandLogging?: boolean | null; } export const GatewayRulesCreateResponseRuleSettingsAuditSsh = /*@__PURE__*/ S.suspend(() => S.Struct({ commandLogging: S.optional( S.NullOr(S.Boolean).pipe(T.Body("command_logging")), ), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsAuditSsh", }) as any as S.Schema; export type GatewayRulesCreateResponseRuleSettingsBisoAdminControlsCopy = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesCreateResponseRuleSettingsBisoAdminControlsCopy = /*@__PURE__*/ S.String; export type GatewayRulesCreateResponseRuleSettingsBisoAdminControlsDownload = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesCreateResponseRuleSettingsBisoAdminControlsDownload = /*@__PURE__*/ S.String; export type GatewayRulesCreateResponseRuleSettingsBisoAdminControlsKeyboard = | "enabled" | "disabled"; export const GatewayRulesCreateResponseRuleSettingsBisoAdminControlsKeyboard = /*@__PURE__*/ S.String; export type GatewayRulesCreateResponseRuleSettingsBisoAdminControlsPaste = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesCreateResponseRuleSettingsBisoAdminControlsPaste = /*@__PURE__*/ S.String; export type GatewayRulesCreateResponseRuleSettingsBisoAdminControlsPrinting = | "enabled" | "disabled"; export const GatewayRulesCreateResponseRuleSettingsBisoAdminControlsPrinting = /*@__PURE__*/ S.String; export type GatewayRulesCreateResponseRuleSettingsBisoAdminControlsUpload = | "enabled" | "disabled"; export const GatewayRulesCreateResponseRuleSettingsBisoAdminControlsUpload = /*@__PURE__*/ S.String; export type GatewayRulesCreateResponseRuleSettingsBisoAdminControlsVersion = | "v1" | "v2"; export const GatewayRulesCreateResponseRuleSettingsBisoAdminControlsVersion = /*@__PURE__*/ S.String; export interface GatewayRulesCreateResponseRuleSettingsBisoAdminControls { /** Configure copy behavior. If set to remote_only, users cannot copy isolated content from the remote browser to the local clipboard. If this field is absent, copying remains enabled. Applies only when version == "v2". */ copy?: GatewayRulesCreateResponseRuleSettingsBisoAdminControlsCopy | null; /** Set to false to enable copy-pasting. Only applies when `version == "v1"`. */ dcp?: boolean | null; /** Set to false to enable downloading. Only applies when `version == "v1"`. */ dd?: boolean | null; /** Set to false to enable keyboard usage. Only applies when `version == "v1"`. */ dk?: boolean | null; /** Configure download behavior. When set to remote_only, users can view downloads but cannot save them. If this field is absent, downloading remains enabled. Applies only when version == "v2". */ download?: GatewayRulesCreateResponseRuleSettingsBisoAdminControlsDownload | null; /** Set to false to enable printing. Only applies when `version == "v1"`. */ dp?: boolean | null; /** Set to false to enable uploading. Only applies when `version == "v1"`. */ du?: boolean | null; /** Configure keyboard usage behavior. If this field is absent, keyboard usage remains enabled. Applies only when version == "v2". */ keyboard?: GatewayRulesCreateResponseRuleSettingsBisoAdminControlsKeyboard | null; /** Configure paste behavior. If set to remote_only, users cannot paste content from the local clipboard into isolated pages. If this field is absent, pasting remains enabled. Applies only when version == "v2". */ paste?: GatewayRulesCreateResponseRuleSettingsBisoAdminControlsPaste | null; /** Configure print behavior. Default, Printing is enabled. Applies only when version == "v2". */ printing?: GatewayRulesCreateResponseRuleSettingsBisoAdminControlsPrinting | null; /** Configure upload behavior. If this field is absent, uploading remains enabled. Applies only when version == "v2". */ upload?: GatewayRulesCreateResponseRuleSettingsBisoAdminControlsUpload | null; /** Indicate which version of the browser isolation controls should apply. */ version?: GatewayRulesCreateResponseRuleSettingsBisoAdminControlsVersion | null; /** Specify the watermark ID (UUID) to apply to the isolated browser session. When present, enables watermark rendering in the isolated browser. */ wmId?: string | null; } export const GatewayRulesCreateResponseRuleSettingsBisoAdminControls = /*@__PURE__*/ S.suspend(() => S.Struct({ copy: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsBisoAdminControlsCopy), ), dcp: S.optional(S.NullOr(S.Boolean)), dd: S.optional(S.NullOr(S.Boolean)), dk: S.optional(S.NullOr(S.Boolean)), download: S.optional( S.NullOr( GatewayRulesCreateResponseRuleSettingsBisoAdminControlsDownload, ), ), dp: S.optional(S.NullOr(S.Boolean)), du: S.optional(S.NullOr(S.Boolean)), keyboard: S.optional( S.NullOr( GatewayRulesCreateResponseRuleSettingsBisoAdminControlsKeyboard, ), ), paste: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsBisoAdminControlsPaste), ), printing: S.optional( S.NullOr( GatewayRulesCreateResponseRuleSettingsBisoAdminControlsPrinting, ), ), upload: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsBisoAdminControlsUpload), ), version: S.optional( S.NullOr( GatewayRulesCreateResponseRuleSettingsBisoAdminControlsVersion, ), ), wmId: S.optional(S.NullOr(S.String).pipe(T.Body("wm_id"))), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsBisoAdminControls", }) as any as S.Schema; export interface GatewayRulesCreateResponseRuleSettingsBlockPage { /** Specify the URI to which the user is redirected. */ targetUri: string; /** Specify whether to pass the context information as query parameters. */ includeContext?: boolean | null; } export const GatewayRulesCreateResponseRuleSettingsBlockPage = /*@__PURE__*/ S.suspend(() => S.Struct({ targetUri: S.String.pipe(T.Body("target_uri")), includeContext: S.optional( S.NullOr(S.Boolean).pipe(T.Body("include_context")), ), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsBlockPage", }) as any as S.Schema; export interface GatewayRulesCreateResponseRuleSettingsCheckSession { /** Sets the required session freshness threshold. The API returns a normalized version of this value. */ duration?: string | null; /** Enable session enforcement. */ enforce?: boolean | null; } export const GatewayRulesCreateResponseRuleSettingsCheckSession = /*@__PURE__*/ S.suspend(() => S.Struct({ duration: S.optional(S.NullOr(S.String)), enforce: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsCheckSession", }) as any as S.Schema; export interface GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item { /** Specify the IPv4 address of the upstream resolver. */ ip: string; /** Specify a port number to use for the upstream resolver. Defaults to 53 if unspecified. */ port?: number | null; /** Indicate whether to connect to this resolver over a private network. Must set when vnet_id set. */ routeThroughPrivateNetwork?: boolean | null; /** Specify an optional virtual network for this resolver. Uses default virtual network id if omitted. */ vnetId?: string | null; } export const GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item = /*@__PURE__*/ S.suspend(() => S.Struct({ ip: S.String, port: S.optional(S.NullOr(S.Number)), routeThroughPrivateNetwork: S.optional( S.NullOr(S.Boolean).pipe(T.Body("route_through_private_network")), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item", }) as any as S.Schema; export type GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4List = Array; export const GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4List = /*@__PURE__*/ S.Array( GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item, ) as any as S.Schema; export interface GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item { /** Specify the IPv6 address of the upstream resolver. */ ip: string; /** Specify a port number to use for the upstream resolver. Defaults to 53 if unspecified. */ port?: number | null; /** Indicate whether to connect to this resolver over a private network. Must set when vnet_id set. */ routeThroughPrivateNetwork?: boolean | null; /** Specify an optional virtual network for this resolver. Uses default virtual network id if omitted. */ vnetId?: string | null; } export const GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item = /*@__PURE__*/ S.suspend(() => S.Struct({ ip: S.String, port: S.optional(S.NullOr(S.Number)), routeThroughPrivateNetwork: S.optional( S.NullOr(S.Boolean).pipe(T.Body("route_through_private_network")), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item", }) as any as S.Schema; export type GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6List = Array; export const GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6List = /*@__PURE__*/ S.Array( GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item, ) as any as S.Schema; export interface GatewayRulesCreateResponseRuleSettingsDnsResolvers { ipv4?: GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4List | null; ipv6?: GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6List | null; } export const GatewayRulesCreateResponseRuleSettingsDnsResolvers = /*@__PURE__*/ S.suspend(() => S.Struct({ ipv4: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4List), ), ipv6: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6List), ), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsDnsResolvers", }) as any as S.Schema; export interface GatewayRulesCreateResponseRuleSettingsEgress { /** Specify the IPv4 address to use for egress. */ ipv4?: string | null; /** Specify the fallback IPv4 address to use for egress when the primary IPv4 fails. Set '0.0.0.0' to indicate local egress via WARP IPs. */ ipv4Fallback?: string | null; /** Specify the IPv6 range to use for egress. */ ipv6?: string | null; } export const GatewayRulesCreateResponseRuleSettingsEgress = /*@__PURE__*/ S.suspend(() => S.Struct({ ipv4: S.optional(S.NullOr(S.String)), ipv4Fallback: S.optional( S.NullOr(S.String).pipe(T.Body("ipv4_fallback")), ), ipv6: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsEgress", }) as any as S.Schema; export interface GatewayRulesCreateResponseRuleSettingsForensicCopy { /** Enable sending the copy to storage. */ enabled?: boolean | null; } export const GatewayRulesCreateResponseRuleSettingsForensicCopy = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsForensicCopy", }) as any as S.Schema; export interface GatewayRulesCreateResponseRuleSettingsL4override { /** Defines the IPv4 or IPv6 address. */ ip?: string | null; /** Defines a port number to use for TCP/UDP overrides. */ port?: number | null; } export const GatewayRulesCreateResponseRuleSettingsL4override = /*@__PURE__*/ S.suspend(() => S.Struct({ ip: S.optional(S.NullOr(S.String)), port: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsL4override", }) as any as S.Schema; export interface GatewayRulesCreateResponseRuleSettingsNotificationSettings { /** Enable notification. */ enabled?: boolean | null; /** Indicates whether to pass the context information as query parameters. */ includeContext?: boolean | null; /** Customize the message shown in the notification. */ msg?: string | null; /** Defines an optional URL to direct users to additional information. If unset, the notification opens a block page. */ supportUrl?: string | null; } export const GatewayRulesCreateResponseRuleSettingsNotificationSettings = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), includeContext: S.optional( S.NullOr(S.Boolean).pipe(T.Body("include_context")), ), msg: S.optional(S.NullOr(S.String)), supportUrl: S.optional(S.NullOr(S.String).pipe(T.Body("support_url"))), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsNotificationSettings", }) as any as S.Schema; export type GatewayRulesCreateResponseRuleSettingsOverrideIpsList = Array; export const GatewayRulesCreateResponseRuleSettingsOverrideIpsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface GatewayRulesCreateResponseRuleSettingsPayloadLog { /** Enable DLP payload logging for this rule. */ enabled?: boolean | null; } export const GatewayRulesCreateResponseRuleSettingsPayloadLog = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsPayloadLog", }) as any as S.Schema; export type GatewayRulesCreateResponseRuleSettingsQuarantineFileTypesItem = | "exe" | "pdf" | "doc" | "docm" | "docx" | "rtf" | "ppt" | "pptx" | "xls" | "xlsm" | "xlsx" | "zip" | "rar"; export const GatewayRulesCreateResponseRuleSettingsQuarantineFileTypesItem = /*@__PURE__*/ S.String; export type GatewayRulesCreateResponseRuleSettingsQuarantineFileTypesList = Array; export const GatewayRulesCreateResponseRuleSettingsQuarantineFileTypesList = /*@__PURE__*/ S.Array( GatewayRulesCreateResponseRuleSettingsQuarantineFileTypesItem, ) as any as S.Schema; export interface GatewayRulesCreateResponseRuleSettingsQuarantine { /** Specify the types of files to sandbox. */ fileTypes?: GatewayRulesCreateResponseRuleSettingsQuarantineFileTypesList | null; } export const GatewayRulesCreateResponseRuleSettingsQuarantine = /*@__PURE__*/ S.suspend(() => S.Struct({ fileTypes: S.optional( S.NullOr( GatewayRulesCreateResponseRuleSettingsQuarantineFileTypesList, ).pipe(T.Body("file_types")), ), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsQuarantine", }) as any as S.Schema; export interface GatewayRulesCreateResponseRuleSettingsRedirect { /** Specify the URI to which the user is redirected. */ targetUri: string; /** Specify whether to pass the context information as query parameters. */ includeContext?: boolean | null; /** Specify whether to append the path and query parameters from the original request to target_uri. */ preservePathAndQuery?: boolean | null; } export const GatewayRulesCreateResponseRuleSettingsRedirect = /*@__PURE__*/ S.suspend(() => S.Struct({ targetUri: S.String.pipe(T.Body("target_uri")), includeContext: S.optional( S.NullOr(S.Boolean).pipe(T.Body("include_context")), ), preservePathAndQuery: S.optional( S.NullOr(S.Boolean).pipe(T.Body("preserve_path_and_query")), ), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsRedirect", }) as any as S.Schema; export type GatewayRulesCreateResponseRuleSettingsResolveDnsInternallyFallback = | "none" | "public_dns"; export const GatewayRulesCreateResponseRuleSettingsResolveDnsInternallyFallback = /*@__PURE__*/ S.String; export interface GatewayRulesCreateResponseRuleSettingsResolveDnsInternally { /** Specify the fallback behavior to apply when the internal DNS response code differs from 'NOERROR' or when the response data contains only CNAME records for 'A' or 'AAAA' queries. */ fallback?: GatewayRulesCreateResponseRuleSettingsResolveDnsInternallyFallback | null; /** Specify the internal DNS view identifier to pass to the internal DNS service. */ viewId?: string | null; } export const GatewayRulesCreateResponseRuleSettingsResolveDnsInternally = /*@__PURE__*/ S.suspend(() => S.Struct({ fallback: S.optional( S.NullOr( GatewayRulesCreateResponseRuleSettingsResolveDnsInternallyFallback, ), ), viewId: S.optional(S.NullOr(S.String).pipe(T.Body("view_id"))), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsResolveDnsInternally", }) as any as S.Schema; export type GatewayRulesCreateResponseRuleSettingsUntrustedCertAction = | "pass_through" | "block" | "error"; export const GatewayRulesCreateResponseRuleSettingsUntrustedCertAction = /*@__PURE__*/ S.String; export interface GatewayRulesCreateResponseRuleSettingsUntrustedCert { /** Defines the action performed when an untrusted certificate seen. The default action an error with HTTP code 526. */ action?: GatewayRulesCreateResponseRuleSettingsUntrustedCertAction | null; } export const GatewayRulesCreateResponseRuleSettingsUntrustedCert = /*@__PURE__*/ S.suspend(() => S.Struct({ action: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsUntrustedCertAction), ), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettingsUntrustedCert", }) as any as S.Schema; export interface GatewayRulesCreateResponseRuleSettings { /** Add custom headers to allowed requests as key-value pairs. Use header names as keys that map to arrays of header values. Settable only for `http` rules with the action set to `allow`. */ addHeaders?: GatewayRulesCreateResponseRuleSettingsAddHeadersMap | null; /** Set to enable MSP children to bypass this rule. Only parent MSP accounts can set this. this rule. Settable for all types of rules. */ allowChildBypass?: boolean | null; /** Define the settings for the Audit SSH action. Settable only for `l4` rules with `audit_ssh` action. */ auditSsh?: GatewayRulesCreateResponseRuleSettingsAuditSsh | null; /** Configure browser isolation behavior. Settable only for `http` rules with the action set to `isolate`. */ bisoAdminControls?: GatewayRulesCreateResponseRuleSettingsBisoAdminControls | null; /** Configure custom block page settings. If missing or null, use the account settings. Settable only for `http` rules with the action set to `block`. */ blockPage?: GatewayRulesCreateResponseRuleSettingsBlockPage | null; /** Enable the custom block page. Settable only for `dns` rules with action `block`. */ blockPageEnabled?: boolean | null; /** Explain why the rule blocks the request. The custom block page shows this text (if enabled). Settable only for `dns`, `l4`, and `http` rules when the action set to `block`. */ blockReason?: string | null; /** Set to enable MSP accounts to bypass their parent's rules. Only MSP child accounts can set this. Settable for all types of rules. */ bypassParentRule?: boolean | null; /** Configure session check behavior. Settable only for `l4` and `http` rules with the action set to `allow`. */ checkSession?: GatewayRulesCreateResponseRuleSettingsCheckSession | null; /** Configure custom resolvers to route queries that match the resolver policy. Unused with 'resolve_dns_through_cloudflare' or 'resolve_dns_internally' settings. DNS queries get routed to the address closest to their origin. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ dnsResolvers?: GatewayRulesCreateResponseRuleSettingsDnsResolvers | null; /** Configure how Gateway Proxy traffic egresses. You can enable this setting for rules with Egress actions and filters, or omit it to indicate local egress via WARP IPs. Settable only for `egress` rules. */ egress?: GatewayRulesCreateResponseRuleSettingsEgress | null; /** Configure whether a copy of the HTTP request will be sent to storage when the rule matches. */ forensicCopy?: GatewayRulesCreateResponseRuleSettingsForensicCopy | null; /** Ignore category matches at CNAME domains in a response. When off, evaluate categories in this rule against all CNAME domain categories in the response. Settable only for `dns` and `dns_resolver` rules. */ ignoreCnameCategoryMatches?: boolean | null; /** Specify whether to disable DNSSEC validation (for Allow actions) [INSECURE]. Settable only for `dns` rules. */ insecureDisableDnssecValidation?: boolean | null; /** Enable IPs in DNS resolver category blocks. The system blocks only domain name categories unless you enable this setting. Settable only for `dns` and `dns_resolver` rules. */ ipCategories?: boolean | null; /** Indicates whether to include IPs in DNS resolver indicator feed blocks. Default, indicator feeds block only domain names. Settable only for `dns` and `dns_resolver` rules. */ ipIndicatorFeeds?: boolean | null; /** Send matching traffic to the supplied destination IP address and port. Settable only for `l4` rules with the action set to `l4_override`. */ l4override?: GatewayRulesCreateResponseRuleSettingsL4override | null; /** Configure a notification to display on the user's device when this rule matched. Settable for all types of rules with the action set to `block`. */ notificationSettings?: GatewayRulesCreateResponseRuleSettingsNotificationSettings | null; /** Defines a hostname for override, for the matching DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideHost?: string | null; /** Defines a an IP or set of IPs for overriding matched DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideIps?: GatewayRulesCreateResponseRuleSettingsOverrideIpsList | null; /** Configure DLP payload logging. Settable only for `http` rules. */ payloadLog?: GatewayRulesCreateResponseRuleSettingsPayloadLog | null; /** Configure settings that apply to quarantine rules. Settable only for `http` rules. */ quarantine?: GatewayRulesCreateResponseRuleSettingsQuarantine | null; /** Apply settings to redirect rules. Settable only for `http` rules with the action set to `redirect`. */ redirect?: GatewayRulesCreateResponseRuleSettingsRedirect | null; /** Configure to forward the query to the internal DNS service, passing the specified 'view_id' as input. Not used when 'dns_resolvers' is specified or 'resolve_dns_through_cloudflare' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsInternally?: GatewayRulesCreateResponseRuleSettingsResolveDnsInternally | null; /** Enable to send queries that match the policy to Cloudflare's default 1.1.1.1 DNS resolver. Cannot set when 'dns_resolvers' specified or 'resolve_dns_internally' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsThroughCloudflare?: boolean | null; /** Configure behavior when an upstream certificate is invalid or an SSL error occurs. Settable only for `http` rules with the action set to `allow`. */ untrustedCert?: GatewayRulesCreateResponseRuleSettingsUntrustedCert | null; } export const GatewayRulesCreateResponseRuleSettings = /*@__PURE__*/ S.suspend( () => S.Struct({ addHeaders: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsAddHeadersMap).pipe( T.Body("add_headers"), ), ), allowChildBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_child_bypass")), ), auditSsh: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsAuditSsh).pipe( T.Body("audit_ssh"), ), ), bisoAdminControls: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsBisoAdminControls).pipe( T.Body("biso_admin_controls"), ), ), blockPage: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsBlockPage).pipe( T.Body("block_page"), ), ), blockPageEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("block_page_enabled")), ), blockReason: S.optional(S.NullOr(S.String).pipe(T.Body("block_reason"))), bypassParentRule: S.optional( S.NullOr(S.Boolean).pipe(T.Body("bypass_parent_rule")), ), checkSession: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsCheckSession).pipe( T.Body("check_session"), ), ), dnsResolvers: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsDnsResolvers).pipe( T.Body("dns_resolvers"), ), ), egress: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsEgress), ), forensicCopy: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsForensicCopy).pipe( T.Body("forensic_copy"), ), ), ignoreCnameCategoryMatches: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ignore_cname_category_matches")), ), insecureDisableDnssecValidation: S.optional( S.NullOr(S.Boolean).pipe(T.Body("insecure_disable_dnssec_validation")), ), ipCategories: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ip_categories")), ), ipIndicatorFeeds: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ip_indicator_feeds")), ), l4override: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsL4override), ), notificationSettings: S.optional( S.NullOr( GatewayRulesCreateResponseRuleSettingsNotificationSettings, ).pipe(T.Body("notification_settings")), ), overrideHost: S.optional( S.NullOr(S.String).pipe(T.Body("override_host")), ), overrideIps: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsOverrideIpsList).pipe( T.Body("override_ips"), ), ), payloadLog: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsPayloadLog).pipe( T.Body("payload_log"), ), ), quarantine: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsQuarantine), ), redirect: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsRedirect), ), resolveDnsInternally: S.optional( S.NullOr( GatewayRulesCreateResponseRuleSettingsResolveDnsInternally, ).pipe(T.Body("resolve_dns_internally")), ), resolveDnsThroughCloudflare: S.optional( S.NullOr(S.Boolean).pipe(T.Body("resolve_dns_through_cloudflare")), ), untrustedCert: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsUntrustedCert).pipe( T.Body("untrusted_cert"), ), ), }), ).annotate({ identifier: "GatewayRulesCreateResponseRuleSettings", }) as any as S.Schema; export interface GatewayRulesCreateResponseSchedule { /** Specify the time intervals when the rule is active on Fridays, in the increasing order from 00:00-24:00. If this parameter omitted, the rule is deactivated on Fridays. API returns a formatted version of this string, which may cause Terraform drift if a unformatted value is used. */ fri?: string | null; /** Specify the time intervals when the rule is active on Mondays, in the increasing order from 00:00-24:00(capped at maximum of 6 time splits). If this parameter omitted, the rule is deactivated on Mondays. API returns a formatted version of this string, which may cause Terraform drift if a unformatted value is used. */ mon?: string | null; /** Specify the time intervals when the rule is active on Saturdays, in the increasing order from 00:00-24:00. If this parameter omitted, the rule is deactivated on Saturdays. API returns a formatted version of this string, which may cause Terraform drift if a unformatted value is used. */ sat?: string | null; /** Specify the time intervals when the rule is active on Sundays, in the increasing order from 00:00-24:00. If this parameter omitted, the rule is deactivated on Sundays. API returns a formatted version of this string, which may cause Terraform drift if a unformatted value is used. */ sun?: string | null; /** Specify the time intervals when the rule is active on Thursdays, in the increasing order from 00:00-24:00. If this parameter omitted, the rule is deactivated on Thursdays. API returns a formatted version of this string, which may cause Terraform drift if a unformatted value is used. */ thu?: string | null; /** Specify the time zone for rule evaluation. When a [valid time zone city name](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List) is provided, Gateway always uses the current time for that time zone. When this parameter is omitted, Gateway uses the time zone determined from the user's IP address. Colo time zone is used when the user's IP address does not resolve to a location. */ timeZone?: string | null; /** Specify the time intervals when the rule is active on Tuesdays, in the increasing order from 00:00-24:00. If this parameter omitted, the rule is deactivated on Tuesdays. API returns a formatted version of this string, which may cause Terraform drift if a unformatted value is used. */ tue?: string | null; /** Specify the time intervals when the rule is active on Wednesdays, in the increasing order from 00:00-24:00. If this parameter omitted, the rule is deactivated on Wednesdays. API returns a formatted version of this string, which may cause Terraform drift if a unformatted value is used. */ wed?: string | null; } export const GatewayRulesCreateResponseSchedule = /*@__PURE__*/ S.suspend(() => S.Struct({ fri: S.optional(S.NullOr(S.String)), mon: S.optional(S.NullOr(S.String)), sat: S.optional(S.NullOr(S.String)), sun: S.optional(S.NullOr(S.String)), thu: S.optional(S.NullOr(S.String)), timeZone: S.optional(S.NullOr(S.String).pipe(T.Body("time_zone"))), tue: S.optional(S.NullOr(S.String)), wed: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "GatewayRulesCreateResponseSchedule", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateGatewayRuleResponse { /** Specify the action to perform when the associated traffic, identity, and device posture expressions either absent or evaluate to `true`. */ action: GatewayRulesCreateResponseAction; /** Specify whether the rule is enabled. */ enabled: boolean; /** Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value. */ filters: GatewayRulesCreateResponseFiltersList; /** Specify the rule name. */ name: string; /** Set the order of your rules. Lower values indicate higher precedence. At each processing phase, evaluate applicable rules in ascending order of this value. Refer to [Order of enforcement](http://developers.cloudflare.com/learning-paths/secure-internet-traffic/understand-policies/order-of-enforcement/#manage-precedence-with-terraform) to manage precedence via Terraform. */ precedence: number; /** Specify the wirefilter expression used for traffic matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ traffic: string; /** Identify the API resource with a UUID. */ id?: string | null; createdAt?: string | null; /** Indicate the date of deletion, if any. */ deletedAt?: string | null; /** Specify the rule description. */ description?: string | null; /** Specify the wirefilter expression used for device posture check. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ devicePosture?: string | null; /** Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This does not apply to HTTP or network policies. Settable only for `dns` rules. */ expiration?: GatewayRulesCreateResponseExpiration | null; /** Specify the wirefilter expression used for identity matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ identity?: string | null; /** Indicate that this rule is shared via the Orgs API and read only. */ readOnly?: boolean | null; /** Defines settings for this rule. Settings apply only to specific rule types and must use compatible selectors. If Terraform detects drift, confirm the setting supports your rule type and check whether the API modifies the value. Use API-returned values in your configuration to prevent drift. */ ruleSettings?: GatewayRulesCreateResponseRuleSettings | null; /** Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules. */ schedule?: GatewayRulesCreateResponseSchedule | null; /** Indicate that this rule is sharable via the Orgs API. */ sharable?: boolean | null; /** Provide the account tag of the account that created the rule. */ sourceAccount?: string | null; updatedAt?: string | null; /** Indicate the version number of the rule(read-only). */ version?: number | null; /** Indicate a warning for a misconfigured rule, if any. */ warningStatus?: string | null; } export const CreateGatewayRuleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ action: GatewayRulesCreateResponseAction, enabled: S.Boolean, filters: GatewayRulesCreateResponseFiltersList, name: S.String, precedence: S.Number, traffic: S.String, id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), description: S.optional(S.NullOr(S.String)), devicePosture: S.optional( S.NullOr(S.String).pipe(T.Body("device_posture")), ), expiration: S.optional(S.NullOr(GatewayRulesCreateResponseExpiration)), identity: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), ruleSettings: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettings).pipe( T.Body("rule_settings"), ), ), schedule: S.optional(S.NullOr(GatewayRulesCreateResponseSchedule)), sharable: S.optional(S.NullOr(S.Boolean)), sourceAccount: S.optional( S.NullOr(S.String).pipe(T.Body("source_account")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), version: S.optional(S.NullOr(S.Number)), warningStatus: S.optional( S.NullOr(S.String).pipe(T.Body("warning_status")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateGatewayRuleResponse", }) as any as S.Schema; export type IdentityProvidersCreateRequestConfigAzureADClaimsList = Array; export const IdentityProvidersCreateRequestConfigAzureADClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersCreateRequestConfigAzureADPrompt = | "login" | "select_account" | "none"; export const IdentityProvidersCreateRequestConfigAzureADPrompt = /*@__PURE__*/ S.String; export interface IdentityProvidersCreateRequestConfigAzureAD { /** Custom claims */ claims?: IdentityProvidersCreateRequestConfigAzureADClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** Should Cloudflare try to load authentication contexts from your account */ conditionalAccessEnabled?: boolean; /** Your Azure directory uuid */ directoryId?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; /** Indicates the type of user interaction that is required. prompt=login forces the user to enter their credentials on that request, negating single-sign on. prompt=none is the opposite. It ensures that the user isn't presented with any interactive prompt. If the request can't be completed silently by using single-sign on, the Microsoft identity platform returns an interaction_required error. prompt=select_account interrupts single sign-on providing account selection experience listing all the accounts either in session or any remembered account or an option to choose to use a different account altogether. */ prompt?: IdentityProvidersCreateRequestConfigAzureADPrompt | (string & {}); /** Should Cloudflare try to load groups from your account */ supportGroups?: boolean; } export const IdentityProvidersCreateRequestConfigAzureAD = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional(IdentityProvidersCreateRequestConfigAzureADClaimsList), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), conditionalAccessEnabled: S.optional( S.Boolean.pipe(T.Body("conditional_access_enabled")), ), directoryId: S.optional(S.String.pipe(T.Body("directory_id"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), prompt: S.optional(IdentityProvidersCreateRequestConfigAzureADPrompt), supportGroups: S.optional(S.Boolean.pipe(T.Body("support_groups"))), }), ).annotate({ identifier: "IdentityProvidersCreateRequestConfigAzureAD", }) as any as S.Schema; export type IdentityProvidersCreateRequestConfigAccessCentrifyClaimsList = Array; export const IdentityProvidersCreateRequestConfigAccessCentrifyClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateRequestConfigAccessCentrify { /** Your centrify account url */ centrifyAccount?: string; /** Your centrify app id */ centrifyAppId?: string; /** Custom claims */ claims?: IdentityProvidersCreateRequestConfigAccessCentrifyClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; } export const IdentityProvidersCreateRequestConfigAccessCentrify = /*@__PURE__*/ S.suspend(() => S.Struct({ centrifyAccount: S.optional(S.String.pipe(T.Body("centrify_account"))), centrifyAppId: S.optional(S.String.pipe(T.Body("centrify_app_id"))), claims: S.optional( IdentityProvidersCreateRequestConfigAccessCentrifyClaimsList, ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), }), ).annotate({ identifier: "IdentityProvidersCreateRequestConfigAccessCentrify", }) as any as S.Schema; export interface IdentityProvidersCreateRequestConfigAccessFacebook { /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; } export const IdentityProvidersCreateRequestConfigAccessFacebook = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), }), ).annotate({ identifier: "IdentityProvidersCreateRequestConfigAccessFacebook", }) as any as S.Schema; export type IdentityProvidersCreateRequestConfigAccessGoogleClaimsList = Array; export const IdentityProvidersCreateRequestConfigAccessGoogleClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateRequestConfigAccessGoogle { /** Custom claims */ claims?: IdentityProvidersCreateRequestConfigAccessGoogleClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; } export const IdentityProvidersCreateRequestConfigAccessGoogle = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( IdentityProvidersCreateRequestConfigAccessGoogleClaimsList, ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), }), ).annotate({ identifier: "IdentityProvidersCreateRequestConfigAccessGoogle", }) as any as S.Schema; export type IdentityProvidersCreateRequestConfigAccessGoogleAppsClaimsList = Array; export const IdentityProvidersCreateRequestConfigAccessGoogleAppsClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateRequestConfigAccessGoogleApps { /** Your companies TLD */ appsDomain?: string; /** Custom claims */ claims?: IdentityProvidersCreateRequestConfigAccessGoogleAppsClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; } export const IdentityProvidersCreateRequestConfigAccessGoogleApps = /*@__PURE__*/ S.suspend(() => S.Struct({ appsDomain: S.optional(S.String.pipe(T.Body("apps_domain"))), claims: S.optional( IdentityProvidersCreateRequestConfigAccessGoogleAppsClaimsList, ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), }), ).annotate({ identifier: "IdentityProvidersCreateRequestConfigAccessGoogleApps", }) as any as S.Schema; export type IdentityProvidersCreateRequestConfigAccessOIDCClaimsList = Array; export const IdentityProvidersCreateRequestConfigAccessOIDCClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersCreateRequestConfigAccessOIDCScopesList = Array; export const IdentityProvidersCreateRequestConfigAccessOIDCScopesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateRequestConfigAccessOIDC { /** The authorization_endpoint URL of your IdP */ authUrl?: string; /** The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens */ certsUrl?: string; /** Custom claims */ claims?: IdentityProvidersCreateRequestConfigAccessOIDCClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; /** Enable Proof Key for Code Exchange (PKCE) */ pkceEnabled?: boolean; /** OAuth scopes */ scopes?: IdentityProvidersCreateRequestConfigAccessOIDCScopesList; /** The token_endpoint URL of your IdP */ tokenUrl?: string; } export const IdentityProvidersCreateRequestConfigAccessOIDC = /*@__PURE__*/ S.suspend(() => S.Struct({ authUrl: S.optional(S.String.pipe(T.Body("auth_url"))), certsUrl: S.optional(S.String.pipe(T.Body("certs_url"))), claims: S.optional( IdentityProvidersCreateRequestConfigAccessOIDCClaimsList, ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), pkceEnabled: S.optional(S.Boolean.pipe(T.Body("pkce_enabled"))), scopes: S.optional( IdentityProvidersCreateRequestConfigAccessOIDCScopesList, ), tokenUrl: S.optional(S.String.pipe(T.Body("token_url"))), }), ).annotate({ identifier: "IdentityProvidersCreateRequestConfigAccessOIDC", }) as any as S.Schema; export type IdentityProvidersCreateRequestConfigAccessOktaClaimsList = Array; export const IdentityProvidersCreateRequestConfigAccessOktaClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateRequestConfigAccessOkta { /** Your okta authorization server id */ authorizationServerId?: string; /** Custom claims */ claims?: IdentityProvidersCreateRequestConfigAccessOktaClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; /** Your okta account url */ oktaAccount?: string; } export const IdentityProvidersCreateRequestConfigAccessOkta = /*@__PURE__*/ S.suspend(() => S.Struct({ authorizationServerId: S.optional( S.String.pipe(T.Body("authorization_server_id")), ), claims: S.optional( IdentityProvidersCreateRequestConfigAccessOktaClaimsList, ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), oktaAccount: S.optional(S.String.pipe(T.Body("okta_account"))), }), ).annotate({ identifier: "IdentityProvidersCreateRequestConfigAccessOkta", }) as any as S.Schema; export type IdentityProvidersCreateRequestConfigAccessOneloginClaimsList = Array; export const IdentityProvidersCreateRequestConfigAccessOneloginClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateRequestConfigAccessOnelogin { /** Custom claims */ claims?: IdentityProvidersCreateRequestConfigAccessOneloginClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; /** Your OneLogin account url */ oneloginAccount?: string; } export const IdentityProvidersCreateRequestConfigAccessOnelogin = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( IdentityProvidersCreateRequestConfigAccessOneloginClaimsList, ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), oneloginAccount: S.optional(S.String.pipe(T.Body("onelogin_account"))), }), ).annotate({ identifier: "IdentityProvidersCreateRequestConfigAccessOnelogin", }) as any as S.Schema; export type IdentityProvidersCreateRequestConfigAccessPingoneClaimsList = Array; export const IdentityProvidersCreateRequestConfigAccessPingoneClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateRequestConfigAccessPingone { /** Custom claims */ claims?: IdentityProvidersCreateRequestConfigAccessPingoneClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; /** Your PingOne environment identifier */ pingEnvId?: string; } export const IdentityProvidersCreateRequestConfigAccessPingone = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( IdentityProvidersCreateRequestConfigAccessPingoneClaimsList, ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), pingEnvId: S.optional(S.String.pipe(T.Body("ping_env_id"))), }), ).annotate({ identifier: "IdentityProvidersCreateRequestConfigAccessPingone", }) as any as S.Schema; export type IdentityProvidersCreateRequestConfigAccessSAMLAttributesList = Array; export const IdentityProvidersCreateRequestConfigAccessSAMLAttributesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateRequestConfigAccessSAMLHeaderAttributesItem { /** attribute name from the IDP */ attributeName?: string; /** header that will be added on the request to the origin */ headerName?: string; } export const IdentityProvidersCreateRequestConfigAccessSAMLHeaderAttributesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ attributeName: S.optional(S.String.pipe(T.Body("attribute_name"))), headerName: S.optional(S.String.pipe(T.Body("header_name"))), }), ).annotate({ identifier: "IdentityProvidersCreateRequestConfigAccessSAMLHeaderAttributesItem", }) as any as S.Schema; export type IdentityProvidersCreateRequestConfigAccessSAMLHeaderAttributesList = Array; export const IdentityProvidersCreateRequestConfigAccessSAMLHeaderAttributesList = /*@__PURE__*/ S.Array( IdentityProvidersCreateRequestConfigAccessSAMLHeaderAttributesItem, ) as any as S.Schema; export type IdentityProvidersCreateRequestConfigAccessSAMLIdpPublicCertsList = Array; export const IdentityProvidersCreateRequestConfigAccessSAMLIdpPublicCertsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateRequestConfigAccessSAML { /** A list of SAML attribute names that will be added to your signed JWT token and can be used in SAML policy rules. */ attributes?: IdentityProvidersCreateRequestConfigAccessSAMLAttributesList; /** The attribute name for email in the SAML response. */ emailAttributeName?: string; /** Enable SAML assertion encryption. When enabled, the Identity Provider will encrypt */ enableEncryption?: boolean; /** Add a list of attribute names that will be returned in the response header from the Access callback. */ headerAttributes?: IdentityProvidersCreateRequestConfigAccessSAMLHeaderAttributesList; /** X509 certificate to verify the signature in the SAML authentication response */ idpPublicCerts?: IdentityProvidersCreateRequestConfigAccessSAMLIdpPublicCertsList; /** IdP Entity ID or Issuer URL */ issuerUrl?: string; /** Sign the SAML authentication request with Access credentials. To verify the signature, use the public key from the Access certs endpoints. */ signRequest?: boolean; /** URL to send the SAML authentication requests to */ ssoTargetUrl?: string; } export const IdentityProvidersCreateRequestConfigAccessSAML = /*@__PURE__*/ S.suspend(() => S.Struct({ attributes: S.optional( IdentityProvidersCreateRequestConfigAccessSAMLAttributesList, ), emailAttributeName: S.optional( S.String.pipe(T.Body("email_attribute_name")), ), enableEncryption: S.optional(S.Boolean.pipe(T.Body("enable_encryption"))), headerAttributes: S.optional( IdentityProvidersCreateRequestConfigAccessSAMLHeaderAttributesList.pipe( T.Body("header_attributes"), ), ), idpPublicCerts: S.optional( IdentityProvidersCreateRequestConfigAccessSAMLIdpPublicCertsList.pipe( T.Body("idp_public_certs"), ), ), issuerUrl: S.optional(S.String.pipe(T.Body("issuer_url"))), signRequest: S.optional(S.Boolean.pipe(T.Body("sign_request"))), ssoTargetUrl: S.optional(S.String.pipe(T.Body("sso_target_url"))), }), ).annotate({ identifier: "IdentityProvidersCreateRequestConfigAccessSAML", }) as any as S.Schema; export interface IdentityProvidersCreateRequestConfigAccessOnetimepin { redirectUrl?: string; } export const IdentityProvidersCreateRequestConfigAccessOnetimepin = /*@__PURE__*/ S.suspend(() => S.Struct({ redirectUrl: S.optional(S.String.pipe(T.Body("redirect_url"))), }), ).annotate({ identifier: "IdentityProvidersCreateRequestConfigAccessOnetimepin", }) as any as S.Schema; export interface IdentityProvidersCreateRequestConfigAccessCloudflare { redirectUrl?: string; /** When enabled, only users who are members of your Cloudflare account can authenticate through this identity provider. When disabled, any user with a Cloudflare account can authenticate, subject to your Access policies. */ restrictToAccountMembers?: boolean; } export const IdentityProvidersCreateRequestConfigAccessCloudflare = /*@__PURE__*/ S.suspend(() => S.Struct({ redirectUrl: S.optional(S.String.pipe(T.Body("redirect_url"))), restrictToAccountMembers: S.optional( S.Boolean.pipe(T.Body("restrict_to_account_members")), ), }), ).annotate({ identifier: "IdentityProvidersCreateRequestConfigAccessCloudflare", }) as any as S.Schema; export type IdentityProvidersCreateRequestConfig = | IdentityProvidersCreateRequestConfigAzureAD | IdentityProvidersCreateRequestConfigAccessCentrify | IdentityProvidersCreateRequestConfigAccessFacebook | IdentityProvidersCreateRequestConfigAccessGoogle | IdentityProvidersCreateRequestConfigAccessGoogleApps | IdentityProvidersCreateRequestConfigAccessOIDC | IdentityProvidersCreateRequestConfigAccessOkta | IdentityProvidersCreateRequestConfigAccessOnelogin | IdentityProvidersCreateRequestConfigAccessPingone | IdentityProvidersCreateRequestConfigAccessSAML | IdentityProvidersCreateRequestConfigAccessOnetimepin | IdentityProvidersCreateRequestConfigAccessCloudflare; export const IdentityProvidersCreateRequestConfig = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "claims", "clientId", "clientSecret", "conditionalAccessEnabled", "directoryId", "emailClaimName", "prompt", "supportGroups", ], [ "centrifyAccount", "centrifyAppId", "claims", "clientId", "clientSecret", "emailClaimName", ], ["clientId", "clientSecret"], ["claims", "clientId", "clientSecret", "emailClaimName"], ["appsDomain", "claims", "clientId", "clientSecret", "emailClaimName"], [ "authUrl", "certsUrl", "claims", "clientId", "clientSecret", "emailClaimName", "pkceEnabled", "scopes", "tokenUrl", ], [ "authorizationServerId", "claims", "clientId", "clientSecret", "emailClaimName", "oktaAccount", ], [ "claims", "clientId", "clientSecret", "emailClaimName", "oneloginAccount", ], ["claims", "clientId", "clientSecret", "emailClaimName", "pingEnvId"], [ "attributes", "emailAttributeName", "enableEncryption", "headerAttributes", "idpPublicCerts", "issuerUrl", "signRequest", "ssoTargetUrl", ], ["redirectUrl"], ["redirectUrl", "restrictToAccountMembers"], ]), ); export type IdentityProvidersCreateRequestTypeAzureAD = | "onetimepin" | "azureAD" | "saml" | "centrify" | "facebook" | "github" | "google-apps" | "google" | "linkedin" | "oidc" | "okta" | "onelogin" | "pingone" | "yandex" | "cloudflare"; export const IdentityProvidersCreateRequestTypeAzureAD = /*@__PURE__*/ S.String; export interface IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate { /** Indicates whether this is the currently active certificate */ isCurrent: boolean; /** Certificate expiration date. Certificates are automatically rotated 30 days before expiration. */ notAfter: string; /** PEM-encoded X.509 certificate containing the public key. */ publicCertificate: string; /** Unique identifier for the certificate */ uid: string; } export const IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate = /*@__PURE__*/ S.suspend(() => S.Struct({ isCurrent: S.Boolean.pipe(T.Body("is_current")), notAfter: S.String.pipe(T.Body("not_after")), publicCertificate: S.String.pipe(T.Body("public_certificate")), uid: S.String, }), ).annotate({ identifier: "IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate", }) as any as S.Schema; export interface IdentityProvidersCreateRequestSamlCertificateSet { /** Timestamp when the certificate set was created */ createdAt: string; /** Unique identifier for the certificate set */ uid: string; /** Timestamp when the certificate set was last updated (e.g., during rotation) */ updatedAt: string; /** The currently active certificate used for encrypting SAML assertions */ currentCertificate?: IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; /** The previous certificate, maintained during rotation to ensure continuity. Null if no rotation has occurred. Mirrors the structure of `saml_certificate`. */ previousCertificate?: unknown; } export const IdentityProvidersCreateRequestSamlCertificateSet = /*@__PURE__*/ S.suspend(() => S.Struct({ createdAt: S.String.pipe(T.Body("created_at")), uid: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), currentCertificate: S.optional( IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate.pipe( T.Body("current_certificate"), ), ), previousCertificate: S.optional( S.Unknown.pipe(T.Body("previous_certificate")), ), }), ).annotate({ identifier: "IdentityProvidersCreateRequestSamlCertificateSet", }) as any as S.Schema; export type IdentityProvidersCreateRequestScimConfigAzureADIdentityUpdateBehavior = | "automatic" | "reauth" | "no_action"; export const IdentityProvidersCreateRequestScimConfigAzureADIdentityUpdateBehavior = /*@__PURE__*/ S.String; export interface IdentityProvidersCreateRequestScimConfigAzureAD { /** A flag to enable or disable SCIM for the identity provider. */ enabled?: boolean; /** Indicates how a SCIM event updates a user identity used for policy evaluation. Use "automatic" to automatically update a user's identity and augment it with fields from the SCIM user resource. Use "reauth" to force re-authentication on group membership updates, user identity update will only occur after successful re-authentication. With "reauth" identities will not contain fields from the SCIM user resource. With "no_action" identities will not be changed by SCIM updates in any way and users will not be prompted to reauthenticate. */ identityUpdateBehavior?: | IdentityProvidersCreateRequestScimConfigAzureADIdentityUpdateBehavior | (string & {}); /** The base URL of Cloudflare's SCIM V2.0 API endpoint. */ scimBaseUrl?: string; /** A flag to remove a user's seat in Zero Trust when they have been deprovisioned in the Identity Provider. This cannot be enabled unless user_deprovision is also enabled. */ seatDeprovision?: boolean; /** A read-only token generated when the SCIM integration is enabled for the first time. It is redacted on subsequent requests. If you lose this you will need to refresh it at /access/identity_providers/:idpID/refresh_scim_secret. */ secret?: string; /** A flag to enable revoking a user's session in Access and Gateway when they have been deprovisioned in the Identity Provider. */ userDeprovision?: boolean; } export const IdentityProvidersCreateRequestScimConfigAzureAD = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), identityUpdateBehavior: S.optional( IdentityProvidersCreateRequestScimConfigAzureADIdentityUpdateBehavior.pipe( T.Body("identity_update_behavior"), ), ), scimBaseUrl: S.optional(S.String.pipe(T.Body("scim_base_url"))), seatDeprovision: S.optional(S.Boolean.pipe(T.Body("seat_deprovision"))), secret: S.optional(S.String), userDeprovision: S.optional(S.Boolean.pipe(T.Body("user_deprovision"))), }), ).annotate({ identifier: "IdentityProvidersCreateRequestScimConfigAzureAD", }) as any as S.Schema; export interface CreateIdentityProviderForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateRequestConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersCreateRequestTypeAzureAD | (string & {}); /** UUID. */ id?: string; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateRequestSamlCertificateSet; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersCreateRequestScimConfigAzureAD; } export const CreateIdentityProviderForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), config: IdentityProvidersCreateRequestConfig, name: S.String, type: IdentityProvidersCreateRequestTypeAzureAD, id: S.optional(S.String), readOnly: S.optional(S.Boolean.pipe(T.Body("read_only"))), samlCertificateSet: S.optional( IdentityProvidersCreateRequestSamlCertificateSet.pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.String.pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( IdentityProvidersCreateRequestScimConfigAzureAD.pipe( T.Body("scim_config"), ), ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/identity_providers", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateIdentityProviderForAccountRequest", }) as any as S.Schema; export type IdentityProvidersCreateResultAzureADConfigClaimsList = Array; export const IdentityProvidersCreateResultAzureADConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersCreateResultAzureADConfigPrompt = | "login" | "select_account" | "none"; export const IdentityProvidersCreateResultAzureADConfigPrompt = /*@__PURE__*/ S.String; export interface IdentityProvidersCreateResultAzureADConfig { /** Custom claims */ claims?: IdentityProvidersCreateResultAzureADConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** Should Cloudflare try to load authentication contexts from your account */ conditionalAccessEnabled?: boolean | null; /** Your Azure directory uuid */ directoryId?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Indicates the type of user interaction that is required. prompt=login forces the user to enter their credentials on that request, negating single-sign on. prompt=none is the opposite. It ensures that the user isn't presented with any interactive prompt. If the request can't be completed silently by using single-sign on, the Microsoft identity platform returns an interaction_required error. prompt=select_account interrupts single sign-on providing account selection experience listing all the accounts either in session or any remembered account or an option to choose to use a different account altogether. */ prompt?: IdentityProvidersCreateResultAzureADConfigPrompt | null; /** Should Cloudflare try to load groups from your account */ supportGroups?: boolean | null; } export const IdentityProvidersCreateResultAzureADConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), conditionalAccessEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("conditional_access_enabled")), ), directoryId: S.optional(S.NullOr(S.String).pipe(T.Body("directory_id"))), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), prompt: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADConfigPrompt), ), supportGroups: S.optional( S.NullOr(S.Boolean).pipe(T.Body("support_groups")), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAzureADConfig", }) as any as S.Schema; export type IdentityProvidersCreateResultAzureADType = | "onetimepin" | "azureAD" | "saml" | "centrify" | "facebook" | "github" | "google-apps" | "google" | "linkedin" | "oidc" | "okta" | "onelogin" | "pingone" | "yandex" | "cloudflare"; export const IdentityProvidersCreateResultAzureADType = /*@__PURE__*/ S.String; export type IdentityProvidersCreateResultAzureADSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersCreateResultAzureADSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export interface IdentityProvidersCreateResultAzureADSamlCertificateSet { /** Timestamp when the certificate set was created */ createdAt: string; /** Unique identifier for the certificate set */ uid: string; /** Timestamp when the certificate set was last updated (e.g., during rotation) */ updatedAt: string; /** The currently active certificate used for encrypting SAML assertions */ currentCertificate?: IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate | null; /** The previous certificate, maintained during rotation to ensure continuity. Null if no rotation has occurred. Mirrors the structure of `saml_certificate`. */ previousCertificate?: unknown | null; } export const IdentityProvidersCreateResultAzureADSamlCertificateSet = /*@__PURE__*/ S.suspend(() => S.Struct({ createdAt: S.String.pipe(T.Body("created_at")), uid: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), currentCertificate: S.optional( S.NullOr( IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate, ).pipe(T.Body("current_certificate")), ), previousCertificate: S.optional( S.NullOr(S.Unknown).pipe(T.Body("previous_certificate")), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAzureADSamlCertificateSet", }) as any as S.Schema; export type IdentityProvidersCreateResultAzureADScimConfigIdentityUpdateBehavior = | "automatic" | "reauth" | "no_action"; export const IdentityProvidersCreateResultAzureADScimConfigIdentityUpdateBehavior = /*@__PURE__*/ S.String; export interface IdentityProvidersCreateResultAzureADScimConfig { /** A flag to enable or disable SCIM for the identity provider. */ enabled?: boolean | null; /** Indicates how a SCIM event updates a user identity used for policy evaluation. Use "automatic" to automatically update a user's identity and augment it with fields from the SCIM user resource. Use "reauth" to force re-authentication on group membership updates, user identity update will only occur after successful re-authentication. With "reauth" identities will not contain fields from the SCIM user resource. With "no_action" identities will not be changed by SCIM updates in any way and users will not be prompted to reauthenticate. */ identityUpdateBehavior?: IdentityProvidersCreateResultAzureADScimConfigIdentityUpdateBehavior | null; /** The base URL of Cloudflare's SCIM V2.0 API endpoint. */ scimBaseUrl?: string | null; /** A flag to remove a user's seat in Zero Trust when they have been deprovisioned in the Identity Provider. This cannot be enabled unless user_deprovision is also enabled. */ seatDeprovision?: boolean | null; /** A read-only token generated when the SCIM integration is enabled for the first time. It is redacted on subsequent requests. If you lose this you will need to refresh it at /access/identity_providers/:idpID/refresh_scim_secret. */ secret?: string | null; /** A flag to enable revoking a user's session in Access and Gateway when they have been deprovisioned in the Identity Provider. */ userDeprovision?: boolean | null; } export const IdentityProvidersCreateResultAzureADScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), identityUpdateBehavior: S.optional( S.NullOr( IdentityProvidersCreateResultAzureADScimConfigIdentityUpdateBehavior, ).pipe(T.Body("identity_update_behavior")), ), scimBaseUrl: S.optional(S.NullOr(S.String).pipe(T.Body("scim_base_url"))), seatDeprovision: S.optional( S.NullOr(S.Boolean).pipe(T.Body("seat_deprovision")), ), secret: S.optional(S.NullOr(S.String)), userDeprovision: S.optional( S.NullOr(S.Boolean).pipe(T.Body("user_deprovision")), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAzureADScimConfig", }) as any as S.Schema; export interface IdentityProvidersCreateResultAzureAD { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAzureADConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersCreateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersCreateResultAzureADScimConfig | null; } export const IdentityProvidersCreateResultAzureAD = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersCreateResultAzureADConfig, name: S.String, type: IdentityProvidersCreateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAzureAD", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessCentrifyConfigClaimsList = Array; export const IdentityProvidersCreateResultAccessCentrifyConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateResultAccessCentrifyConfig { /** Your centrify account url */ centrifyAccount?: string | null; /** Your centrify app id */ centrifyAppId?: string | null; /** Custom claims */ claims?: IdentityProvidersCreateResultAccessCentrifyConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; } export const IdentityProvidersCreateResultAccessCentrifyConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ centrifyAccount: S.optional( S.NullOr(S.String).pipe(T.Body("centrify_account")), ), centrifyAppId: S.optional( S.NullOr(S.String).pipe(T.Body("centrify_app_id")), ), claims: S.optional( S.NullOr(IdentityProvidersCreateResultAccessCentrifyConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessCentrifyConfig", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessCentrifySamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersCreateResultAccessCentrifySamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersCreateResultAccessCentrifySamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersCreateResultAccessCentrifySamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersCreateResultAccessCentrify { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessCentrifyConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersCreateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersCreateResultAzureADScimConfig | null; } export const IdentityProvidersCreateResultAccessCentrify = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessCentrifyConfig, name: S.String, type: IdentityProvidersCreateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessCentrify", }) as any as S.Schema; export interface IdentityProvidersCreateResultAccessFacebookConfig { /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; } export const IdentityProvidersCreateResultAccessFacebookConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessFacebookConfig", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessFacebookSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersCreateResultAccessFacebookSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersCreateResultAccessFacebookSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersCreateResultAccessFacebookSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersCreateResultAccessFacebook { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessFacebookConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersCreateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersCreateResultAzureADScimConfig | null; } export const IdentityProvidersCreateResultAccessFacebook = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessFacebookConfig, name: S.String, type: IdentityProvidersCreateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessFacebook", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessGitHubSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersCreateResultAccessGitHubSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersCreateResultAccessGitHubSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersCreateResultAccessGitHubSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export type IdentityProvidersCreateResultAccessGitHub = IdentityProvidersCreateResultAccessFacebook; export const IdentityProvidersCreateResultAccessGitHub = IdentityProvidersCreateResultAccessFacebook; export type IdentityProvidersCreateResultAccessGoogleConfigClaimsList = Array; export const IdentityProvidersCreateResultAccessGoogleConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateResultAccessGoogleConfig { /** Custom claims */ claims?: IdentityProvidersCreateResultAccessGoogleConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; } export const IdentityProvidersCreateResultAccessGoogleConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersCreateResultAccessGoogleConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessGoogleConfig", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessGoogleSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersCreateResultAccessGoogleSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersCreateResultAccessGoogleSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersCreateResultAccessGoogleSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersCreateResultAccessGoogle { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessGoogleConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersCreateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersCreateResultAzureADScimConfig | null; } export const IdentityProvidersCreateResultAccessGoogle = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessGoogleConfig, name: S.String, type: IdentityProvidersCreateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessGoogle", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessGoogleAppsConfigClaimsList = Array; export const IdentityProvidersCreateResultAccessGoogleAppsConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateResultAccessGoogleAppsConfig { /** Your companies TLD */ appsDomain?: string | null; /** Custom claims */ claims?: IdentityProvidersCreateResultAccessGoogleAppsConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; } export const IdentityProvidersCreateResultAccessGoogleAppsConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ appsDomain: S.optional(S.NullOr(S.String).pipe(T.Body("apps_domain"))), claims: S.optional( S.NullOr(IdentityProvidersCreateResultAccessGoogleAppsConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessGoogleAppsConfig", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessGoogleAppsSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersCreateResultAccessGoogleAppsSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersCreateResultAccessGoogleAppsSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersCreateResultAccessGoogleAppsSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersCreateResultAccessGoogleApps { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessGoogleAppsConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersCreateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersCreateResultAzureADScimConfig | null; } export const IdentityProvidersCreateResultAccessGoogleApps = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessGoogleAppsConfig, name: S.String, type: IdentityProvidersCreateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessGoogleApps", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessLinkedinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersCreateResultAccessLinkedinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersCreateResultAccessLinkedinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersCreateResultAccessLinkedinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export type IdentityProvidersCreateResultAccessLinkedin = IdentityProvidersCreateResultAccessFacebook; export const IdentityProvidersCreateResultAccessLinkedin = IdentityProvidersCreateResultAccessFacebook; export type IdentityProvidersCreateResultAccessOIDCConfigClaimsList = Array; export const IdentityProvidersCreateResultAccessOIDCConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersCreateResultAccessOIDCConfigScopesList = Array; export const IdentityProvidersCreateResultAccessOIDCConfigScopesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateResultAccessOIDCConfig { /** The authorization_endpoint URL of your IdP */ authUrl?: string | null; /** The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens */ certsUrl?: string | null; /** Custom claims */ claims?: IdentityProvidersCreateResultAccessOIDCConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Enable Proof Key for Code Exchange (PKCE) */ pkceEnabled?: boolean | null; /** OAuth scopes */ scopes?: IdentityProvidersCreateResultAccessOIDCConfigScopesList | null; /** The token_endpoint URL of your IdP */ tokenUrl?: string | null; } export const IdentityProvidersCreateResultAccessOIDCConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ authUrl: S.optional(S.NullOr(S.String).pipe(T.Body("auth_url"))), certsUrl: S.optional(S.NullOr(S.String).pipe(T.Body("certs_url"))), claims: S.optional( S.NullOr(IdentityProvidersCreateResultAccessOIDCConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), pkceEnabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("pkce_enabled"))), scopes: S.optional( S.NullOr(IdentityProvidersCreateResultAccessOIDCConfigScopesList), ), tokenUrl: S.optional(S.NullOr(S.String).pipe(T.Body("token_url"))), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessOIDCConfig", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessOIDCSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersCreateResultAccessOIDCSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersCreateResultAccessOIDCSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersCreateResultAccessOIDCSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersCreateResultAccessOIDC { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessOIDCConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersCreateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersCreateResultAzureADScimConfig | null; } export const IdentityProvidersCreateResultAccessOIDC = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersCreateResultAccessOIDCConfig, name: S.String, type: IdentityProvidersCreateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessOIDC", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessOktaConfigClaimsList = Array; export const IdentityProvidersCreateResultAccessOktaConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateResultAccessOktaConfig { /** Your okta authorization server id */ authorizationServerId?: string | null; /** Custom claims */ claims?: IdentityProvidersCreateResultAccessOktaConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Your okta account url */ oktaAccount?: string | null; } export const IdentityProvidersCreateResultAccessOktaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ authorizationServerId: S.optional( S.NullOr(S.String).pipe(T.Body("authorization_server_id")), ), claims: S.optional( S.NullOr(IdentityProvidersCreateResultAccessOktaConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), oktaAccount: S.optional(S.NullOr(S.String).pipe(T.Body("okta_account"))), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessOktaConfig", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessOktaSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersCreateResultAccessOktaSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersCreateResultAccessOktaSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersCreateResultAccessOktaSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersCreateResultAccessOkta { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessOktaConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersCreateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersCreateResultAzureADScimConfig | null; } export const IdentityProvidersCreateResultAccessOkta = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersCreateResultAccessOktaConfig, name: S.String, type: IdentityProvidersCreateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessOkta", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessOneloginConfigClaimsList = Array; export const IdentityProvidersCreateResultAccessOneloginConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateResultAccessOneloginConfig { /** Custom claims */ claims?: IdentityProvidersCreateResultAccessOneloginConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Your OneLogin account url */ oneloginAccount?: string | null; } export const IdentityProvidersCreateResultAccessOneloginConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersCreateResultAccessOneloginConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), oneloginAccount: S.optional( S.NullOr(S.String).pipe(T.Body("onelogin_account")), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessOneloginConfig", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessOneloginSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersCreateResultAccessOneloginSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersCreateResultAccessOneloginSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersCreateResultAccessOneloginSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersCreateResultAccessOnelogin { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessOneloginConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersCreateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersCreateResultAzureADScimConfig | null; } export const IdentityProvidersCreateResultAccessOnelogin = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessOneloginConfig, name: S.String, type: IdentityProvidersCreateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessOnelogin", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessPingoneConfigClaimsList = Array; export const IdentityProvidersCreateResultAccessPingoneConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateResultAccessPingoneConfig { /** Custom claims */ claims?: IdentityProvidersCreateResultAccessPingoneConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Your PingOne environment identifier */ pingEnvId?: string | null; } export const IdentityProvidersCreateResultAccessPingoneConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersCreateResultAccessPingoneConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), pingEnvId: S.optional(S.NullOr(S.String).pipe(T.Body("ping_env_id"))), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessPingoneConfig", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessPingoneSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersCreateResultAccessPingoneSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersCreateResultAccessPingoneSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersCreateResultAccessPingoneSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersCreateResultAccessPingone { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessPingoneConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersCreateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersCreateResultAzureADScimConfig | null; } export const IdentityProvidersCreateResultAccessPingone = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessPingoneConfig, name: S.String, type: IdentityProvidersCreateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessPingone", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessSAMLConfigAttributesList = Array; export const IdentityProvidersCreateResultAccessSAMLConfigAttributesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesItem { /** attribute name from the IDP */ attributeName?: string | null; /** header that will be added on the request to the origin */ headerName?: string | null; } export const IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ attributeName: S.optional( S.NullOr(S.String).pipe(T.Body("attribute_name")), ), headerName: S.optional(S.NullOr(S.String).pipe(T.Body("header_name"))), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesItem", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesList = Array; export const IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesList = /*@__PURE__*/ S.Array( IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesItem, ) as any as S.Schema; export type IdentityProvidersCreateResultAccessSAMLConfigIdpPublicCertsList = Array; export const IdentityProvidersCreateResultAccessSAMLConfigIdpPublicCertsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersCreateResultAccessSAMLConfig { /** A list of SAML attribute names that will be added to your signed JWT token and can be used in SAML policy rules. */ attributes?: IdentityProvidersCreateResultAccessSAMLConfigAttributesList | null; /** The attribute name for email in the SAML response. */ emailAttributeName?: string | null; /** Enable SAML assertion encryption. When enabled, the Identity Provider will encrypt */ enableEncryption?: boolean | null; /** Add a list of attribute names that will be returned in the response header from the Access callback. */ headerAttributes?: IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesList | null; /** X509 certificate to verify the signature in the SAML authentication response */ idpPublicCerts?: IdentityProvidersCreateResultAccessSAMLConfigIdpPublicCertsList | null; /** IdP Entity ID or Issuer URL */ issuerUrl?: string | null; /** Sign the SAML authentication request with Access credentials. To verify the signature, use the public key from the Access certs endpoints. */ signRequest?: boolean | null; /** URL to send the SAML authentication requests to */ ssoTargetUrl?: string | null; } export const IdentityProvidersCreateResultAccessSAMLConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ attributes: S.optional( S.NullOr(IdentityProvidersCreateResultAccessSAMLConfigAttributesList), ), emailAttributeName: S.optional( S.NullOr(S.String).pipe(T.Body("email_attribute_name")), ), enableEncryption: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_encryption")), ), headerAttributes: S.optional( S.NullOr( IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesList, ).pipe(T.Body("header_attributes")), ), idpPublicCerts: S.optional( S.NullOr( IdentityProvidersCreateResultAccessSAMLConfigIdpPublicCertsList, ).pipe(T.Body("idp_public_certs")), ), issuerUrl: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_url"))), signRequest: S.optional(S.NullOr(S.Boolean).pipe(T.Body("sign_request"))), ssoTargetUrl: S.optional( S.NullOr(S.String).pipe(T.Body("sso_target_url")), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessSAMLConfig", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessSAMLSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersCreateResultAccessSAMLSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersCreateResultAccessSAMLSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersCreateResultAccessSAMLSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersCreateResultAccessSAML { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessSAMLConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersCreateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersCreateResultAzureADScimConfig | null; } export const IdentityProvidersCreateResultAccessSAML = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersCreateResultAccessSAMLConfig, name: S.String, type: IdentityProvidersCreateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessSAML", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessYandexSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersCreateResultAccessYandexSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersCreateResultAccessYandexSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersCreateResultAccessYandexSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export type IdentityProvidersCreateResultAccessYandex = IdentityProvidersCreateResultAccessFacebook; export const IdentityProvidersCreateResultAccessYandex = IdentityProvidersCreateResultAccessFacebook; export interface IdentityProvidersCreateResultAccessOnetimepinConfig { redirectUrl?: string | null; } export const IdentityProvidersCreateResultAccessOnetimepinConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ redirectUrl: S.optional(S.NullOr(S.String).pipe(T.Body("redirect_url"))), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessOnetimepinConfig", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessOnetimepinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersCreateResultAccessOnetimepinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersCreateResultAccessOnetimepinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersCreateResultAccessOnetimepinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersCreateResultAccessOnetimepin { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessOnetimepinConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersCreateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersCreateResultAzureADScimConfig | null; } export const IdentityProvidersCreateResultAccessOnetimepin = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessOnetimepinConfig, name: S.String, type: IdentityProvidersCreateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessOnetimepin", }) as any as S.Schema; export interface IdentityProvidersCreateResultAccessCloudflareConfig { redirectUrl?: string | null; /** When enabled, only users who are members of your Cloudflare account can authenticate through this identity provider. When disabled, any user with a Cloudflare account can authenticate, subject to your Access policies. */ restrictToAccountMembers?: boolean | null; } export const IdentityProvidersCreateResultAccessCloudflareConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ redirectUrl: S.optional(S.NullOr(S.String).pipe(T.Body("redirect_url"))), restrictToAccountMembers: S.optional( S.NullOr(S.Boolean).pipe(T.Body("restrict_to_account_members")), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessCloudflareConfig", }) as any as S.Schema; export type IdentityProvidersCreateResultAccessCloudflareSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersCreateResultAccessCloudflareSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersCreateResultAccessCloudflareSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersCreateResultAccessCloudflareSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersCreateResultAccessCloudflare { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessCloudflareConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersCreateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersCreateResultAzureADScimConfig | null; } export const IdentityProvidersCreateResultAccessCloudflare = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessCloudflareConfig, name: S.String, type: IdentityProvidersCreateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersCreateResultAccessCloudflare", }) as any as S.Schema; export type IdentityProvidersCreateResult = | IdentityProvidersCreateResultAzureAD | IdentityProvidersCreateResultAccessCentrify | IdentityProvidersCreateResultAccessFacebook | IdentityProvidersCreateResultAccessFacebook | IdentityProvidersCreateResultAccessGoogle | IdentityProvidersCreateResultAccessGoogleApps | IdentityProvidersCreateResultAccessFacebook | IdentityProvidersCreateResultAccessOIDC | IdentityProvidersCreateResultAccessOkta | IdentityProvidersCreateResultAccessOnelogin | IdentityProvidersCreateResultAccessPingone | IdentityProvidersCreateResultAccessSAML | IdentityProvidersCreateResultAccessFacebook | IdentityProvidersCreateResultAccessOnetimepin | IdentityProvidersCreateResultAccessCloudflare; export const IdentityProvidersCreateResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], ]), ); export type CreateIdentityProviderResponse = IdentityProvidersCreateResult; export const CreateIdentityProviderResponse = /*@__PURE__*/ S.suspend(() => IdentityProvidersCreateResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "CreateIdentityProviderResponse", }) as any as S.Schema; export interface CreateIdentityProviderForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateRequestConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersCreateRequestTypeAzureAD | (string & {}); /** UUID. */ id?: string; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateRequestSamlCertificateSet; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersCreateRequestScimConfigAzureAD; } export const CreateIdentityProviderForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), config: IdentityProvidersCreateRequestConfig, name: S.String, type: IdentityProvidersCreateRequestTypeAzureAD, id: S.optional(S.String), readOnly: S.optional(S.Boolean.pipe(T.Body("read_only"))), samlCertificateSet: S.optional( IdentityProvidersCreateRequestSamlCertificateSet.pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.String.pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( IdentityProvidersCreateRequestScimConfigAzureAD.pipe( T.Body("scim_config"), ), ), }) .pipe( T.Http({ method: "POST", uri: "/zones/{zone_id}/access/identity_providers", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateIdentityProviderForZoneRequest", }) as any as S.Schema; export interface CreateIdentityProviderSamlCertificateRequest { /** Identifier. */ accountId: string; /** UUID. */ identityProviderId: string; } export const CreateIdentityProviderSamlCertificateRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), identityProviderId: S.String.pipe(T.Label("identity_provider_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/identity_providers/{identity_provider_id}/saml_certificate", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateIdentityProviderSamlCertificateRequest", }) as any as S.Schema; export type IdentityProvidersSamlCertificateCreateResponseCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersSamlCertificateCreateResponseCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateIdentityProviderSamlCertificateResponse { /** Timestamp when the certificate set was created */ createdAt: string; /** Unique identifier for the certificate set */ uid: string; /** Timestamp when the certificate set was last updated (e.g., during rotation) */ updatedAt: string; /** The currently active certificate used for encrypting SAML assertions */ currentCertificate?: IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate | null; /** The previous certificate, maintained during rotation to ensure continuity. Null if no rotation has occurred. Mirrors the structure of `saml_certificate`. */ previousCertificate?: unknown | null; } export const CreateIdentityProviderSamlCertificateResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ createdAt: S.String.pipe(T.Body("created_at")), uid: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), currentCertificate: S.optional( S.NullOr( IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate, ).pipe(T.Body("current_certificate")), ), previousCertificate: S.optional( S.NullOr(S.Unknown).pipe(T.Body("previous_certificate")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateIdentityProviderSamlCertificateResponse", }) as any as S.Schema; export interface CreateNetworkHostnameRouteRequest { /** Cloudflare account ID */ accountId: string; /** An optional description of the hostname route. */ comment?: string; /** The hostname of the route. */ hostname?: string; /** UUID of the tunnel. */ tunnelId?: string; } export const CreateNetworkHostnameRouteRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), comment: S.optional(S.String), hostname: S.optional(S.String), tunnelId: S.optional(S.String.pipe(T.Body("tunnel_id"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/zerotrust/routes/hostname", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateNetworkHostnameRouteRequest", }) as any as S.Schema; export type NetworksHostnameRoutesCreateResponseTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const NetworksHostnameRoutesCreateResponseTunType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateNetworkHostnameRouteResponse { /** The hostname route ID. */ id?: string | null; /** An optional description of the hostname route. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** The hostname of the route. */ hostname?: string | null; /** The type of tunnel. */ tunType?: NetworksHostnameRoutesCreateResponseTunType | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** A user-friendly name for a tunnel. */ tunnelName?: string | null; } export const CreateNetworkHostnameRouteResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), hostname: S.optional(S.NullOr(S.String)), tunType: S.optional( S.NullOr(NetworksHostnameRoutesCreateResponseTunType).pipe( T.Body("tun_type"), ), ), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), tunnelName: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_name"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateNetworkHostnameRouteResponse", }) as any as S.Schema; export interface CreateNetworkRouteRequest { /** Cloudflare account ID */ accountId: string; /** The private IPv4 or IPv6 range connected by the route, in CIDR notation. */ network: string; /** UUID of the tunnel. */ tunnelId: string; /** Optional remark describing the route. */ comment?: string; /** UUID of the virtual network. */ virtualNetworkId?: string; } export const CreateNetworkRouteRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), network: S.String, tunnelId: S.String.pipe(T.Body("tunnel_id")), comment: S.optional(S.String), virtualNetworkId: S.optional(S.String.pipe(T.Body("virtual_network_id"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/teamnet/routes", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateNetworkRouteRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateNetworkRouteResponse { /** UUID of the route. */ id?: string | null; /** Optional remark describing the route. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** The private IPv4 or IPv6 range connected by the route, in CIDR notation. */ network?: string | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** UUID of the virtual network. */ virtualNetworkId?: string | null; } export const CreateNetworkRouteResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), network: S.optional(S.NullOr(S.String)), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), virtualNetworkId: S.optional( S.NullOr(S.String).pipe(T.Body("virtual_network_id")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateNetworkRouteResponse", }) as any as S.Schema; export interface CreateNetworkRouteNetworkRequest { /** Cloudflare account ID */ accountId: string; /** IP/CIDR range in URL-encoded format */ ipNetworkEncoded: string; /** UUID of the tunnel. */ tunnelId: string; /** Optional remark describing the route. */ comment?: string; /** UUID of the virtual network. */ virtualNetworkId?: string; } export const CreateNetworkRouteNetworkRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ipNetworkEncoded: S.String.pipe(T.Label("ip_network_encoded")), tunnelId: S.String.pipe(T.Body("tunnel_id")), comment: S.optional(S.String), virtualNetworkId: S.optional(S.String.pipe(T.Body("virtual_network_id"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/teamnet/routes/network/{ip_network_encoded}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateNetworkRouteNetworkRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateNetworkRouteNetworkResponse { /** UUID of the route. */ id?: string | null; /** Optional remark describing the route. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** The private IPv4 or IPv6 range connected by the route, in CIDR notation. */ network?: string | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** UUID of the virtual network. */ virtualNetworkId?: string | null; } export const CreateNetworkRouteNetworkResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), network: S.optional(S.NullOr(S.String)), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), virtualNetworkId: S.optional( S.NullOr(S.String).pipe(T.Body("virtual_network_id")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateNetworkRouteNetworkResponse", }) as any as S.Schema; export interface CreateNetworkSubnetWarpRequest { /** Cloudflare account ID */ accountId: string; /** A user-friendly name for the subnet. */ name: string; /** The private IPv4 or IPv6 range defining the subnet, in CIDR notation. */ network: string; /** An optional description of the subnet. */ comment?: string; /** If `true`, this is the default subnet for the account. There can only be one default subnet per account. */ isDefaultNetwork?: boolean; } export const CreateNetworkSubnetWarpRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.String, network: S.String, comment: S.optional(S.String), isDefaultNetwork: S.optional(S.Boolean.pipe(T.Body("is_default_network"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/zerotrust/subnets/warp", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateNetworkSubnetWarpRequest", }) as any as S.Schema; export type NetworksSubnetsWarpCreateResponseSubnetType = | "cloudflare_source" | "warp"; export const NetworksSubnetsWarpCreateResponseSubnetType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateNetworkSubnetWarpResponse { /** The UUID of the subnet. */ id?: string | null; /** An optional description of the subnet. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** If `true`, this is the default subnet for the account. There can only be one default subnet per account. */ isDefaultNetwork?: boolean | null; /** A user-friendly name for the subnet. */ name?: string | null; /** The private IPv4 or IPv6 range defining the subnet, in CIDR notation. */ network?: string | null; /** The type of subnet. */ subnetType?: NetworksSubnetsWarpCreateResponseSubnetType | null; } export const CreateNetworkSubnetWarpResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), isDefaultNetwork: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_default_network")), ), name: S.optional(S.NullOr(S.String)), network: S.optional(S.NullOr(S.String)), subnetType: S.optional( S.NullOr(NetworksSubnetsWarpCreateResponseSubnetType).pipe( T.Body("subnet_type"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateNetworkSubnetWarpResponse", }) as any as S.Schema; export interface CreateNetworkVirtualNetworkRequest { /** Cloudflare account ID */ accountId: string; /** A user-friendly name for the virtual network. */ name: string; /** Optional remark describing the virtual network. */ comment?: string; /** If `true`, this virtual network is the default for the account. */ isDefault?: boolean; /** If `true`, this virtual network is the default for the account. */ isDefaultNetwork?: boolean; } export const CreateNetworkVirtualNetworkRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.String, comment: S.optional(S.String), isDefault: S.optional(S.Boolean.pipe(T.Body("is_default"))), isDefaultNetwork: S.optional(S.Boolean.pipe(T.Body("is_default_network"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/teamnet/virtual_networks", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateNetworkVirtualNetworkRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateNetworkVirtualNetworkResponse { /** UUID of the virtual network. */ id: string; /** Optional remark describing the virtual network. */ comment: string; /** Timestamp of when the resource was created. */ createdAt: string; /** If `true`, this virtual network is the default for the account. */ isDefaultNetwork: boolean; /** A user-friendly name for the virtual network. */ name: string; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; } export const CreateNetworkVirtualNetworkResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, comment: S.String, createdAt: S.String.pipe(T.Body("created_at")), isDefaultNetwork: S.Boolean.pipe(T.Body("is_default_network")), name: S.String, deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateNetworkVirtualNetworkResponse", }) as any as S.Schema; export type OrganizationsCreateRequestDenyUnmatchedRequestsExemptedZoneNamesList = Array; export const OrganizationsCreateRequestDenyUnmatchedRequestsExemptedZoneNamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface OrganizationsCreateRequestLoginDesign { /** The background color on your login page. */ backgroundColor?: string; /** The text at the bottom of your login page. */ footerText?: string; /** The text at the top of your login page. */ headerText?: string; /** The URL of the logo on your login page. */ logoPath?: string; /** The text color on your login page. */ textColor?: string; } export const OrganizationsCreateRequestLoginDesign = /*@__PURE__*/ S.suspend( () => S.Struct({ backgroundColor: S.optional(S.String.pipe(T.Body("background_color"))), footerText: S.optional(S.String.pipe(T.Body("footer_text"))), headerText: S.optional(S.String.pipe(T.Body("header_text"))), logoPath: S.optional(S.String.pipe(T.Body("logo_path"))), textColor: S.optional(S.String.pipe(T.Body("text_color"))), }), ).annotate({ identifier: "OrganizationsCreateRequestLoginDesign", }) as any as S.Schema; export type OrganizationsCreateRequestMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key" | "piv_key"; export const OrganizationsCreateRequestMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type OrganizationsCreateRequestMfaConfigAllowedAuthenticatorsList = Array< OrganizationsCreateRequestMfaConfigAllowedAuthenticatorsItem | (string & {}) >; export const OrganizationsCreateRequestMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( OrganizationsCreateRequestMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface OrganizationsCreateRequestMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: OrganizationsCreateRequestMfaConfigAllowedAuthenticatorsList; /** Allows a user to skip MFA via Authentication Method Reference (AMR) matching when the AMR claim provided by the IdP the user used to authenticate contains "mfa". Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). */ amrMatchingSessionDuration?: string; /** Specifies a Cloudflare List of required FIDO2 authenticator device AAGUIDs. */ requiredAaguids?: string; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string; } export const OrganizationsCreateRequestMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( OrganizationsCreateRequestMfaConfigAllowedAuthenticatorsList.pipe( T.Body("allowed_authenticators"), ), ), amrMatchingSessionDuration: S.optional( S.String.pipe(T.Body("amr_matching_session_duration")), ), requiredAaguids: S.optional(S.String.pipe(T.Body("required_aaguids"))), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "OrganizationsCreateRequestMfaConfig", }) as any as S.Schema; export type OrganizationsCreateRequestMfaPivKeyRequirementsPinPolicy = | "never" | "once" | "always"; export const OrganizationsCreateRequestMfaPivKeyRequirementsPinPolicy = /*@__PURE__*/ S.String; export type OrganizationsCreateRequestMfaPivKeyRequirementsSshKeySizeItem = | 256 | 384 | 521 | 2048 | 3072 | 4096; export const OrganizationsCreateRequestMfaPivKeyRequirementsSshKeySizeItem = /*@__PURE__*/ S.Number; export type OrganizationsCreateRequestMfaPivKeyRequirementsSshKeySizeList = Array< | OrganizationsCreateRequestMfaPivKeyRequirementsSshKeySizeItem | (number & {}) >; export const OrganizationsCreateRequestMfaPivKeyRequirementsSshKeySizeList = /*@__PURE__*/ S.Array( OrganizationsCreateRequestMfaPivKeyRequirementsSshKeySizeItem, ) as any as S.Schema; export type OrganizationsCreateRequestMfaPivKeyRequirementsSshKeyTypeItem = | "ecdsa" | "ed25519" | "rsa"; export const OrganizationsCreateRequestMfaPivKeyRequirementsSshKeyTypeItem = /*@__PURE__*/ S.String; export type OrganizationsCreateRequestMfaPivKeyRequirementsSshKeyTypeList = Array< | OrganizationsCreateRequestMfaPivKeyRequirementsSshKeyTypeItem | (string & {}) >; export const OrganizationsCreateRequestMfaPivKeyRequirementsSshKeyTypeList = /*@__PURE__*/ S.Array( OrganizationsCreateRequestMfaPivKeyRequirementsSshKeyTypeItem, ) as any as S.Schema; export type OrganizationsCreateRequestMfaPivKeyRequirementsTouchPolicy = | "never" | "always" | "cached"; export const OrganizationsCreateRequestMfaPivKeyRequirementsTouchPolicy = /*@__PURE__*/ S.String; export interface OrganizationsCreateRequestMfaPivKeyRequirements { /** Defines when a PIN is required to use the SSH key. Valid values: `never` (no PIN required), `once` (PIN required once per session), `always` (PIN required for each use). */ pinPolicy?: | OrganizationsCreateRequestMfaPivKeyRequirementsPinPolicy | (string & {}); /** Requires the PIV key to be stored on a FIPS 140-2 Level 1 or higher validated device. */ requireFipsDevice?: boolean; /** Specifies the allowed SSH key sizes in bits. Valid sizes depend on key type. Ed25519 has a fixed key size and does not accept this parameter. */ sshKeySize?: OrganizationsCreateRequestMfaPivKeyRequirementsSshKeySizeList; /** Specifies the allowed SSH key types. Valid values are `ecdsa`, `ed25519`, and `rsa`. */ sshKeyType?: OrganizationsCreateRequestMfaPivKeyRequirementsSshKeyTypeList; /** Defines when physical touch is required to use the SSH key. Valid values: `never` (no touch required), `always` (touch required for each use), `cached` (touch cached for 15 seconds). */ touchPolicy?: | OrganizationsCreateRequestMfaPivKeyRequirementsTouchPolicy | (string & {}); } export const OrganizationsCreateRequestMfaPivKeyRequirements = /*@__PURE__*/ S.suspend(() => S.Struct({ pinPolicy: S.optional( OrganizationsCreateRequestMfaPivKeyRequirementsPinPolicy.pipe( T.Body("pin_policy"), ), ), requireFipsDevice: S.optional( S.Boolean.pipe(T.Body("require_fips_device")), ), sshKeySize: S.optional( OrganizationsCreateRequestMfaPivKeyRequirementsSshKeySizeList.pipe( T.Body("ssh_key_size"), ), ), sshKeyType: S.optional( OrganizationsCreateRequestMfaPivKeyRequirementsSshKeyTypeList.pipe( T.Body("ssh_key_type"), ), ), touchPolicy: S.optional( OrganizationsCreateRequestMfaPivKeyRequirementsTouchPolicy.pipe( T.Body("touch_policy"), ), ), }), ).annotate({ identifier: "OrganizationsCreateRequestMfaPivKeyRequirements", }) as any as S.Schema; export interface CreateOrganizationForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** The unique subdomain assigned to your Zero Trust organization. */ authDomain: string; /** The name of your Zero Trust organization. */ name: string; /** When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value. */ allowAuthenticateViaWarp?: boolean; /** When set to `true`, users skip the identity provider selection step during login. */ autoRedirectToIdentity?: boolean; /** Determines whether to deny all requests to Cloudflare-protected resources that lack an associated Access application. If enabled, you must explicitly configure an Access application and policy to allow traffic to your Cloudflare-protected resources. For domains you want to be public across all subdomains, add the domain to the `deny_unmatched_requests_exempted_zone_names` array. */ denyUnmatchedRequests?: boolean; /** Contains zone names to exempt from the `deny_unmatched_requests` feature. Requests to a subdomain in an exempted zone will block unauthenticated traffic by default if there is a configured Access application and policy that matches the request. */ denyUnmatchedRequestsExemptedZoneNames?: OrganizationsCreateRequestDenyUnmatchedRequestsExemptedZoneNamesList; /** Lock all settings as Read-Only in the Dashboard, regardless of user permission. Updates may only be made via the API or Terraform for this account when enabled. */ isUiReadOnly?: boolean; loginDesign?: OrganizationsCreateRequestLoginDesign; /** Configures multi-factor authentication (MFA) settings for an organization. */ mfaConfig?: OrganizationsCreateRequestMfaConfig; /** Configures PIV key requirements for MFA using hardware security keys. */ mfaPivKeyRequirements?: OrganizationsCreateRequestMfaPivKeyRequirements; /** Determines whether global MFA settings apply to applications by default. The organization must have MFA enabled with at least one authentication method and a session duration configured. Note: 'allowed_authenticators' cannot only contain 'piv_key' if the organization has any non-infrastructure applications because PIV keys are only compatible with infrastructure apps. */ mfaRequiredForAllApps?: boolean; /** The amount of time that tokens issued for applications will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string; /** A description of the reason why the UI read only field is being toggled. */ uiReadOnlyToggleReason?: string; /** The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format `300ms` or `2h45m`. Valid time units are: `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. */ userSeatExpirationInactiveTime?: string; /** The amount of time that tokens issued for applications will be valid. Must be in the format `30m` or `2h45m`. Valid time units are: m, h. */ warpAuthSessionDuration?: string; } export const CreateOrganizationForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), authDomain: S.String.pipe(T.Body("auth_domain")), name: S.String, allowAuthenticateViaWarp: S.optional( S.Boolean.pipe(T.Body("allow_authenticate_via_warp")), ), autoRedirectToIdentity: S.optional( S.Boolean.pipe(T.Body("auto_redirect_to_identity")), ), denyUnmatchedRequests: S.optional( S.Boolean.pipe(T.Body("deny_unmatched_requests")), ), denyUnmatchedRequestsExemptedZoneNames: S.optional( OrganizationsCreateRequestDenyUnmatchedRequestsExemptedZoneNamesList.pipe( T.Body("deny_unmatched_requests_exempted_zone_names"), ), ), isUiReadOnly: S.optional(S.Boolean.pipe(T.Body("is_ui_read_only"))), loginDesign: S.optional( OrganizationsCreateRequestLoginDesign.pipe(T.Body("login_design")), ), mfaConfig: S.optional( OrganizationsCreateRequestMfaConfig.pipe(T.Body("mfa_config")), ), mfaPivKeyRequirements: S.optional( OrganizationsCreateRequestMfaPivKeyRequirements.pipe( T.Body("mfa_piv_key_requirements"), ), ), mfaRequiredForAllApps: S.optional( S.Boolean.pipe(T.Body("mfa_required_for_all_apps")), ), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), uiReadOnlyToggleReason: S.optional( S.String.pipe(T.Body("ui_read_only_toggle_reason")), ), userSeatExpirationInactiveTime: S.optional( S.String.pipe(T.Body("user_seat_expiration_inactive_time")), ), warpAuthSessionDuration: S.optional( S.String.pipe(T.Body("warp_auth_session_duration")), ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/organizations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateOrganizationForAccountRequest", }) as any as S.Schema; export interface OrganizationsCreateResponseCustomPages { /** The uid of the custom page to use when a user is denied access after failing a non-identity rule. */ forbidden?: string | null; /** The uid of the custom page to use when a user is denied access. */ identityDenied?: string | null; } export const OrganizationsCreateResponseCustomPages = /*@__PURE__*/ S.suspend( () => S.Struct({ forbidden: S.optional(S.NullOr(S.String)), identityDenied: S.optional( S.NullOr(S.String).pipe(T.Body("identity_denied")), ), }), ).annotate({ identifier: "OrganizationsCreateResponseCustomPages", }) as any as S.Schema; export type OrganizationsCreateResponseDenyUnmatchedRequestsExemptedZoneNamesList = Array; export const OrganizationsCreateResponseDenyUnmatchedRequestsExemptedZoneNamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface OrganizationsCreateResponseLoginDesign { /** The background color on your login page. */ backgroundColor?: string | null; /** The text at the bottom of your login page. */ footerText?: string | null; /** The text at the top of your login page. */ headerText?: string | null; /** The URL of the logo on your login page. */ logoPath?: string | null; /** The text color on your login page. */ textColor?: string | null; } export const OrganizationsCreateResponseLoginDesign = /*@__PURE__*/ S.suspend( () => S.Struct({ backgroundColor: S.optional( S.NullOr(S.String).pipe(T.Body("background_color")), ), footerText: S.optional(S.NullOr(S.String).pipe(T.Body("footer_text"))), headerText: S.optional(S.NullOr(S.String).pipe(T.Body("header_text"))), logoPath: S.optional(S.NullOr(S.String).pipe(T.Body("logo_path"))), textColor: S.optional(S.NullOr(S.String).pipe(T.Body("text_color"))), }), ).annotate({ identifier: "OrganizationsCreateResponseLoginDesign", }) as any as S.Schema; export type OrganizationsCreateResponseMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key" | "piv_key"; export const OrganizationsCreateResponseMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type OrganizationsCreateResponseMfaConfigAllowedAuthenticatorsList = Array; export const OrganizationsCreateResponseMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( OrganizationsCreateResponseMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface OrganizationsCreateResponseMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: OrganizationsCreateResponseMfaConfigAllowedAuthenticatorsList | null; /** Allows a user to skip MFA via Authentication Method Reference (AMR) matching when the AMR claim provided by the IdP the user used to authenticate contains "mfa". Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). */ amrMatchingSessionDuration?: string | null; /** Specifies a Cloudflare List of required FIDO2 authenticator device AAGUIDs. */ requiredAaguids?: string | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const OrganizationsCreateResponseMfaConfig = /*@__PURE__*/ S.suspend( () => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( OrganizationsCreateResponseMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), amrMatchingSessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("amr_matching_session_duration")), ), requiredAaguids: S.optional( S.NullOr(S.String).pipe(T.Body("required_aaguids")), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "OrganizationsCreateResponseMfaConfig", }) as any as S.Schema; export type OrganizationsCreateResponseMfaPivKeyRequirementsPinPolicy = | "never" | "once" | "always"; export const OrganizationsCreateResponseMfaPivKeyRequirementsPinPolicy = /*@__PURE__*/ S.String; export type OrganizationsCreateResponseMfaPivKeyRequirementsSshKeySizeItem = | 256 | 384 | 521 | 2048 | 3072 | 4096; export const OrganizationsCreateResponseMfaPivKeyRequirementsSshKeySizeItem = /*@__PURE__*/ S.Number; export type OrganizationsCreateResponseMfaPivKeyRequirementsSshKeySizeList = Array; export const OrganizationsCreateResponseMfaPivKeyRequirementsSshKeySizeList = /*@__PURE__*/ S.Array( OrganizationsCreateResponseMfaPivKeyRequirementsSshKeySizeItem, ) as any as S.Schema; export type OrganizationsCreateResponseMfaPivKeyRequirementsSshKeyTypeItem = | "ecdsa" | "ed25519" | "rsa"; export const OrganizationsCreateResponseMfaPivKeyRequirementsSshKeyTypeItem = /*@__PURE__*/ S.String; export type OrganizationsCreateResponseMfaPivKeyRequirementsSshKeyTypeList = Array; export const OrganizationsCreateResponseMfaPivKeyRequirementsSshKeyTypeList = /*@__PURE__*/ S.Array( OrganizationsCreateResponseMfaPivKeyRequirementsSshKeyTypeItem, ) as any as S.Schema; export type OrganizationsCreateResponseMfaPivKeyRequirementsTouchPolicy = | "never" | "always" | "cached"; export const OrganizationsCreateResponseMfaPivKeyRequirementsTouchPolicy = /*@__PURE__*/ S.String; export interface OrganizationsCreateResponseMfaPivKeyRequirements { /** Defines when a PIN is required to use the SSH key. Valid values: `never` (no PIN required), `once` (PIN required once per session), `always` (PIN required for each use). */ pinPolicy?: OrganizationsCreateResponseMfaPivKeyRequirementsPinPolicy | null; /** Requires the PIV key to be stored on a FIPS 140-2 Level 1 or higher validated device. */ requireFipsDevice?: boolean | null; /** Specifies the allowed SSH key sizes in bits. Valid sizes depend on key type. Ed25519 has a fixed key size and does not accept this parameter. */ sshKeySize?: OrganizationsCreateResponseMfaPivKeyRequirementsSshKeySizeList | null; /** Specifies the allowed SSH key types. Valid values are `ecdsa`, `ed25519`, and `rsa`. */ sshKeyType?: OrganizationsCreateResponseMfaPivKeyRequirementsSshKeyTypeList | null; /** Defines when physical touch is required to use the SSH key. Valid values: `never` (no touch required), `always` (touch required for each use), `cached` (touch cached for 15 seconds). */ touchPolicy?: OrganizationsCreateResponseMfaPivKeyRequirementsTouchPolicy | null; } export const OrganizationsCreateResponseMfaPivKeyRequirements = /*@__PURE__*/ S.suspend(() => S.Struct({ pinPolicy: S.optional( S.NullOr( OrganizationsCreateResponseMfaPivKeyRequirementsPinPolicy, ).pipe(T.Body("pin_policy")), ), requireFipsDevice: S.optional( S.NullOr(S.Boolean).pipe(T.Body("require_fips_device")), ), sshKeySize: S.optional( S.NullOr( OrganizationsCreateResponseMfaPivKeyRequirementsSshKeySizeList, ).pipe(T.Body("ssh_key_size")), ), sshKeyType: S.optional( S.NullOr( OrganizationsCreateResponseMfaPivKeyRequirementsSshKeyTypeList, ).pipe(T.Body("ssh_key_type")), ), touchPolicy: S.optional( S.NullOr( OrganizationsCreateResponseMfaPivKeyRequirementsTouchPolicy, ).pipe(T.Body("touch_policy")), ), }), ).annotate({ identifier: "OrganizationsCreateResponseMfaPivKeyRequirements", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateOrganizationResponse { /** When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value. */ allowAuthenticateViaWarp?: boolean | null; /** The unique subdomain assigned to your Zero Trust organization. */ authDomain?: string | null; /** When set to `true`, users skip the identity provider selection step during login. */ autoRedirectToIdentity?: boolean | null; customPages?: OrganizationsCreateResponseCustomPages | null; /** Determines whether to deny all requests to Cloudflare-protected resources that lack an associated Access application. If enabled, you must explicitly configure an Access application and policy to allow traffic to your Cloudflare-protected resources. For domains you want to be public across all subdomains, add the domain to the `deny_unmatched_requests_exempted_zone_names` array. */ denyUnmatchedRequests?: boolean | null; /** Contains zone names to exempt from the `deny_unmatched_requests` feature. Requests to a subdomain in an exempted zone will block unauthenticated traffic by default if there is a configured Access application and policy that matches the request. */ denyUnmatchedRequestsExemptedZoneNames?: OrganizationsCreateResponseDenyUnmatchedRequestsExemptedZoneNamesList | null; /** Lock all settings as Read-Only in the Dashboard, regardless of user permission. Updates may only be made via the API or Terraform for this account when enabled. */ isUiReadOnly?: boolean | null; loginDesign?: OrganizationsCreateResponseLoginDesign | null; /** Configures multi-factor authentication (MFA) settings for an organization. */ mfaConfig?: OrganizationsCreateResponseMfaConfig | null; /** Configures PIV key requirements for MFA using hardware security keys. */ mfaPivKeyRequirements?: OrganizationsCreateResponseMfaPivKeyRequirements | null; /** Determines whether global MFA settings apply to applications by default. The organization must have MFA enabled with at least one authentication method and a session duration configured. Note: 'allowed_authenticators' cannot only contain 'piv_key' if the organization has any non-infrastructure applications because PIV keys are only compatible with infrastructure apps. */ mfaRequiredForAllApps?: boolean | null; /** The name of your Zero Trust organization. */ name?: string | null; /** The amount of time that tokens issued for applications will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; /** A description of the reason why the UI read only field is being toggled. */ uiReadOnlyToggleReason?: string | null; /** The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format `300ms` or `2h45m`. Valid time units are: `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. */ userSeatExpirationInactiveTime?: string | null; /** The amount of time that tokens issued for applications will be valid. Must be in the format `30m` or `2h45m`. Valid time units are: m, h. */ warpAuthSessionDuration?: string | null; } export const CreateOrganizationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), authDomain: S.optional(S.NullOr(S.String).pipe(T.Body("auth_domain"))), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customPages: S.optional( S.NullOr(OrganizationsCreateResponseCustomPages).pipe( T.Body("custom_pages"), ), ), denyUnmatchedRequests: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deny_unmatched_requests")), ), denyUnmatchedRequestsExemptedZoneNames: S.optional( S.NullOr( OrganizationsCreateResponseDenyUnmatchedRequestsExemptedZoneNamesList, ).pipe(T.Body("deny_unmatched_requests_exempted_zone_names")), ), isUiReadOnly: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_ui_read_only")), ), loginDesign: S.optional( S.NullOr(OrganizationsCreateResponseLoginDesign).pipe( T.Body("login_design"), ), ), mfaConfig: S.optional( S.NullOr(OrganizationsCreateResponseMfaConfig).pipe(T.Body("mfa_config")), ), mfaPivKeyRequirements: S.optional( S.NullOr(OrganizationsCreateResponseMfaPivKeyRequirements).pipe( T.Body("mfa_piv_key_requirements"), ), ), mfaRequiredForAllApps: S.optional( S.NullOr(S.Boolean).pipe(T.Body("mfa_required_for_all_apps")), ), name: S.optional(S.NullOr(S.String)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), uiReadOnlyToggleReason: S.optional( S.NullOr(S.String).pipe(T.Body("ui_read_only_toggle_reason")), ), userSeatExpirationInactiveTime: S.optional( S.NullOr(S.String).pipe(T.Body("user_seat_expiration_inactive_time")), ), warpAuthSessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("warp_auth_session_duration")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateOrganizationResponse", }) as any as S.Schema; export interface CreateOrganizationForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** The unique subdomain assigned to your Zero Trust organization. */ authDomain: string; /** The name of your Zero Trust organization. */ name: string; /** When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value. */ allowAuthenticateViaWarp?: boolean; /** When set to `true`, users skip the identity provider selection step during login. */ autoRedirectToIdentity?: boolean; /** Determines whether to deny all requests to Cloudflare-protected resources that lack an associated Access application. If enabled, you must explicitly configure an Access application and policy to allow traffic to your Cloudflare-protected resources. For domains you want to be public across all subdomains, add the domain to the `deny_unmatched_requests_exempted_zone_names` array. */ denyUnmatchedRequests?: boolean; /** Contains zone names to exempt from the `deny_unmatched_requests` feature. Requests to a subdomain in an exempted zone will block unauthenticated traffic by default if there is a configured Access application and policy that matches the request. */ denyUnmatchedRequestsExemptedZoneNames?: OrganizationsCreateRequestDenyUnmatchedRequestsExemptedZoneNamesList; /** Lock all settings as Read-Only in the Dashboard, regardless of user permission. Updates may only be made via the API or Terraform for this account when enabled. */ isUiReadOnly?: boolean; loginDesign?: OrganizationsCreateRequestLoginDesign; /** Configures multi-factor authentication (MFA) settings for an organization. */ mfaConfig?: OrganizationsCreateRequestMfaConfig; /** Configures PIV key requirements for MFA using hardware security keys. */ mfaPivKeyRequirements?: OrganizationsCreateRequestMfaPivKeyRequirements; /** Determines whether global MFA settings apply to applications by default. The organization must have MFA enabled with at least one authentication method and a session duration configured. Note: 'allowed_authenticators' cannot only contain 'piv_key' if the organization has any non-infrastructure applications because PIV keys are only compatible with infrastructure apps. */ mfaRequiredForAllApps?: boolean; /** The amount of time that tokens issued for applications will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string; /** A description of the reason why the UI read only field is being toggled. */ uiReadOnlyToggleReason?: string; /** The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format `300ms` or `2h45m`. Valid time units are: `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. */ userSeatExpirationInactiveTime?: string; /** The amount of time that tokens issued for applications will be valid. Must be in the format `30m` or `2h45m`. Valid time units are: m, h. */ warpAuthSessionDuration?: string; } export const CreateOrganizationForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), authDomain: S.String.pipe(T.Body("auth_domain")), name: S.String, allowAuthenticateViaWarp: S.optional( S.Boolean.pipe(T.Body("allow_authenticate_via_warp")), ), autoRedirectToIdentity: S.optional( S.Boolean.pipe(T.Body("auto_redirect_to_identity")), ), denyUnmatchedRequests: S.optional( S.Boolean.pipe(T.Body("deny_unmatched_requests")), ), denyUnmatchedRequestsExemptedZoneNames: S.optional( OrganizationsCreateRequestDenyUnmatchedRequestsExemptedZoneNamesList.pipe( T.Body("deny_unmatched_requests_exempted_zone_names"), ), ), isUiReadOnly: S.optional(S.Boolean.pipe(T.Body("is_ui_read_only"))), loginDesign: S.optional( OrganizationsCreateRequestLoginDesign.pipe(T.Body("login_design")), ), mfaConfig: S.optional( OrganizationsCreateRequestMfaConfig.pipe(T.Body("mfa_config")), ), mfaPivKeyRequirements: S.optional( OrganizationsCreateRequestMfaPivKeyRequirements.pipe( T.Body("mfa_piv_key_requirements"), ), ), mfaRequiredForAllApps: S.optional( S.Boolean.pipe(T.Body("mfa_required_for_all_apps")), ), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), uiReadOnlyToggleReason: S.optional( S.String.pipe(T.Body("ui_read_only_toggle_reason")), ), userSeatExpirationInactiveTime: S.optional( S.String.pipe(T.Body("user_seat_expiration_inactive_time")), ), warpAuthSessionDuration: S.optional( S.String.pipe(T.Body("warp_auth_session_duration")), ), }) .pipe( T.Http({ method: "POST", uri: "/zones/{zone_id}/access/organizations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateOrganizationForZoneRequest", }) as any as S.Schema; export type RiskScoringIntegrationsCreateRequestIntegrationType = "Okta"; export const RiskScoringIntegrationsCreateRequestIntegrationType = /*@__PURE__*/ S.String; export interface CreateRiskScoringIntegrationRequest { accountId: string; integrationType: | RiskScoringIntegrationsCreateRequestIntegrationType | (string & {}); /** The base url of the tenant, e.g. "https://tenant.okta.com". */ tenantUrl: string; /** A reference id that can be supplied by the client. Currently this should be set to the Access-Okta IDP ID (a UUIDv4). */ referenceId?: string; } export const CreateRiskScoringIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), integrationType: RiskScoringIntegrationsCreateRequestIntegrationType.pipe( T.Body("integration_type"), ), tenantUrl: S.String.pipe(T.Body("tenant_url")), referenceId: S.optional(S.String.pipe(T.Body("reference_id"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/zt_risk_scoring/integrations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateRiskScoringIntegrationRequest", }) as any as S.Schema; export type RiskScoringIntegrationsCreateResponseIntegrationType = "Okta"; export const RiskScoringIntegrationsCreateResponseIntegrationType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateRiskScoringIntegrationResponse { /** The id of the integration, a UUIDv4. */ id: string; /** The Cloudflare account tag. */ accountTag: string; /** Whether this integration is enabled and should export changes in risk score. */ active: boolean; /** When the integration was created in RFC3339 format. */ createdAt: string; integrationType: RiskScoringIntegrationsCreateResponseIntegrationType; /** A reference ID defined by the client. */ referenceId: string; /** The base URL for the tenant. E.g. "https://tenant.okta.com". */ tenantUrl: string; /** The URL for the Shared Signals Framework configuration, e.g. "/.well-known/sse-configuration/{integration_uuid}/". https://openid.net/specs/openid-sse-framework-1_0.html#rfc.section.6.2.1. */ wellKnownUrl: string; } export const CreateRiskScoringIntegrationResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, accountTag: S.String.pipe(T.Body("account_tag")), active: S.Boolean, createdAt: S.String.pipe(T.Body("created_at")), integrationType: RiskScoringIntegrationsCreateResponseIntegrationType.pipe( T.Body("integration_type"), ), referenceId: S.String.pipe(T.Body("reference_id")), tenantUrl: S.String.pipe(T.Body("tenant_url")), wellKnownUrl: S.String.pipe(T.Body("well_known_url")), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateRiskScoringIntegrationResponse", }) as any as S.Schema; export type TunnelsCloudflaredCreateRequestConfigSrc = "local" | "cloudflare"; export const TunnelsCloudflaredCreateRequestConfigSrc = /*@__PURE__*/ S.String; export interface CreateTunnelCloudflaredRequest { /** Cloudflare account ID */ accountId: string; /** A user-friendly name for a tunnel. */ name: string; /** Indicates if this is a locally or remotely configured tunnel. If `local`, manage the tunnel using a YAML file on the origin machine. If `cloudflare`, manage the tunnel on the Zero Trust dashboard. */ configSrc?: TunnelsCloudflaredCreateRequestConfigSrc | (string & {}); /** Sets the password required to run a locally-managed tunnel. Must be at least 32 bytes and encoded as a base64 string. */ tunnelSecret?: string; } export const CreateTunnelCloudflaredRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.String, configSrc: S.optional( TunnelsCloudflaredCreateRequestConfigSrc.pipe(T.Body("config_src")), ), tunnelSecret: S.optional(S.String.pipe(T.Body("tunnel_secret"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/cfd_tunnel", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateTunnelCloudflaredRequest", }) as any as S.Schema; export type TunnelsCloudflaredCreateResponseConfigSrc = "local" | "cloudflare"; export const TunnelsCloudflaredCreateResponseConfigSrc = /*@__PURE__*/ S.String; export interface TunnelsCloudflaredCreateResponseConnectionsItem { /** UUID of the Cloudflare Tunnel connection. */ id?: string | null; /** UUID of the Cloudflare Tunnel connector. */ clientId?: string | null; /** The cloudflared version used to establish this connection. */ clientVersion?: string | null; /** The Cloudflare data center used for this connection. */ coloName?: string | null; /** Cloudflare continues to track connections for several minutes after they disconnect. This is an optimization to improve latency and reliability of reconnecting. If `true`, the connection has disconnected but is still being tracked. If `false`, the connection is actively serving traffic. */ isPendingReconnect?: boolean | null; /** Timestamp of when the connection was established. */ openedAt?: string | null; /** The public IP address of the host running cloudflared. */ originIp?: string | null; /** UUID of the Cloudflare Tunnel connection. */ uuid?: string | null; } export const TunnelsCloudflaredCreateResponseConnectionsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientVersion: S.optional( S.NullOr(S.String).pipe(T.Body("client_version")), ), coloName: S.optional(S.NullOr(S.String).pipe(T.Body("colo_name"))), isPendingReconnect: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_pending_reconnect")), ), openedAt: S.optional(S.NullOr(S.String).pipe(T.Body("opened_at"))), originIp: S.optional(S.NullOr(S.String).pipe(T.Body("origin_ip"))), uuid: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "TunnelsCloudflaredCreateResponseConnectionsItem", }) as any as S.Schema; export type TunnelsCloudflaredCreateResponseConnectionsList = Array; export const TunnelsCloudflaredCreateResponseConnectionsList = /*@__PURE__*/ S.Array( TunnelsCloudflaredCreateResponseConnectionsItem, ) as any as S.Schema; export type TunnelsCloudflaredCreateResponseStatus = | "inactive" | "degraded" | "healthy" | "down"; export const TunnelsCloudflaredCreateResponseStatus = /*@__PURE__*/ S.String; export type TunnelsCloudflaredCreateResponseTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const TunnelsCloudflaredCreateResponseTunType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateTunnelCloudflaredResponse { /** UUID of the tunnel. */ id?: string | null; /** Cloudflare account ID */ accountTag?: string | null; /** Indicates if this is a locally or remotely configured tunnel. If `local`, manage the tunnel using a YAML file on the origin machine. If `cloudflare`, manage the tunnel on the Zero Trust dashboard. */ configSrc?: TunnelsCloudflaredCreateResponseConfigSrc | null; /** The Cloudflare Tunnel connections between your origin and Cloudflare's edge. */ connections?: TunnelsCloudflaredCreateResponseConnectionsList | null; /** Timestamp of when the tunnel established at least one connection to Cloudflare's edge. If `null`, the tunnel is inactive. */ connsActiveAt?: string | null; /** Timestamp of when the tunnel became inactive (no connections to Cloudflare's edge). If `null`, the tunnel is active. */ connsInactiveAt?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** Metadata associated with the tunnel. */ metadata?: unknown | null; /** A user-friendly name for a tunnel. */ name?: string | null; /** If `true`, the tunnel can be configured remotely from the Zero Trust dashboard. If `false`, the tunnel must be configured locally on the origin machine. */ remoteConfig?: boolean | null; /** The status of the tunnel. Valid values are `inactive` (tunnel has never been run), `degraded` (tunnel is active and able to serve traffic but in an unhealthy state), `healthy` (tunnel is active and able to serve traffic), or `down` (tunnel can not serve traffic as it has no connections to the Cloudflare Edge). */ status?: TunnelsCloudflaredCreateResponseStatus | null; /** The type of tunnel. */ tunType?: TunnelsCloudflaredCreateResponseTunType | null; } export const CreateTunnelCloudflaredResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), accountTag: S.optional(S.NullOr(S.String).pipe(T.Body("account_tag"))), configSrc: S.optional( S.NullOr(TunnelsCloudflaredCreateResponseConfigSrc).pipe( T.Body("config_src"), ), ), connections: S.optional( S.NullOr(TunnelsCloudflaredCreateResponseConnectionsList), ), connsActiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_active_at")), ), connsInactiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_inactive_at")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), metadata: S.optional(S.NullOr(S.Unknown)), name: S.optional(S.NullOr(S.String)), remoteConfig: S.optional(S.NullOr(S.Boolean).pipe(T.Body("remote_config"))), status: S.optional(S.NullOr(TunnelsCloudflaredCreateResponseStatus)), tunType: S.optional( S.NullOr(TunnelsCloudflaredCreateResponseTunType).pipe( T.Body("tun_type"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateTunnelCloudflaredResponse", }) as any as S.Schema; export type TunnelsCloudflaredManagementCreateRequestResourcesItem = "logs"; export const TunnelsCloudflaredManagementCreateRequestResourcesItem = /*@__PURE__*/ S.String; export type TunnelsCloudflaredManagementCreateRequestResourcesList = Array< TunnelsCloudflaredManagementCreateRequestResourcesItem | (string & {}) >; export const TunnelsCloudflaredManagementCreateRequestResourcesList = /*@__PURE__*/ S.Array( TunnelsCloudflaredManagementCreateRequestResourcesItem, ) as any as S.Schema; export interface CreateTunnelCloudflaredManagementRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; resources: TunnelsCloudflaredManagementCreateRequestResourcesList; } export const CreateTunnelCloudflaredManagementRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), resources: TunnelsCloudflaredManagementCreateRequestResourcesList, }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/cfd_tunnel/{tunnel_id}/management", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateTunnelCloudflaredManagementRequest", }) as any as S.Schema; export type CreateTunnelCloudflaredManagementResponse = string; export const CreateTunnelCloudflaredManagementResponse = /*@__PURE__*/ S.suspend(() => S.String.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateTunnelCloudflaredManagementResponse", }) as any as S.Schema; export interface CreateTunnelWarpConnectorRequest { /** Cloudflare account ID */ accountId: string; /** A user-friendly name for a tunnel. */ name: string; /** Indicates that the tunnel will be created to be highly available. If omitted, defaults to false. */ ha?: boolean; } export const CreateTunnelWarpConnectorRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.String, ha: S.optional(S.Boolean), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/warp_connector", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateTunnelWarpConnectorRequest", }) as any as S.Schema; export type TunnelsWarpConnectorCreateResponseConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export const TunnelsWarpConnectorCreateResponseConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export type TunnelsWarpConnectorCreateResponseConnectionsList = Array; export const TunnelsWarpConnectorCreateResponseConnectionsList = /*@__PURE__*/ S.Array( TunnelsCloudflaredCreateResponseConnectionsItem, ) as any as S.Schema; export type TunnelsWarpConnectorCreateResponseStatus = | "inactive" | "degraded" | "healthy" | "down"; export const TunnelsWarpConnectorCreateResponseStatus = /*@__PURE__*/ S.String; export type TunnelsWarpConnectorCreateResponseTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const TunnelsWarpConnectorCreateResponseTunType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface CreateTunnelWarpConnectorResponse { /** UUID of the tunnel. */ id: string; /** Cloudflare account ID */ accountTag?: string | null; /** The Cloudflare Tunnel connections between your origin and Cloudflare's edge. */ connections?: TunnelsWarpConnectorCreateResponseConnectionsList | null; /** Timestamp of when the tunnel established at least one connection to Cloudflare's edge. If `null`, the tunnel is inactive. */ connsActiveAt?: string | null; /** Timestamp of when the tunnel became inactive (no connections to Cloudflare's edge). If `null`, the tunnel is active. */ connsInactiveAt?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** Metadata associated with the tunnel. */ metadata?: unknown | null; /** A user-friendly name for a tunnel. */ name?: string | null; /** The status of the tunnel. Valid values are `inactive` (tunnel has never been run), `degraded` (tunnel is active and able to serve traffic but in an unhealthy state), `healthy` (tunnel is active and able to serve traffic), or `down` (tunnel can not serve traffic as it has no connections to the Cloudflare Edge). */ status?: TunnelsWarpConnectorCreateResponseStatus | null; /** The type of tunnel. */ tunType?: TunnelsWarpConnectorCreateResponseTunType | null; } export const CreateTunnelWarpConnectorResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, accountTag: S.optional(S.NullOr(S.String).pipe(T.Body("account_tag"))), connections: S.optional( S.NullOr(TunnelsWarpConnectorCreateResponseConnectionsList), ), connsActiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_active_at")), ), connsInactiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_inactive_at")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), metadata: S.optional(S.NullOr(S.Unknown)), name: S.optional(S.NullOr(S.String)), status: S.optional(S.NullOr(TunnelsWarpConnectorCreateResponseStatus)), tunType: S.optional( S.NullOr(TunnelsWarpConnectorCreateResponseTunType).pipe( T.Body("tun_type"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "CreateTunnelWarpConnectorResponse", }) as any as S.Schema; export interface DeactivateGatewayCertificateRequest { accountId: string; /** Identify the certificate with a UUID. */ certificateId: string; } export const DeactivateGatewayCertificateRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), certificateId: S.String.pipe(T.Label("certificate_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/gateway/certificates/{certificate_id}/deactivate", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeactivateGatewayCertificateRequest", }) as any as S.Schema; export type GatewayCertificatesDeactivateResponseBindingStatus = | "pending_deployment" | "available" | "pending_deletion" | "inactive"; export const GatewayCertificatesDeactivateResponseBindingStatus = /*@__PURE__*/ S.String; export type GatewayCertificatesDeactivateResponseType = | "custom" | "gateway_managed"; export const GatewayCertificatesDeactivateResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeactivateGatewayCertificateResponse { /** Identify the certificate with a UUID. */ id?: string | null; /** Indicate the read-only deployment status of the certificate on Cloudflare's edge. Gateway TLS interception can use certificates in the 'available' (previously called 'active') state. */ bindingStatus?: GatewayCertificatesDeactivateResponseBindingStatus | null; /** Provide the CA certificate (read-only). */ certificate?: string | null; createdAt?: string | null; expiresOn?: string | null; /** Provide the SHA256 fingerprint of the certificate (read-only). */ fingerprint?: string | null; /** Indicate whether Gateway TLS interception uses this certificate (read-only). You cannot set this value directly. To configure interception, use the Gateway configuration setting named `certificate` (read-only). */ inUse?: boolean | null; /** Indicate the organization that issued the certificate (read-only). */ issuerOrg?: string | null; /** Provide the entire issuer field of the certificate (read-only). */ issuerRaw?: string | null; /** Indicate the read-only certificate type, BYO-PKI (custom) or Gateway-managed. */ type?: GatewayCertificatesDeactivateResponseType | null; updatedAt?: string | null; uploadedOn?: string | null; } export const DeactivateGatewayCertificateResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), bindingStatus: S.optional( S.NullOr(GatewayCertificatesDeactivateResponseBindingStatus).pipe( T.Body("binding_status"), ), ), certificate: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), expiresOn: S.optional(S.NullOr(S.String).pipe(T.Body("expires_on"))), fingerprint: S.optional(S.NullOr(S.String)), inUse: S.optional(S.NullOr(S.Boolean).pipe(T.Body("in_use"))), issuerOrg: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_org"))), issuerRaw: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_raw"))), type: S.optional(S.NullOr(GatewayCertificatesDeactivateResponseType)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), uploadedOn: S.optional(S.NullOr(S.String).pipe(T.Body("uploaded_on"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeactivateGatewayCertificateResponse", }) as any as S.Schema; export interface DeleteAccessAiControlMcpPortalRequest { accountId: string; /** portal id */ id: string; } export const DeleteAccessAiControlMcpPortalRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String.pipe(T.Label()), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/ai-controls/mcp/portals/{id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessAiControlMcpPortalRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteAccessAiControlMcpPortalResponse { /** portal id */ id: string; hostname: string; name: string; /** Allow remote code execution in Dynamic Workers (beta) */ allowCodeMode?: boolean | null; createdAt?: string | null; createdBy?: string | null; description?: string | null; modifiedAt?: string | null; modifiedBy?: string | null; /** Route outbound MCP traffic through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean | null; } export const DeleteAccessAiControlMcpPortalResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, hostname: S.String, name: S.String, allowCodeMode: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_code_mode")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), createdBy: S.optional(S.NullOr(S.String).pipe(T.Body("created_by"))), description: S.optional(S.NullOr(S.String)), modifiedAt: S.optional(S.NullOr(S.String).pipe(T.Body("modified_at"))), modifiedBy: S.optional(S.NullOr(S.String).pipe(T.Body("modified_by"))), secureWebGateway: S.optional( S.NullOr(S.Boolean).pipe(T.Body("secure_web_gateway")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessAiControlMcpPortalResponse", }) as any as S.Schema; export interface DeleteAccessAiControlMcpServerRequest { accountId: string; /** server id */ id: string; } export const DeleteAccessAiControlMcpServerRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String.pipe(T.Label()), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/ai-controls/mcp/servers/{id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessAiControlMcpServerRequest", }) as any as S.Schema; export type AccessAiControlsMcpServersDeleteResponseAuthType = | "oauth" | "bearer" | "unauthenticated"; export const AccessAiControlsMcpServersDeleteResponseAuthType = /*@__PURE__*/ S.String; export type AccessAiControlsMcpServersDeleteResponsePromptsItemMap = { [key: string]: unknown | undefined; }; export const AccessAiControlsMcpServersDeleteResponsePromptsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpServersDeleteResponsePromptsList = Array; export const AccessAiControlsMcpServersDeleteResponsePromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersDeleteResponsePromptsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpServersDeleteResponseToolsItemMap = { [key: string]: unknown | undefined; }; export const AccessAiControlsMcpServersDeleteResponseToolsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpServersDeleteResponseToolsList = Array; export const AccessAiControlsMcpServersDeleteResponseToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersDeleteResponseToolsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpServersDeleteResponseErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export const AccessAiControlsMcpServersDeleteResponseErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export type AccessAiControlsMcpServersDeleteResponseUpdatedPromptsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export const AccessAiControlsMcpServersDeleteResponseUpdatedPromptsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export type AccessAiControlsMcpServersDeleteResponseUpdatedPromptsList = Array; export const AccessAiControlsMcpServersDeleteResponseUpdatedPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem, ) as any as S.Schema; export type AccessAiControlsMcpServersDeleteResponseUpdatedToolsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export const AccessAiControlsMcpServersDeleteResponseUpdatedToolsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export type AccessAiControlsMcpServersDeleteResponseUpdatedToolsList = Array; export const AccessAiControlsMcpServersDeleteResponseUpdatedToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteAccessAiControlMcpServerResponse { /** server id */ id: string; authType: AccessAiControlsMcpServersDeleteResponseAuthType; hostname: string; name: string; prompts: AccessAiControlsMcpServersDeleteResponsePromptsList; tools: AccessAiControlsMcpServersDeleteResponseToolsList; createdAt?: string | null; createdBy?: string | null; description?: string | null; error?: string | null; errorDetails?: AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails | null; /** When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true. Effective behavior is gated by the gateway worker's per-env rollout mode KV key. */ isSharedOauthCallbackEnabled?: boolean | null; lastSuccessfulSync?: string | null; lastSynced?: string | null; modifiedAt?: string | null; modifiedBy?: string | null; /** Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean | null; status?: string | null; updatedPrompts?: AccessAiControlsMcpServersDeleteResponseUpdatedPromptsList | null; updatedTools?: AccessAiControlsMcpServersDeleteResponseUpdatedToolsList | null; } export const DeleteAccessAiControlMcpServerResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, authType: AccessAiControlsMcpServersDeleteResponseAuthType.pipe( T.Body("auth_type"), ), hostname: S.String, name: S.String, prompts: AccessAiControlsMcpServersDeleteResponsePromptsList, tools: AccessAiControlsMcpServersDeleteResponseToolsList, createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), createdBy: S.optional(S.NullOr(S.String).pipe(T.Body("created_by"))), description: S.optional(S.NullOr(S.String)), error: S.optional(S.NullOr(S.String)), errorDetails: S.optional( S.NullOr( AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails, ).pipe(T.Body("error_details")), ), isSharedOauthCallbackEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_shared_oauth_callback_enabled")), ), lastSuccessfulSync: S.optional( S.NullOr(S.String).pipe(T.Body("last_successful_sync")), ), lastSynced: S.optional(S.NullOr(S.String).pipe(T.Body("last_synced"))), modifiedAt: S.optional(S.NullOr(S.String).pipe(T.Body("modified_at"))), modifiedBy: S.optional(S.NullOr(S.String).pipe(T.Body("modified_by"))), secureWebGateway: S.optional( S.NullOr(S.Boolean).pipe(T.Body("secure_web_gateway")), ), status: S.optional(S.NullOr(S.String)), updatedPrompts: S.optional( S.NullOr( AccessAiControlsMcpServersDeleteResponseUpdatedPromptsList, ).pipe(T.Body("updated_prompts")), ), updatedTools: S.optional( S.NullOr(AccessAiControlsMcpServersDeleteResponseUpdatedToolsList).pipe( T.Body("updated_tools"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessAiControlMcpServerResponse", }) as any as S.Schema; export interface DeleteAccessApplicationCaForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ appId: string; } export const DeleteAccessApplicationCaForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), appId: S.String.pipe(T.Label("app_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/apps/{app_id}/ca", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessApplicationCaForAccountRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteAccessApplicationCaResponse { /** The ID of the CA. */ id?: string | null; } export const DeleteAccessApplicationCaResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessApplicationCaResponse", }) as any as S.Schema; export interface DeleteAccessApplicationCaForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ appId: string; } export const DeleteAccessApplicationCaForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), appId: S.String.pipe(T.Label("app_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/zones/{zone_id}/access/apps/{app_id}/ca", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessApplicationCaForZoneRequest", }) as any as S.Schema; export interface DeleteAccessApplicationForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** Identifier. */ appId: string; } export const DeleteAccessApplicationForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), appId: S.String.pipe(T.Label("app_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/apps/{app_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessApplicationForAccountRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteAccessApplicationResponse { /** UUID. */ id?: string | null; } export const DeleteAccessApplicationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessApplicationResponse", }) as any as S.Schema; export interface DeleteAccessApplicationForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** Identifier. */ appId: string; } export const DeleteAccessApplicationForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), appId: S.String.pipe(T.Label("app_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/zones/{zone_id}/access/apps/{app_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessApplicationForZoneRequest", }) as any as S.Schema; export interface DeleteAccessApplicationPolicyForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ appId: string; /** UUID. */ policyId: string; } export const DeleteAccessApplicationPolicyForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), appId: S.String.pipe(T.Label("app_id")), policyId: S.String.pipe(T.Label("policy_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/apps/{app_id}/policies/{policy_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessApplicationPolicyForAccountRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteAccessApplicationPolicyResponse { /** UUID. */ id?: string | null; } export const DeleteAccessApplicationPolicyResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessApplicationPolicyResponse", }) as any as S.Schema; export interface DeleteAccessApplicationPolicyForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ appId: string; /** UUID. */ policyId: string; } export const DeleteAccessApplicationPolicyForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), appId: S.String.pipe(T.Label("app_id")), policyId: S.String.pipe(T.Label("policy_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/zones/{zone_id}/access/apps/{app_id}/policies/{policy_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessApplicationPolicyForZoneRequest", }) as any as S.Schema; export interface DeleteAccessBookmarkRequest { accountId: string; /** UUID. */ bookmarkId: string; } export const DeleteAccessBookmarkRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), bookmarkId: S.String.pipe(T.Label("bookmark_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/bookmarks/{bookmark_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessBookmarkRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteAccessBookmarkResponse { /** UUID. */ id?: string | null; } export const DeleteAccessBookmarkResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessBookmarkResponse", }) as any as S.Schema; export interface DeleteAccessCertificateForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ certificateId: string; } export const DeleteAccessCertificateForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), certificateId: S.String.pipe(T.Label("certificate_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/certificates/{certificate_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessCertificateForAccountRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteAccessCertificateResponse { /** UUID. */ id?: string | null; } export const DeleteAccessCertificateResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessCertificateResponse", }) as any as S.Schema; export interface DeleteAccessCertificateForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ certificateId: string; } export const DeleteAccessCertificateForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), certificateId: S.String.pipe(T.Label("certificate_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/zones/{zone_id}/access/certificates/{certificate_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessCertificateForZoneRequest", }) as any as S.Schema; export interface DeleteAccessCustomPageRequest { /** Identifier. */ accountId: string; /** UUID. */ customPageId: string; } export const DeleteAccessCustomPageRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), customPageId: S.String.pipe(T.Label("custom_page_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/custom_pages/{custom_page_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessCustomPageRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteAccessCustomPageResponse { /** UUID. */ id?: string | null; } export const DeleteAccessCustomPageResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessCustomPageResponse", }) as any as S.Schema; export interface DeleteAccessGatewayCaRequest { /** Identifier. */ accountId: string; /** UUID. */ certificateId: string; } export const DeleteAccessGatewayCaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), certificateId: S.String.pipe(T.Label("certificate_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/gateway_ca/{certificate_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessGatewayCaRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteAccessGatewayCaResponse { /** UUID. */ id?: string | null; } export const DeleteAccessGatewayCaResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessGatewayCaResponse", }) as any as S.Schema; export interface DeleteAccessGroupForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ groupId: string; } export const DeleteAccessGroupForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), groupId: S.String.pipe(T.Label("group_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/groups/{group_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessGroupForAccountRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteAccessGroupResponse { /** UUID. */ id?: string | null; } export const DeleteAccessGroupResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessGroupResponse", }) as any as S.Schema; export interface DeleteAccessGroupForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ groupId: string; } export const DeleteAccessGroupForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), groupId: S.String.pipe(T.Label("group_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/zones/{zone_id}/access/groups/{group_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessGroupForZoneRequest", }) as any as S.Schema; export interface DeleteAccessIdpFederationGrantRequest { /** Identifier. */ accountId: string; /** Identifier. */ grantId: string; } export const DeleteAccessIdpFederationGrantRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), grantId: S.String.pipe(T.Label("grant_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/idp_federation_grants/{grant_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessIdpFederationGrantRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteAccessIdpFederationGrantResponse { /** UID of the deleted IdP federation grant. */ id?: string | null; } export const DeleteAccessIdpFederationGrantResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessIdpFederationGrantResponse", }) as any as S.Schema; export interface DeleteAccessInfrastructureTargetRequest { /** Account identifier */ accountId: string; /** Target identifier */ targetId: string; } export const DeleteAccessInfrastructureTargetRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), targetId: S.String.pipe(T.Label("target_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/infrastructure/targets/{target_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessInfrastructureTargetRequest", }) as any as S.Schema; export interface DeleteAccessInfrastructureTargetResponse {} export const DeleteAccessInfrastructureTargetResponse = /*@__PURE__*/ S.suspend( () => S.Struct({}).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessInfrastructureTargetResponse", }) as any as S.Schema; export interface DeleteAccessPolicyRequest { /** Identifier. */ accountId: string; /** The UUID of the policy */ policyId: string; } export const DeleteAccessPolicyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), policyId: S.String.pipe(T.Label("policy_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/policies/{policy_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessPolicyRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteAccessPolicyResponse { /** The UUID of the policy */ id?: string | null; } export const DeleteAccessPolicyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessPolicyResponse", }) as any as S.Schema; export interface DeleteAccessServiceTokenForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ serviceTokenId: string; } export const DeleteAccessServiceTokenForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), serviceTokenId: S.String.pipe(T.Label("service_token_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/service_tokens/{service_token_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessServiceTokenForAccountRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteAccessServiceTokenResponse { /** The ID of the service token. */ id?: string | null; /** The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header. */ clientId?: string | null; /** The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h). */ duration?: string | null; expiresAt?: string | null; /** The name of the service token. */ name?: string | null; } export const DeleteAccessServiceTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), duration: S.optional(S.NullOr(S.String)), expiresAt: S.optional(S.NullOr(S.String).pipe(T.Body("expires_at"))), name: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessServiceTokenResponse", }) as any as S.Schema; export interface DeleteAccessServiceTokenForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ serviceTokenId: string; } export const DeleteAccessServiceTokenForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), serviceTokenId: S.String.pipe(T.Label("service_token_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/zones/{zone_id}/access/service_tokens/{service_token_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessServiceTokenForZoneRequest", }) as any as S.Schema; export interface DeleteAccessTagRequest { /** Identifier. */ accountId: string; /** The name of the tag */ tagName: string; } export const DeleteAccessTagRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tagName: S.String.pipe(T.Label("tag_name")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/tags/{tag_name}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessTagRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteAccessTagResponse { /** The name of the tag */ name?: string | null; } export const DeleteAccessTagResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessTagResponse", }) as any as S.Schema; export interface DeleteAccessUserRequest { /** Identifier. */ accountId: string; /** UUID. */ userId: string; } export const DeleteAccessUserRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), userId: S.String.pipe(T.Label("user_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/users/{user_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessUserRequest", }) as any as S.Schema; export type DeleteAccessUserResponse = unknown; export const DeleteAccessUserResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteAccessUserResponse", }) as any as S.Schema; export interface DeleteCasbIntegrationRequest { accountId: string; id: string; } export const DeleteCasbIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String.pipe(T.Label()), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/one/integrations/{id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteCasbIntegrationRequest", }) as any as S.Schema; export interface DeleteCasbIntegrationResponse {} export const DeleteCasbIntegrationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteCasbIntegrationResponse", }) as any as S.Schema; export interface DeleteDeviceDeploymentGroupRequest { accountId: string; groupId: string; } export const DeleteDeviceDeploymentGroupRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), groupId: S.String.pipe(T.Label("group_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/devices/deployment-groups/{group_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDeviceDeploymentGroupRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteDeviceDeploymentGroupResponse { /** The ID of a deleted deployment group. */ id?: string | null; } export const DeleteDeviceDeploymentGroupResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDeviceDeploymentGroupResponse", }) as any as S.Schema; export interface DeleteDeviceDevicesRequest { accountId: string; deviceId: string; } export const DeleteDeviceDevicesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), deviceId: S.String.pipe(T.Label("device_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/devices/physical-devices/{device_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDeviceDevicesRequest", }) as any as S.Schema; export type DeleteDeviceDevicesResponse = unknown; export const DeleteDeviceDevicesResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDeviceDevicesResponse", }) as any as S.Schema; export interface DeleteDeviceDexTestRequest { /** Unique identifier linked to an account. */ accountId: string; /** API Resource UUID tag. */ dexTestId: string; } export const DeleteDeviceDexTestRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), dexTestId: S.String.pipe(T.Label("dex_test_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dex/devices/dex_tests/{dex_test_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDeviceDexTestRequest", }) as any as S.Schema; export type DevicesDexTestsDeleteResponseDexTestsItemDataKind = | "http" | "traceroute"; export const DevicesDexTestsDeleteResponseDexTestsItemDataKind = /*@__PURE__*/ S.String; export type DevicesDexTestsDeleteResponseDexTestsItemDataMethod = "GET"; export const DevicesDexTestsDeleteResponseDexTestsItemDataMethod = /*@__PURE__*/ S.String; export interface DevicesDexTestsDeleteResponseDexTestsItemData { /** The desired endpoint to test. */ host: string; /** The type of test. */ kind: DevicesDexTestsDeleteResponseDexTestsItemDataKind; /** The HTTP request method type. */ method?: DevicesDexTestsDeleteResponseDexTestsItemDataMethod | null; } export const DevicesDexTestsDeleteResponseDexTestsItemData = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.String, kind: DevicesDexTestsDeleteResponseDexTestsItemDataKind, method: S.optional( S.NullOr(DevicesDexTestsDeleteResponseDexTestsItemDataMethod), ), }), ).annotate({ identifier: "DevicesDexTestsDeleteResponseDexTestsItemData", }) as any as S.Schema; export type DevicesDexTestsDeleteResponseDexTestsItemTargetPoliciesItem = DevicesDexTestsCreateResponseTargetPoliciesItem; export const DevicesDexTestsDeleteResponseDexTestsItemTargetPoliciesItem = DevicesDexTestsCreateResponseTargetPoliciesItem; export type DevicesDexTestsDeleteResponseDexTestsItemTargetPoliciesList = Array; export const DevicesDexTestsDeleteResponseDexTestsItemTargetPoliciesList = /*@__PURE__*/ S.Array( DevicesDexTestsCreateResponseTargetPoliciesItem, ) as any as S.Schema; export interface DevicesDexTestsDeleteResponseDexTestsItem { /** The configuration object which contains the details for the WARP client to conduct the test. */ data: DevicesDexTestsDeleteResponseDexTestsItemData; /** Determines whether or not the test is active. */ enabled: boolean; /** How often the test will run. */ interval: string; /** The name of the DEX test. Must be unique. */ name: string; /** Additional details about the test. */ description?: string | null; /** DEX rules targeted by this test */ targetPolicies?: DevicesDexTestsDeleteResponseDexTestsItemTargetPoliciesList | null; targeted?: boolean | null; /** The unique identifier for the test. */ testId?: string | null; } export const DevicesDexTestsDeleteResponseDexTestsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ data: DevicesDexTestsDeleteResponseDexTestsItemData, enabled: S.Boolean, interval: S.String, name: S.String, description: S.optional(S.NullOr(S.String)), targetPolicies: S.optional( S.NullOr( DevicesDexTestsDeleteResponseDexTestsItemTargetPoliciesList, ).pipe(T.Body("target_policies")), ), targeted: S.optional(S.NullOr(S.Boolean)), testId: S.optional(S.NullOr(S.String).pipe(T.Body("test_id"))), }), ).annotate({ identifier: "DevicesDexTestsDeleteResponseDexTestsItem", }) as any as S.Schema; export type DevicesDexTestsDeleteResponseDexTestsList = Array; export const DevicesDexTestsDeleteResponseDexTestsList = /*@__PURE__*/ S.Array( DevicesDexTestsDeleteResponseDexTestsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteDeviceDexTestResponse { dexTests?: DevicesDexTestsDeleteResponseDexTestsList | null; } export const DeleteDeviceDexTestResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ dexTests: S.optional( S.NullOr(DevicesDexTestsDeleteResponseDexTestsList).pipe( T.Body("dex_tests"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDeviceDexTestResponse", }) as any as S.Schema; export interface DeleteDeviceIpProfileRequest { accountId: string; profileId: string; } export const DeleteDeviceIpProfileRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), profileId: S.String.pipe(T.Label("profile_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/devices/ip-profiles/{profile_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDeviceIpProfileRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteDeviceIpProfileResponse { /** ID of the deleted Device IP profile. */ id?: string | null; } export const DeleteDeviceIpProfileResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDeviceIpProfileResponse", }) as any as S.Schema; export interface DeleteDeviceNetworkRequest { accountId: string; /** API UUID. */ networkId: string; } export const DeleteDeviceNetworkRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), networkId: S.String.pipe(T.Label("network_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/devices/networks/{network_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDeviceNetworkRequest", }) as any as S.Schema; export type DevicesNetworksDeleteResultItemConfig = DevicesNetworksCreateResponseConfig; export const DevicesNetworksDeleteResultItemConfig = DevicesNetworksCreateResponseConfig; export type DevicesNetworksDeleteResultItemType = "tls"; export const DevicesNetworksDeleteResultItemType = /*@__PURE__*/ S.String; export interface DevicesNetworksDeleteResultItem { /** The configuration object containing information for the WARP client to detect the managed network. */ config?: DevicesNetworksCreateResponseConfig | null; /** The name of the device managed network. This name must be unique. */ name?: string | null; /** API UUID. */ networkId?: string | null; /** The type of device managed network. */ type?: DevicesNetworksDeleteResultItemType | null; } export const DevicesNetworksDeleteResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ config: S.optional(S.NullOr(DevicesNetworksCreateResponseConfig)), name: S.optional(S.NullOr(S.String)), networkId: S.optional(S.NullOr(S.String).pipe(T.Body("network_id"))), type: S.optional(S.NullOr(DevicesNetworksDeleteResultItemType)), }), ).annotate({ identifier: "DevicesNetworksDeleteResultItem", }) as any as S.Schema; export type DevicesNetworksDeleteResultList = Array; export const DevicesNetworksDeleteResultList = /*@__PURE__*/ S.Array( DevicesNetworksDeleteResultItem, ) as any as S.Schema; export interface DeleteDeviceNetworkResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesNetworksDeleteResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const DeleteDeviceNetworkResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesNetworksDeleteResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDeviceNetworkResponse", }) as any as S.Schema; export interface DeleteDevicePolicyCustomRequest { accountId: string; policyId: string; } export const DeleteDevicePolicyCustomRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), policyId: S.String.pipe(T.Label("policy_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/devices/policy/{policy_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDevicePolicyCustomRequest", }) as any as S.Schema; export type DevicesPoliciesCustomDeleteResultItemDnsSearchSuffixesItem = DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem; export const DevicesPoliciesCustomDeleteResultItemDnsSearchSuffixesItem = DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem; export type DevicesPoliciesCustomDeleteResultItemDnsSearchSuffixesList = Array; export const DevicesPoliciesCustomDeleteResultItemDnsSearchSuffixesList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem, ) as any as S.Schema; export type DevicesPoliciesCustomDeleteResultItemExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export const DevicesPoliciesCustomDeleteResultItemExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export type DevicesPoliciesCustomDeleteResultItemExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomDeleteResultItemExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export type DevicesPoliciesCustomDeleteResultItemExcludeItem = | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomDeleteResultItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomDeleteResultItemExcludeList = Array; export const DevicesPoliciesCustomDeleteResultItemExcludeList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomDeleteResultItemExcludeItem, ) as any as S.Schema; export type DevicesPoliciesCustomDeleteResultItemFallbackDomainsItemDnsServerList = Array; export const DevicesPoliciesCustomDeleteResultItemFallbackDomainsItemDnsServerList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomDeleteResultItemFallbackDomainsItem { /** The domain suffix to match when resolving locally. */ suffix: string; /** A description of the fallback domain, displayed in the client UI. */ description?: string | null; /** A list of IP addresses to handle domain resolution. */ dnsServer?: DevicesPoliciesCustomDeleteResultItemFallbackDomainsItemDnsServerList | null; } export const DevicesPoliciesCustomDeleteResultItemFallbackDomainsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ suffix: S.String, description: S.optional(S.NullOr(S.String)), dnsServer: S.optional( S.NullOr( DevicesPoliciesCustomDeleteResultItemFallbackDomainsItemDnsServerList, ).pipe(T.Body("dns_server")), ), }), ).annotate({ identifier: "DevicesPoliciesCustomDeleteResultItemFallbackDomainsItem", }) as any as S.Schema; export type DevicesPoliciesCustomDeleteResultItemFallbackDomainsList = Array; export const DevicesPoliciesCustomDeleteResultItemFallbackDomainsList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomDeleteResultItemFallbackDomainsItem, ) as any as S.Schema; export type DevicesPoliciesCustomDeleteResultItemGlobalAccelerationApiEndpointsList = Array; export const DevicesPoliciesCustomDeleteResultItemGlobalAccelerationApiEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesCustomDeleteResultItemGlobalAccelerationMasqueEndpointsList = Array; export const DevicesPoliciesCustomDeleteResultItemGlobalAccelerationMasqueEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesCustomDeleteResultItemGlobalAccelerationWireguardEndpointsList = Array; export const DevicesPoliciesCustomDeleteResultItemGlobalAccelerationWireguardEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomDeleteResultItemGlobalAcceleration { /** IP:port entries for the API endpoints. */ apiEndpoints: DevicesPoliciesCustomDeleteResultItemGlobalAccelerationApiEndpointsList; /** Global acceleration settings are used only when "enabled". */ enabled: boolean; /** IP:port entries for the MASQUE tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ masqueEndpoints: DevicesPoliciesCustomDeleteResultItemGlobalAccelerationMasqueEndpointsList; /** IP:port entries for the WireGuard tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ wireguardEndpoints: DevicesPoliciesCustomDeleteResultItemGlobalAccelerationWireguardEndpointsList; } export const DevicesPoliciesCustomDeleteResultItemGlobalAcceleration = /*@__PURE__*/ S.suspend(() => S.Struct({ apiEndpoints: DevicesPoliciesCustomDeleteResultItemGlobalAccelerationApiEndpointsList.pipe( T.Body("api_endpoints"), ), enabled: S.Boolean, masqueEndpoints: DevicesPoliciesCustomDeleteResultItemGlobalAccelerationMasqueEndpointsList.pipe( T.Body("masque_endpoints"), ), wireguardEndpoints: DevicesPoliciesCustomDeleteResultItemGlobalAccelerationWireguardEndpointsList.pipe( T.Body("wireguard_endpoints"), ), }), ).annotate({ identifier: "DevicesPoliciesCustomDeleteResultItemGlobalAcceleration", }) as any as S.Schema; export type DevicesPoliciesCustomDeleteResultItemIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export const DevicesPoliciesCustomDeleteResultItemIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export type DevicesPoliciesCustomDeleteResultItemIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomDeleteResultItemIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export type DevicesPoliciesCustomDeleteResultItemIncludeItem = | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomDeleteResultItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomDeleteResultItemIncludeList = Array; export const DevicesPoliciesCustomDeleteResultItemIncludeList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomDeleteResultItemIncludeItem, ) as any as S.Schema; export type DevicesPoliciesCustomDeleteResultItemServiceModeV2 = DevicesPoliciesCustomCreateResponseServiceModeV2; export const DevicesPoliciesCustomDeleteResultItemServiceModeV2 = DevicesPoliciesCustomCreateResponseServiceModeV2; export type DevicesPoliciesCustomDeleteResultItemTargetTestsItem = DevicesPoliciesCustomCreateResponseTargetTestsItem; export const DevicesPoliciesCustomDeleteResultItemTargetTestsItem = DevicesPoliciesCustomCreateResponseTargetTestsItem; export type DevicesPoliciesCustomDeleteResultItemTargetTestsList = Array; export const DevicesPoliciesCustomDeleteResultItemTargetTestsList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateResponseTargetTestsItem, ) as any as S.Schema; export type DevicesPoliciesCustomDeleteResultItemVirtualNetworksAllowedList = Array; export const DevicesPoliciesCustomDeleteResultItemVirtualNetworksAllowedList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomDeleteResultItemVirtualNetworks { /** List of virtual network IDs the device is allowed to access. When virtual_networks is set, at least one entry is required. */ allowed: DevicesPoliciesCustomDeleteResultItemVirtualNetworksAllowedList; /** The default virtual network ID. Must be included in the `allowed` list. */ default: string; } export const DevicesPoliciesCustomDeleteResultItemVirtualNetworks = /*@__PURE__*/ S.suspend(() => S.Struct({ allowed: DevicesPoliciesCustomDeleteResultItemVirtualNetworksAllowedList, default: S.String, }), ).annotate({ identifier: "DevicesPoliciesCustomDeleteResultItemVirtualNetworks", }) as any as S.Schema; export interface DevicesPoliciesCustomDeleteResultItem { /** Whether to allow the user to switch WARP between modes. */ allowModeSwitch?: boolean | null; /** Whether to receive update notifications when a new version of the client is available. */ allowUpdates?: boolean | null; /** Whether to allow devices to leave the organization. */ allowedToLeave?: boolean | null; /** The amount of time in seconds to reconnect after having been disabled. */ autoConnect?: number | null; /** Turn on the captive portal after the specified amount of time. */ captivePortal?: number | null; /** Whether the policy is the default policy for an account. */ default?: boolean | null; /** A description of the policy. */ description?: string | null; /** If the `dns_server` field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to `true`. */ disableAutoFallback?: boolean | null; /** List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear. */ dnsSearchSuffixes?: DevicesPoliciesCustomDeleteResultItemDnsSearchSuffixesList | null; /** Whether the policy will be applied to matching devices. */ enabled?: boolean | null; /** List of routes excluded in the WARP client's tunnel. */ exclude?: DevicesPoliciesCustomDeleteResultItemExcludeList | null; /** Whether to add Microsoft IPs to Split Tunnel exclusions. */ excludeOfficeIps?: boolean | null; fallbackDomains?: DevicesPoliciesCustomDeleteResultItemFallbackDomainsList | null; gatewayUniqueId?: string | null; /** Global Acceleration settings for China. When configured, WARP clients connect to the Global Accelerator addresses instead of the default ones. Please contact your account representative to enable this feature on your account. See https://developers.cloudflare.com/china-network/concepts/global-acceleration/. */ globalAcceleration?: DevicesPoliciesCustomDeleteResultItemGlobalAcceleration | null; /** List of routes included in the WARP client's tunnel. */ include?: DevicesPoliciesCustomDeleteResultItemIncludeList | null; /** The amount of time in minutes a user is allowed access to their LAN. A value of 0 will allow LAN access until the next WARP reconnection, such as a reboot or a laptop waking from sleep. Note that this field is omitted from the response if null or unset. */ lanAllowMinutes?: number | null; /** The size of the subnet for the local access network. Note that this field is omitted from the response if null or unset. */ lanAllowSubnetSize?: number | null; /** The wirefilter expression to match devices. Available values: "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.service_token_uuid", "identity.saml_attributes", "network", "os.name", "os.version". */ match?: string | null; /** The name of the device settings profile. */ name?: string | null; policyId?: string | null; /** The precedence of the policy. Lower values indicate higher precedence. Policies will be evaluated in ascending order of this field. */ precedence?: number | null; /** Determines if the operating system will register WARP's local interface IP with your on-premises DNS server. */ registerInterfaceIpWithDns?: boolean | null; /** Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only). */ sccmVpnBoundarySupport?: boolean | null; serviceModeV2?: DevicesPoliciesCustomCreateResponseServiceModeV2 | null; /** The URL to launch when the Send Feedback button is clicked. */ supportUrl?: string | null; /** Whether to allow the user to turn off the WARP switch and disconnect the client. */ switchLocked?: boolean | null; targetTests?: DevicesPoliciesCustomDeleteResultItemTargetTestsList | null; /** Determines which tunnel protocol to use. */ tunnelProtocol?: string | null; /** Virtual network access settings for the device. */ virtualNetworks?: DevicesPoliciesCustomDeleteResultItemVirtualNetworks | null; } export const DevicesPoliciesCustomDeleteResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ allowModeSwitch: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_mode_switch")), ), allowUpdates: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_updates")), ), allowedToLeave: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allowed_to_leave")), ), autoConnect: S.optional(S.NullOr(S.Number).pipe(T.Body("auto_connect"))), captivePortal: S.optional( S.NullOr(S.Number).pipe(T.Body("captive_portal")), ), default: S.optional(S.NullOr(S.Boolean)), description: S.optional(S.NullOr(S.String)), disableAutoFallback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("disable_auto_fallback")), ), dnsSearchSuffixes: S.optional( S.NullOr( DevicesPoliciesCustomDeleteResultItemDnsSearchSuffixesList, ).pipe(T.Body("dns_search_suffixes")), ), enabled: S.optional(S.NullOr(S.Boolean)), exclude: S.optional( S.NullOr(DevicesPoliciesCustomDeleteResultItemExcludeList), ), excludeOfficeIps: S.optional( S.NullOr(S.Boolean).pipe(T.Body("exclude_office_ips")), ), fallbackDomains: S.optional( S.NullOr(DevicesPoliciesCustomDeleteResultItemFallbackDomainsList).pipe( T.Body("fallback_domains"), ), ), gatewayUniqueId: S.optional( S.NullOr(S.String).pipe(T.Body("gateway_unique_id")), ), globalAcceleration: S.optional( S.NullOr(DevicesPoliciesCustomDeleteResultItemGlobalAcceleration).pipe( T.Body("global_acceleration"), ), ), include: S.optional( S.NullOr(DevicesPoliciesCustomDeleteResultItemIncludeList), ), lanAllowMinutes: S.optional( S.NullOr(S.Number).pipe(T.Body("lan_allow_minutes")), ), lanAllowSubnetSize: S.optional( S.NullOr(S.Number).pipe(T.Body("lan_allow_subnet_size")), ), match: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policyId: S.optional(S.NullOr(S.String).pipe(T.Body("policy_id"))), precedence: S.optional(S.NullOr(S.Number)), registerInterfaceIpWithDns: S.optional( S.NullOr(S.Boolean).pipe(T.Body("register_interface_ip_with_dns")), ), sccmVpnBoundarySupport: S.optional( S.NullOr(S.Boolean).pipe(T.Body("sccm_vpn_boundary_support")), ), serviceModeV2: S.optional( S.NullOr(DevicesPoliciesCustomCreateResponseServiceModeV2).pipe( T.Body("service_mode_v2"), ), ), supportUrl: S.optional(S.NullOr(S.String).pipe(T.Body("support_url"))), switchLocked: S.optional( S.NullOr(S.Boolean).pipe(T.Body("switch_locked")), ), targetTests: S.optional( S.NullOr(DevicesPoliciesCustomDeleteResultItemTargetTestsList).pipe( T.Body("target_tests"), ), ), tunnelProtocol: S.optional( S.NullOr(S.String).pipe(T.Body("tunnel_protocol")), ), virtualNetworks: S.optional( S.NullOr(DevicesPoliciesCustomDeleteResultItemVirtualNetworks).pipe( T.Body("virtual_networks"), ), ), }), ).annotate({ identifier: "DevicesPoliciesCustomDeleteResultItem", }) as any as S.Schema; export type DevicesPoliciesCustomDeleteResultList = Array; export const DevicesPoliciesCustomDeleteResultList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomDeleteResultItem, ) as any as S.Schema; export interface DeleteDevicePolicyCustomResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPoliciesCustomDeleteResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const DeleteDevicePolicyCustomResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesPoliciesCustomDeleteResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDevicePolicyCustomResponse", }) as any as S.Schema; export interface DeleteDevicePostureRequest { accountId: string; /** API UUID. */ ruleId: string; } export const DeleteDevicePostureRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ruleId: S.String.pipe(T.Label("rule_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/devices/posture/{rule_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDevicePostureRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteDevicePostureResponse { /** API UUID. */ id?: string | null; } export const DeleteDevicePostureResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDevicePostureResponse", }) as any as S.Schema; export interface DeleteDevicePostureIntegrationRequest { accountId: string; /** API UUID. */ integrationId: string; } export const DeleteDevicePostureIntegrationRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), integrationId: S.String.pipe(T.Label("integration_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/devices/posture/integration/{integration_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDevicePostureIntegrationRequest", }) as any as S.Schema; export type DeleteDevicePostureIntegrationResponse = unknown; export const DeleteDevicePostureIntegrationResponse = /*@__PURE__*/ S.suspend( () => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDevicePostureIntegrationResponse", }) as any as S.Schema; export interface DeleteDeviceRegistrationRequest { accountId: string; registrationId: string; } export const DeleteDeviceRegistrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), registrationId: S.String.pipe(T.Label("registration_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/devices/registrations/{registration_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDeviceRegistrationRequest", }) as any as S.Schema; export type DeleteDeviceRegistrationResponse = unknown; export const DeleteDeviceRegistrationResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDeviceRegistrationResponse", }) as any as S.Schema; export interface DeleteDeviceSettingRequest { accountId: string; } export const DeleteDeviceSettingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/devices/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDeviceSettingRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteDeviceSettingResponse { /** Sets the time limit, in seconds, that a user can use an override code to bypass WARP. */ disableForTime?: number | null; /** Controls whether the external emergency disconnect feature is enabled. */ externalEmergencySignalEnabled?: boolean | null; /** The SHA256 fingerprint (64 hexadecimal characters) of the HTTPS server certificate for the external_emergency_signal_url. If provided, the WARP client will use this value to verify the server's identity. The device will ignore any response if the server's certificate fingerprint does not exactly match this value. */ externalEmergencySignalFingerprint?: string | null; /** The interval at which the WARP client fetches the emergency disconnect signal, formatted as a duration string (e.g., "5m", "2m30s", "1h"). Minimum 30 seconds. */ externalEmergencySignalInterval?: string | null; /** The HTTPS URL from which to fetch the emergency disconnect signal. Must use HTTPS and have an IPv4 or IPv6 address as the host. */ externalEmergencySignalUrl?: string | null; /** Enable gateway proxy filtering on TCP. */ gatewayProxyEnabled?: boolean | null; /** Enable gateway proxy filtering on UDP. */ gatewayUdpProxyEnabled?: boolean | null; /** Enable installation of cloudflare managed root certificate. */ rootCertificateInstallationEnabled?: boolean | null; /** Enable using CGNAT virtual IPv4. */ useZtVirtualIp?: boolean | null; } export const DeleteDeviceSettingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ disableForTime: S.optional( S.NullOr(S.Number).pipe(T.Body("disable_for_time")), ), externalEmergencySignalEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("external_emergency_signal_enabled")), ), externalEmergencySignalFingerprint: S.optional( S.NullOr(S.String).pipe(T.Body("external_emergency_signal_fingerprint")), ), externalEmergencySignalInterval: S.optional( S.NullOr(S.String).pipe(T.Body("external_emergency_signal_interval")), ), externalEmergencySignalUrl: S.optional( S.NullOr(S.String).pipe(T.Body("external_emergency_signal_url")), ), gatewayProxyEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("gateway_proxy_enabled")), ), gatewayUdpProxyEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("gateway_udp_proxy_enabled")), ), rootCertificateInstallationEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("root_certificate_installation_enabled")), ), useZtVirtualIp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("use_zt_virtual_ip")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDeviceSettingResponse", }) as any as S.Schema; export interface DeleteDexRuleRequest { /** Unique identifier linked to an account. */ accountId: string; /** API Resource UUID tag. */ ruleId: string; } export const DeleteDexRuleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ruleId: S.String.pipe(T.Label("rule_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dex/rules/{rule_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDexRuleRequest", }) as any as S.Schema; export type DeleteDexRuleResponse = boolean; export const DeleteDexRuleResponse = /*@__PURE__*/ S.suspend(() => S.Boolean.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDexRuleResponse", }) as any as S.Schema; export interface DeleteDlpCustomEntryRequest { accountId: string; entryId: string; } export const DeleteDlpCustomEntryRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), entryId: S.String.pipe(T.Label("entry_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dlp/entries/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpCustomEntryRequest", }) as any as S.Schema; export type DeleteDlpCustomEntryResponse = unknown; export const DeleteDlpCustomEntryResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpCustomEntryResponse", }) as any as S.Schema; export interface DeleteDlpCustomPromptTopicRequest { accountId: string; entryId: string; } export const DeleteDlpCustomPromptTopicRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), entryId: S.String.pipe(T.Label("entry_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dlp/custom_prompt_topics/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpCustomPromptTopicRequest", }) as any as S.Schema; export type DeleteDlpCustomPromptTopicResponse = unknown; export const DeleteDlpCustomPromptTopicResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpCustomPromptTopicResponse", }) as any as S.Schema; export interface DeleteDlpDataClassRequest { accountId: string; dataClassId: string; } export const DeleteDlpDataClassRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), dataClassId: S.String.pipe(T.Label("data_class_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dlp/data_classes/{data_class_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpDataClassRequest", }) as any as S.Schema; export type DeleteDlpDataClassResponse = unknown; export const DeleteDlpDataClassResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpDataClassResponse", }) as any as S.Schema; export interface DeleteDlpDatasetRequest { accountId: string; datasetId: string; } export const DeleteDlpDatasetRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), datasetId: S.String.pipe(T.Label("dataset_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dlp/datasets/{dataset_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpDatasetRequest", }) as any as S.Schema; export interface DeleteDlpDatasetResponse {} export const DeleteDlpDatasetResponse = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpDatasetResponse", }) as any as S.Schema; export interface DeleteDlpDataTagCategoryRequest { accountId: string; categoryId: string; } export const DeleteDlpDataTagCategoryRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), categoryId: S.String.pipe(T.Label("category_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dlp/data_tag_categories/{category_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpDataTagCategoryRequest", }) as any as S.Schema; export type DeleteDlpDataTagCategoryResponse = unknown; export const DeleteDlpDataTagCategoryResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpDataTagCategoryResponse", }) as any as S.Schema; export interface DeleteDlpDataTagCategoryDataTagRequest { accountId: string; categoryId: string; tagId: string; } export const DeleteDlpDataTagCategoryDataTagRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), categoryId: S.String.pipe(T.Label("category_id")), tagId: S.String.pipe(T.Label("tag_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dlp/data_tag_categories/{category_id}/data_tags/{tag_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpDataTagCategoryDataTagRequest", }) as any as S.Schema; export type DeleteDlpDataTagCategoryDataTagResponse = unknown; export const DeleteDlpDataTagCategoryDataTagResponse = /*@__PURE__*/ S.suspend( () => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpDataTagCategoryDataTagResponse", }) as any as S.Schema; export interface DeleteDlpEmailRuleRequest { accountId: string; ruleId: string; } export const DeleteDlpEmailRuleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ruleId: S.String.pipe(T.Label("rule_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dlp/email/rules/{rule_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpEmailRuleRequest", }) as any as S.Schema; export type DlpEmailRulesDeleteResponseActionAction = "Block"; export const DlpEmailRulesDeleteResponseActionAction = /*@__PURE__*/ S.String; export interface DlpEmailRulesDeleteResponseAction { action: DlpEmailRulesDeleteResponseActionAction; message?: string | null; } export const DlpEmailRulesDeleteResponseAction = /*@__PURE__*/ S.suspend(() => S.Struct({ action: DlpEmailRulesDeleteResponseActionAction, message: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEmailRulesDeleteResponseAction", }) as any as S.Schema; export type DlpEmailRulesDeleteResponseConditionsItemOperator = | "InList" | "NotInList" | "MatchRegex" | "NotMatchRegex"; export const DlpEmailRulesDeleteResponseConditionsItemOperator = /*@__PURE__*/ S.String; export type DlpEmailRulesDeleteResponseConditionsItemSelector = | "Recipients" | "Sender" | "DLPProfiles"; export const DlpEmailRulesDeleteResponseConditionsItemSelector = /*@__PURE__*/ S.String; export type DlpEmailRulesDeleteResponseConditionsItemValueCase0List = Array; export const DlpEmailRulesDeleteResponseConditionsItemValueCase0List = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpEmailRulesDeleteResponseConditionsItemValue = | string | DlpEmailRulesDeleteResponseConditionsItemValueCase0List; export const DlpEmailRulesDeleteResponseConditionsItemValue = /*@__PURE__*/ S.Unknown.pipe(T.UnionCases([[], []])); export interface DlpEmailRulesDeleteResponseConditionsItem { operator: DlpEmailRulesDeleteResponseConditionsItemOperator; selector: DlpEmailRulesDeleteResponseConditionsItemSelector; value: DlpEmailRulesDeleteResponseConditionsItemValue; } export const DlpEmailRulesDeleteResponseConditionsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ operator: DlpEmailRulesDeleteResponseConditionsItemOperator, selector: DlpEmailRulesDeleteResponseConditionsItemSelector, value: DlpEmailRulesDeleteResponseConditionsItemValue, }), ).annotate({ identifier: "DlpEmailRulesDeleteResponseConditionsItem", }) as any as S.Schema; export type DlpEmailRulesDeleteResponseConditionsList = Array; export const DlpEmailRulesDeleteResponseConditionsList = /*@__PURE__*/ S.Array( DlpEmailRulesDeleteResponseConditionsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteDlpEmailRuleResponse { action: DlpEmailRulesDeleteResponseAction; /** Triggered if all conditions match. */ conditions: DlpEmailRulesDeleteResponseConditionsList; createdAt: string; enabled: boolean; name: string; priority: number; ruleId: string; updatedAt: string; description?: string | null; } export const DeleteDlpEmailRuleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ action: DlpEmailRulesDeleteResponseAction, conditions: DlpEmailRulesDeleteResponseConditionsList, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, priority: S.Number, ruleId: S.String.pipe(T.Body("rule_id")), updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpEmailRuleResponse", }) as any as S.Schema; export interface DeleteDlpEntryRequest { accountId: string; entryId: string; } export const DeleteDlpEntryRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), entryId: S.String.pipe(T.Label("entry_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dlp/entries/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpEntryRequest", }) as any as S.Schema; export type DeleteDlpEntryResponse = unknown; export const DeleteDlpEntryResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpEntryResponse", }) as any as S.Schema; export interface DeleteDlpEntryIntegrationRequest { accountId: string; entryId: string; } export const DeleteDlpEntryIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), entryId: S.String.pipe(T.Label("entry_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dlp/entries/integration/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpEntryIntegrationRequest", }) as any as S.Schema; export type DeleteDlpEntryIntegrationResponse = unknown; export const DeleteDlpEntryIntegrationResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpEntryIntegrationResponse", }) as any as S.Schema; export interface DeleteDlpEntryPredefinedRequest { accountId: string; entryId: string; } export const DeleteDlpEntryPredefinedRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), entryId: S.String.pipe(T.Label("entry_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dlp/entries/predefined/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpEntryPredefinedRequest", }) as any as S.Schema; export type DeleteDlpEntryPredefinedResponse = unknown; export const DeleteDlpEntryPredefinedResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpEntryPredefinedResponse", }) as any as S.Schema; export interface DeleteDlpProfileCustomRequest { accountId: string; profileId: string; } export const DeleteDlpProfileCustomRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), profileId: S.String.pipe(T.Label("profile_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dlp/profiles/custom/{profile_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpProfileCustomRequest", }) as any as S.Schema; export type DeleteDlpProfileCustomResponse = unknown; export const DeleteDlpProfileCustomResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpProfileCustomResponse", }) as any as S.Schema; export interface DeleteDlpProfilePredefinedRequest { accountId: string; profileId: string; } export const DeleteDlpProfilePredefinedRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), profileId: S.String.pipe(T.Label("profile_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dlp/profiles/predefined/{profile_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpProfilePredefinedRequest", }) as any as S.Schema; export type DeleteDlpProfilePredefinedResponse = unknown; export const DeleteDlpProfilePredefinedResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpProfilePredefinedResponse", }) as any as S.Schema; export interface DeleteDlpSensitivityGroupRequest { accountId: string; sensitivityGroupId: string; } export const DeleteDlpSensitivityGroupRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), sensitivityGroupId: S.String.pipe(T.Label("sensitivity_group_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpSensitivityGroupRequest", }) as any as S.Schema; export type DeleteDlpSensitivityGroupResponse = unknown; export const DeleteDlpSensitivityGroupResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpSensitivityGroupResponse", }) as any as S.Schema; export interface DeleteDlpSensitivityGroupLevelRequest { accountId: string; sensitivityGroupId: string; sensitivityLevelId: string; } export const DeleteDlpSensitivityGroupLevelRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), sensitivityGroupId: S.String.pipe(T.Label("sensitivity_group_id")), sensitivityLevelId: S.String.pipe(T.Label("sensitivity_level_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}/levels/{sensitivity_level_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpSensitivityGroupLevelRequest", }) as any as S.Schema; export type DeleteDlpSensitivityGroupLevelResponse = unknown; export const DeleteDlpSensitivityGroupLevelResponse = /*@__PURE__*/ S.suspend( () => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpSensitivityGroupLevelResponse", }) as any as S.Schema; export interface DeleteDlpSettingRequest { accountId: string; } export const DeleteDlpSettingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/dlp/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpSettingRequest", }) as any as S.Schema; export type DlpSettingsDeleteResponsePayloadLoggingMaskingLevel = | "full" | "partial" | "clear" | "default"; export const DlpSettingsDeleteResponsePayloadLoggingMaskingLevel = /*@__PURE__*/ S.String; export interface DlpSettingsDeleteResponsePayloadLogging { updatedAt: string; /** Masking level for payload logs. */ maskingLevel?: DlpSettingsDeleteResponsePayloadLoggingMaskingLevel | null; /** Base64-encoded public key for encrypting payload logs. Null when payload logging is disabled. */ publicKey?: string | null; } export const DlpSettingsDeleteResponsePayloadLogging = /*@__PURE__*/ S.suspend( () => S.Struct({ updatedAt: S.String.pipe(T.Body("updated_at")), maskingLevel: S.optional( S.NullOr(DlpSettingsDeleteResponsePayloadLoggingMaskingLevel).pipe( T.Body("masking_level"), ), ), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), }), ).annotate({ identifier: "DlpSettingsDeleteResponsePayloadLogging", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteDlpSettingResponse { /** Whether AI context analysis is enabled at the account level. */ aiContextAnalysis: boolean; /** Whether OCR is enabled at the account level. */ ocr: boolean; payloadLogging: DlpSettingsDeleteResponsePayloadLogging; } export const DeleteDlpSettingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ aiContextAnalysis: S.Boolean.pipe(T.Body("ai_context_analysis")), ocr: S.Boolean, payloadLogging: DlpSettingsDeleteResponsePayloadLogging.pipe( T.Body("payload_logging"), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteDlpSettingResponse", }) as any as S.Schema; export interface DeleteGatewayCertificateRequest { accountId: string; /** Identify the certificate with a UUID. */ certificateId: string; } export const DeleteGatewayCertificateRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), certificateId: S.String.pipe(T.Label("certificate_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/gateway/certificates/{certificate_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteGatewayCertificateRequest", }) as any as S.Schema; export type GatewayCertificatesDeleteResponseBindingStatus = | "pending_deployment" | "available" | "pending_deletion" | "inactive"; export const GatewayCertificatesDeleteResponseBindingStatus = /*@__PURE__*/ S.String; export type GatewayCertificatesDeleteResponseType = | "custom" | "gateway_managed"; export const GatewayCertificatesDeleteResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteGatewayCertificateResponse { /** Identify the certificate with a UUID. */ id?: string | null; /** Indicate the read-only deployment status of the certificate on Cloudflare's edge. Gateway TLS interception can use certificates in the 'available' (previously called 'active') state. */ bindingStatus?: GatewayCertificatesDeleteResponseBindingStatus | null; /** Provide the CA certificate (read-only). */ certificate?: string | null; createdAt?: string | null; expiresOn?: string | null; /** Provide the SHA256 fingerprint of the certificate (read-only). */ fingerprint?: string | null; /** Indicate whether Gateway TLS interception uses this certificate (read-only). You cannot set this value directly. To configure interception, use the Gateway configuration setting named `certificate` (read-only). */ inUse?: boolean | null; /** Indicate the organization that issued the certificate (read-only). */ issuerOrg?: string | null; /** Provide the entire issuer field of the certificate (read-only). */ issuerRaw?: string | null; /** Indicate the read-only certificate type, BYO-PKI (custom) or Gateway-managed. */ type?: GatewayCertificatesDeleteResponseType | null; updatedAt?: string | null; uploadedOn?: string | null; } export const DeleteGatewayCertificateResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), bindingStatus: S.optional( S.NullOr(GatewayCertificatesDeleteResponseBindingStatus).pipe( T.Body("binding_status"), ), ), certificate: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), expiresOn: S.optional(S.NullOr(S.String).pipe(T.Body("expires_on"))), fingerprint: S.optional(S.NullOr(S.String)), inUse: S.optional(S.NullOr(S.Boolean).pipe(T.Body("in_use"))), issuerOrg: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_org"))), issuerRaw: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_raw"))), type: S.optional(S.NullOr(GatewayCertificatesDeleteResponseType)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), uploadedOn: S.optional(S.NullOr(S.String).pipe(T.Body("uploaded_on"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteGatewayCertificateResponse", }) as any as S.Schema; export interface DeleteGatewayListRequest { accountId: string; /** Identify the API resource with a UUID. */ listId: string; } export const DeleteGatewayListRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), listId: S.String.pipe(T.Label("list_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/gateway/lists/{list_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteGatewayListRequest", }) as any as S.Schema; export type DeleteGatewayListResponse = unknown; export const DeleteGatewayListResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteGatewayListResponse", }) as any as S.Schema; export interface DeleteGatewayLocationRequest { accountId: string; locationId: string; } export const DeleteGatewayLocationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), locationId: S.String.pipe(T.Label("location_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/gateway/locations/{location_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteGatewayLocationRequest", }) as any as S.Schema; export type DeleteGatewayLocationResponse = unknown; export const DeleteGatewayLocationResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteGatewayLocationResponse", }) as any as S.Schema; export interface DeleteGatewayPacfileRequest { accountId: string; pacfileId: string; } export const DeleteGatewayPacfileRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), pacfileId: S.String.pipe(T.Label("pacfile_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/gateway/pacfiles/{pacfile_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteGatewayPacfileRequest", }) as any as S.Schema; export type DeleteGatewayPacfileResponse = unknown; export const DeleteGatewayPacfileResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteGatewayPacfileResponse", }) as any as S.Schema; export interface DeleteGatewayProxyEndpointRequest { accountId: string; proxyEndpointId: string; } export const DeleteGatewayProxyEndpointRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), proxyEndpointId: S.String.pipe(T.Label("proxy_endpoint_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/gateway/proxy_endpoints/{proxy_endpoint_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteGatewayProxyEndpointRequest", }) as any as S.Schema; export type DeleteGatewayProxyEndpointResponse = unknown; export const DeleteGatewayProxyEndpointResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteGatewayProxyEndpointResponse", }) as any as S.Schema; export interface DeleteGatewayRuleRequest { accountId: string; /** Identify the API resource with a UUID. */ ruleId: string; } export const DeleteGatewayRuleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ruleId: S.String.pipe(T.Label("rule_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/gateway/rules/{rule_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteGatewayRuleRequest", }) as any as S.Schema; export type DeleteGatewayRuleResponse = unknown; export const DeleteGatewayRuleResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteGatewayRuleResponse", }) as any as S.Schema; export interface DeleteIdentityProviderForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ identityProviderId: string; } export const DeleteIdentityProviderForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), identityProviderId: S.String.pipe(T.Label("identity_provider_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/access/identity_providers/{identity_provider_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteIdentityProviderForAccountRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteIdentityProviderResponse { /** UUID. */ id?: string | null; } export const DeleteIdentityProviderResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteIdentityProviderResponse", }) as any as S.Schema; export interface DeleteIdentityProviderForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ identityProviderId: string; } export const DeleteIdentityProviderForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), identityProviderId: S.String.pipe(T.Label("identity_provider_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/zones/{zone_id}/access/identity_providers/{identity_provider_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteIdentityProviderForZoneRequest", }) as any as S.Schema; export interface DeleteNetworkHostnameRouteRequest { /** Cloudflare account ID */ accountId: string; /** The hostname route ID. */ hostnameRouteId: string; } export const DeleteNetworkHostnameRouteRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), hostnameRouteId: S.String.pipe(T.Label("hostname_route_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/zerotrust/routes/hostname/{hostname_route_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteNetworkHostnameRouteRequest", }) as any as S.Schema; export type NetworksHostnameRoutesDeleteResponseTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const NetworksHostnameRoutesDeleteResponseTunType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteNetworkHostnameRouteResponse { /** The hostname route ID. */ id?: string | null; /** An optional description of the hostname route. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** The hostname of the route. */ hostname?: string | null; /** The type of tunnel. */ tunType?: NetworksHostnameRoutesDeleteResponseTunType | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** A user-friendly name for a tunnel. */ tunnelName?: string | null; } export const DeleteNetworkHostnameRouteResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), hostname: S.optional(S.NullOr(S.String)), tunType: S.optional( S.NullOr(NetworksHostnameRoutesDeleteResponseTunType).pipe( T.Body("tun_type"), ), ), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), tunnelName: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_name"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteNetworkHostnameRouteResponse", }) as any as S.Schema; export interface DeleteNetworkRouteRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the route. */ routeId: string; } export const DeleteNetworkRouteRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), routeId: S.String.pipe(T.Label("route_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/teamnet/routes/{route_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteNetworkRouteRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteNetworkRouteResponse { /** UUID of the route. */ id?: string | null; /** Optional remark describing the route. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** The private IPv4 or IPv6 range connected by the route, in CIDR notation. */ network?: string | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** UUID of the virtual network. */ virtualNetworkId?: string | null; } export const DeleteNetworkRouteResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), network: S.optional(S.NullOr(S.String)), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), virtualNetworkId: S.optional( S.NullOr(S.String).pipe(T.Body("virtual_network_id")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteNetworkRouteResponse", }) as any as S.Schema; export type NetworksRoutesNetworksDeleteRequestTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const NetworksRoutesNetworksDeleteRequestTunType = /*@__PURE__*/ S.String; export interface DeleteNetworkRouteNetworkRequest { /** Cloudflare account ID */ accountId: string; /** IP/CIDR range in URL-encoded format */ ipNetworkEncoded: string; /** The type of tunnel. */ tunType?: NetworksRoutesNetworksDeleteRequestTunType | (string & {}); /** UUID of the tunnel. */ tunnelId?: string; /** UUID of the virtual network. */ virtualNetworkId?: string; } export const DeleteNetworkRouteNetworkRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ipNetworkEncoded: S.String.pipe(T.Label("ip_network_encoded")), tunType: S.optional( NetworksRoutesNetworksDeleteRequestTunType.pipe(T.Query("tun_type")), ), tunnelId: S.optional(S.String.pipe(T.Query("tunnel_id"))), virtualNetworkId: S.optional(S.String.pipe(T.Query("virtual_network_id"))), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/teamnet/routes/network/{ip_network_encoded}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteNetworkRouteNetworkRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteNetworkRouteNetworkResponse { /** UUID of the route. */ id?: string | null; /** Optional remark describing the route. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** The private IPv4 or IPv6 range connected by the route, in CIDR notation. */ network?: string | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** UUID of the virtual network. */ virtualNetworkId?: string | null; } export const DeleteNetworkRouteNetworkResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), network: S.optional(S.NullOr(S.String)), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), virtualNetworkId: S.optional( S.NullOr(S.String).pipe(T.Body("virtual_network_id")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteNetworkRouteNetworkResponse", }) as any as S.Schema; export interface DeleteNetworkSubnetWarpRequest { /** Cloudflare account ID */ accountId: string; /** The UUID of the subnet. */ subnetId: string; } export const DeleteNetworkSubnetWarpRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), subnetId: S.String.pipe(T.Label("subnet_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/zerotrust/subnets/warp/{subnet_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteNetworkSubnetWarpRequest", }) as any as S.Schema; export type NetworksSubnetsWarpDeleteResponseSubnetType = | "cloudflare_source" | "warp"; export const NetworksSubnetsWarpDeleteResponseSubnetType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteNetworkSubnetWarpResponse { /** The UUID of the subnet. */ id?: string | null; /** An optional description of the subnet. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** If `true`, this is the default subnet for the account. There can only be one default subnet per account. */ isDefaultNetwork?: boolean | null; /** A user-friendly name for the subnet. */ name?: string | null; /** The private IPv4 or IPv6 range defining the subnet, in CIDR notation. */ network?: string | null; /** The type of subnet. */ subnetType?: NetworksSubnetsWarpDeleteResponseSubnetType | null; } export const DeleteNetworkSubnetWarpResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), isDefaultNetwork: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_default_network")), ), name: S.optional(S.NullOr(S.String)), network: S.optional(S.NullOr(S.String)), subnetType: S.optional( S.NullOr(NetworksSubnetsWarpDeleteResponseSubnetType).pipe( T.Body("subnet_type"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteNetworkSubnetWarpResponse", }) as any as S.Schema; export interface DeleteNetworkVirtualNetworkRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the virtual network. */ virtualNetworkId: string; } export const DeleteNetworkVirtualNetworkRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), virtualNetworkId: S.String.pipe(T.Label("virtual_network_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/teamnet/virtual_networks/{virtual_network_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteNetworkVirtualNetworkRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteNetworkVirtualNetworkResponse { /** UUID of the virtual network. */ id: string; /** Optional remark describing the virtual network. */ comment: string; /** Timestamp of when the resource was created. */ createdAt: string; /** If `true`, this virtual network is the default for the account. */ isDefaultNetwork: boolean; /** A user-friendly name for the virtual network. */ name: string; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; } export const DeleteNetworkVirtualNetworkResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, comment: S.String, createdAt: S.String.pipe(T.Body("created_at")), isDefaultNetwork: S.Boolean.pipe(T.Body("is_default_network")), name: S.String, deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteNetworkVirtualNetworkResponse", }) as any as S.Schema; export interface DeleteRiskScoringIntegrationRequest { accountId: string; integrationId: string; } export const DeleteRiskScoringIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), integrationId: S.String.pipe(T.Label("integration_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/zt_risk_scoring/integrations/{integration_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteRiskScoringIntegrationRequest", }) as any as S.Schema; export type DeleteRiskScoringIntegrationResponse = unknown; export const DeleteRiskScoringIntegrationResponse = /*@__PURE__*/ S.suspend( () => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteRiskScoringIntegrationResponse", }) as any as S.Schema; export interface DeleteTunnelCloudflaredRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; } export const DeleteTunnelCloudflaredRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/cfd_tunnel/{tunnel_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteTunnelCloudflaredRequest", }) as any as S.Schema; export type TunnelsCloudflaredDeleteResponseConfigSrc = "local" | "cloudflare"; export const TunnelsCloudflaredDeleteResponseConfigSrc = /*@__PURE__*/ S.String; export type TunnelsCloudflaredDeleteResponseConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export const TunnelsCloudflaredDeleteResponseConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export type TunnelsCloudflaredDeleteResponseConnectionsList = Array; export const TunnelsCloudflaredDeleteResponseConnectionsList = /*@__PURE__*/ S.Array( TunnelsCloudflaredCreateResponseConnectionsItem, ) as any as S.Schema; export type TunnelsCloudflaredDeleteResponseStatus = | "inactive" | "degraded" | "healthy" | "down"; export const TunnelsCloudflaredDeleteResponseStatus = /*@__PURE__*/ S.String; export type TunnelsCloudflaredDeleteResponseTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const TunnelsCloudflaredDeleteResponseTunType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteTunnelCloudflaredResponse { /** UUID of the tunnel. */ id?: string | null; /** Cloudflare account ID */ accountTag?: string | null; /** Indicates if this is a locally or remotely configured tunnel. If `local`, manage the tunnel using a YAML file on the origin machine. If `cloudflare`, manage the tunnel on the Zero Trust dashboard. */ configSrc?: TunnelsCloudflaredDeleteResponseConfigSrc | null; /** The Cloudflare Tunnel connections between your origin and Cloudflare's edge. */ connections?: TunnelsCloudflaredDeleteResponseConnectionsList | null; /** Timestamp of when the tunnel established at least one connection to Cloudflare's edge. If `null`, the tunnel is inactive. */ connsActiveAt?: string | null; /** Timestamp of when the tunnel became inactive (no connections to Cloudflare's edge). If `null`, the tunnel is active. */ connsInactiveAt?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** Metadata associated with the tunnel. */ metadata?: unknown | null; /** A user-friendly name for a tunnel. */ name?: string | null; /** If `true`, the tunnel can be configured remotely from the Zero Trust dashboard. If `false`, the tunnel must be configured locally on the origin machine. */ remoteConfig?: boolean | null; /** The status of the tunnel. Valid values are `inactive` (tunnel has never been run), `degraded` (tunnel is active and able to serve traffic but in an unhealthy state), `healthy` (tunnel is active and able to serve traffic), or `down` (tunnel can not serve traffic as it has no connections to the Cloudflare Edge). */ status?: TunnelsCloudflaredDeleteResponseStatus | null; /** The type of tunnel. */ tunType?: TunnelsCloudflaredDeleteResponseTunType | null; } export const DeleteTunnelCloudflaredResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), accountTag: S.optional(S.NullOr(S.String).pipe(T.Body("account_tag"))), configSrc: S.optional( S.NullOr(TunnelsCloudflaredDeleteResponseConfigSrc).pipe( T.Body("config_src"), ), ), connections: S.optional( S.NullOr(TunnelsCloudflaredDeleteResponseConnectionsList), ), connsActiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_active_at")), ), connsInactiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_inactive_at")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), metadata: S.optional(S.NullOr(S.Unknown)), name: S.optional(S.NullOr(S.String)), remoteConfig: S.optional(S.NullOr(S.Boolean).pipe(T.Body("remote_config"))), status: S.optional(S.NullOr(TunnelsCloudflaredDeleteResponseStatus)), tunType: S.optional( S.NullOr(TunnelsCloudflaredDeleteResponseTunType).pipe( T.Body("tun_type"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteTunnelCloudflaredResponse", }) as any as S.Schema; export interface DeleteTunnelCloudflaredConnectionRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; /** UUID of the Cloudflare Tunnel connector. */ clientId?: string; } export const DeleteTunnelCloudflaredConnectionRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), clientId: S.optional(S.String.pipe(T.Query("client_id"))), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/cfd_tunnel/{tunnel_id}/connections", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteTunnelCloudflaredConnectionRequest", }) as any as S.Schema; export type DeleteTunnelCloudflaredConnectionResponse = unknown; export const DeleteTunnelCloudflaredConnectionResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteTunnelCloudflaredConnectionResponse", }) as any as S.Schema; export interface DeleteTunnelWarpConnectorRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; } export const DeleteTunnelWarpConnectorRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), }) .pipe( T.Http({ method: "DELETE", uri: "/accounts/{account_id}/warp_connector/{tunnel_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteTunnelWarpConnectorRequest", }) as any as S.Schema; export type TunnelsWarpConnectorDeleteResponseConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export const TunnelsWarpConnectorDeleteResponseConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export type TunnelsWarpConnectorDeleteResponseConnectionsList = Array; export const TunnelsWarpConnectorDeleteResponseConnectionsList = /*@__PURE__*/ S.Array( TunnelsCloudflaredCreateResponseConnectionsItem, ) as any as S.Schema; export type TunnelsWarpConnectorDeleteResponseStatus = | "inactive" | "degraded" | "healthy" | "down"; export const TunnelsWarpConnectorDeleteResponseStatus = /*@__PURE__*/ S.String; export type TunnelsWarpConnectorDeleteResponseTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const TunnelsWarpConnectorDeleteResponseTunType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface DeleteTunnelWarpConnectorResponse { /** UUID of the tunnel. */ id?: string | null; /** Cloudflare account ID */ accountTag?: string | null; /** The Cloudflare Tunnel connections between your origin and Cloudflare's edge. */ connections?: TunnelsWarpConnectorDeleteResponseConnectionsList | null; /** Timestamp of when the tunnel established at least one connection to Cloudflare's edge. If `null`, the tunnel is inactive. */ connsActiveAt?: string | null; /** Timestamp of when the tunnel became inactive (no connections to Cloudflare's edge). If `null`, the tunnel is active. */ connsInactiveAt?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** Metadata associated with the tunnel. */ metadata?: unknown | null; /** A user-friendly name for a tunnel. */ name?: string | null; /** The status of the tunnel. Valid values are `inactive` (tunnel has never been run), `degraded` (tunnel is active and able to serve traffic but in an unhealthy state), `healthy` (tunnel is active and able to serve traffic), or `down` (tunnel can not serve traffic as it has no connections to the Cloudflare Edge). */ status?: TunnelsWarpConnectorDeleteResponseStatus | null; /** The type of tunnel. */ tunType?: TunnelsWarpConnectorDeleteResponseTunType | null; } export const DeleteTunnelWarpConnectorResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), accountTag: S.optional(S.NullOr(S.String).pipe(T.Body("account_tag"))), connections: S.optional( S.NullOr(TunnelsWarpConnectorDeleteResponseConnectionsList), ), connsActiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_active_at")), ), connsInactiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_inactive_at")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), metadata: S.optional(S.NullOr(S.Unknown)), name: S.optional(S.NullOr(S.String)), status: S.optional(S.NullOr(TunnelsWarpConnectorDeleteResponseStatus)), tunType: S.optional( S.NullOr(TunnelsWarpConnectorDeleteResponseTunType).pipe( T.Body("tun_type"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "DeleteTunnelWarpConnectorResponse", }) as any as S.Schema; export interface EditDlpDatasetUploadRequest { accountId: string; datasetId: string; version: number; } export const EditDlpDatasetUploadRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), datasetId: S.String.pipe(T.Label("dataset_id")), version: S.Number.pipe(T.Label()), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/datasets/{dataset_id}/upload/{version}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "EditDlpDatasetUploadRequest", }) as any as S.Schema; export type DlpDatasetsUploadEditResponseColumnsItemUploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsUploadEditResponseColumnsItemUploadStatus = /*@__PURE__*/ S.String; export interface DlpDatasetsUploadEditResponseColumnsItem { entryId: string; headerName: string; numCells: number; uploadStatus: DlpDatasetsUploadEditResponseColumnsItemUploadStatus; } export const DlpDatasetsUploadEditResponseColumnsItem = /*@__PURE__*/ S.suspend( () => S.Struct({ entryId: S.String.pipe(T.Body("entry_id")), headerName: S.String.pipe(T.Body("header_name")), numCells: S.Number.pipe(T.Body("num_cells")), uploadStatus: DlpDatasetsUploadEditResponseColumnsItemUploadStatus.pipe( T.Body("upload_status"), ), }), ).annotate({ identifier: "DlpDatasetsUploadEditResponseColumnsItem", }) as any as S.Schema; export type DlpDatasetsUploadEditResponseColumnsList = Array; export const DlpDatasetsUploadEditResponseColumnsList = /*@__PURE__*/ S.Array( DlpDatasetsUploadEditResponseColumnsItem, ) as any as S.Schema; export type DlpDatasetsUploadEditResponseStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsUploadEditResponseStatus = /*@__PURE__*/ S.String; export type DlpDatasetsUploadEditResponseUploadsItemStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsUploadEditResponseUploadsItemStatus = /*@__PURE__*/ S.String; export interface DlpDatasetsUploadEditResponseUploadsItem { numCells: number; status: DlpDatasetsUploadEditResponseUploadsItemStatus; version: number; } export const DlpDatasetsUploadEditResponseUploadsItem = /*@__PURE__*/ S.suspend( () => S.Struct({ numCells: S.Number.pipe(T.Body("num_cells")), status: DlpDatasetsUploadEditResponseUploadsItemStatus, version: S.Number, }), ).annotate({ identifier: "DlpDatasetsUploadEditResponseUploadsItem", }) as any as S.Schema; export type DlpDatasetsUploadEditResponseUploadsList = Array; export const DlpDatasetsUploadEditResponseUploadsList = /*@__PURE__*/ S.Array( DlpDatasetsUploadEditResponseUploadsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface EditDlpDatasetUploadResponse { id: string; columns: DlpDatasetsUploadEditResponseColumnsList; createdAt: string; encodingVersion: number; name: string; numCells: number; secret: boolean; status: DlpDatasetsUploadEditResponseStatus; /** Stores when the dataset was last updated. */ updatedAt: string; uploads: DlpDatasetsUploadEditResponseUploadsList; caseSensitive?: boolean | null; /** The description of the dataset. */ description?: string | null; } export const EditDlpDatasetUploadResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, columns: DlpDatasetsUploadEditResponseColumnsList, createdAt: S.String.pipe(T.Body("created_at")), encodingVersion: S.Number.pipe(T.Body("encoding_version")), name: S.String, numCells: S.Number.pipe(T.Body("num_cells")), secret: S.Boolean, status: DlpDatasetsUploadEditResponseStatus, updatedAt: S.String.pipe(T.Body("updated_at")), uploads: DlpDatasetsUploadEditResponseUploadsList, caseSensitive: S.optional( S.NullOr(S.Boolean).pipe(T.Body("case_sensitive")), ), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "EditDlpDatasetUploadResponse", }) as any as S.Schema; export interface GetAccessApplicationCaForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ appId: string; } export const GetAccessApplicationCaForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), appId: S.String.pipe(T.Label("app_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/apps/{app_id}/ca", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessApplicationCaForAccountRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessApplicationCaResponse { /** The ID of the CA. */ id?: string | null; /** The Application Audience (AUD) tag. Identifies the application associated with the CA. */ aud?: string | null; /** The public key to add to your SSH server configuration. */ publicKey?: string | null; } export const GetAccessApplicationCaResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), aud: S.optional(S.NullOr(S.String)), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessApplicationCaResponse", }) as any as S.Schema; export interface GetAccessApplicationCaForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ appId: string; } export const GetAccessApplicationCaForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), appId: S.String.pipe(T.Label("app_id")), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/apps/{app_id}/ca", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessApplicationCaForZoneRequest", }) as any as S.Schema; export interface GetAccessApplicationForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** Identifier. */ appId: string; } export const GetAccessApplicationForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), appId: S.String.pipe(T.Label("app_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/apps/{app_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessApplicationForAccountRequest", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsGetResultSelfHostedApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSelfHostedApplicationAllowedIdpsList = Array; export const AccessApplicationsGetResultSelfHostedApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationCorsHeadersAllowedHeadersList = Array; export const AccessApplicationsGetResultSelfHostedApplicationCorsHeadersAllowedHeadersList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationCorsHeadersAllowedMethodsItem = | "GET" | "POST" | "HEAD" | "PUT" | "DELETE" | "CONNECT" | "OPTIONS" | "TRACE" | "PATCH"; export const AccessApplicationsGetResultSelfHostedApplicationCorsHeadersAllowedMethodsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSelfHostedApplicationCorsHeadersAllowedMethodsList = Array; export const AccessApplicationsGetResultSelfHostedApplicationCorsHeadersAllowedMethodsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSelfHostedApplicationCorsHeadersAllowedMethodsItem, ) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationCorsHeadersAllowedOriginsList = Array; export const AccessApplicationsGetResultSelfHostedApplicationCorsHeadersAllowedOriginsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export interface AccessApplicationsGetResultSelfHostedApplicationCorsHeaders { /** Allows all HTTP request headers. */ allowAllHeaders?: boolean | null; /** Allows all HTTP request methods. */ allowAllMethods?: boolean | null; /** Allows all origins. */ allowAllOrigins?: boolean | null; /** When set to `true`, includes credentials (cookies, authorization headers, or TLS client certificates) with requests. */ allowCredentials?: boolean | null; /** Allowed HTTP request headers. */ allowedHeaders?: AccessApplicationsGetResultSelfHostedApplicationCorsHeadersAllowedHeadersList | null; /** Allowed HTTP request methods. */ allowedMethods?: AccessApplicationsGetResultSelfHostedApplicationCorsHeadersAllowedMethodsList | null; /** Allowed origins. */ allowedOrigins?: AccessApplicationsGetResultSelfHostedApplicationCorsHeadersAllowedOriginsList | null; /** The maximum number of seconds the results of a preflight request can be cached. */ maxAge?: number | null; } export const AccessApplicationsGetResultSelfHostedApplicationCorsHeaders = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAllHeaders: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_all_headers")), ), allowAllMethods: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_all_methods")), ), allowAllOrigins: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_all_origins")), ), allowCredentials: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_credentials")), ), allowedHeaders: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationCorsHeadersAllowedHeadersList, ).pipe(T.Body("allowed_headers")), ), allowedMethods: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationCorsHeadersAllowedMethodsList, ).pipe(T.Body("allowed_methods")), ), allowedOrigins: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationCorsHeadersAllowedOriginsList, ).pipe(T.Body("allowed_origins")), ), maxAge: S.optional(S.NullOr(S.Number).pipe(T.Body("max_age"))), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationCorsHeaders", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationCustomPagesList = Array; export const AccessApplicationsGetResultSelfHostedApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPublicDestination { type?: AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsGetResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSelfHostedApplicationDestinationsItemWorkerDestination { type: AccessApplicationsGetResultSelfHostedApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultSelfHostedApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationDestinationsItem = | AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPublicDestination | AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPrivateDestination | AccessApplicationsGetResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsGetResultSelfHostedApplicationDestinationsItemWorkerDestination | AccessApplicationsGetResultSelfHostedApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllWorkersDestination | AccessApplicationsGetResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsGetResultSelfHostedApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsGetResultSelfHostedApplicationDestinationsList = Array; export const AccessApplicationsGetResultSelfHostedApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSelfHostedApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultSelfHostedApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultSelfHostedApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsGetResultSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultSelfHostedApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsGetResultSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsGetResultSelfHostedApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsGetResultSelfHostedApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsGetResultSelfHostedApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsGetResultSelfHostedApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsGetResultSelfHostedApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultSelfHostedApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultSelfHostedApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireList = Array; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsGetResultSelfHostedApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsGetResultSelfHostedApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationPoliciesList = Array; export const AccessApplicationsGetResultSelfHostedApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSelfHostedApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme = "httpbasic"; export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic { /** Password used to authenticate with the remote SCIM service. */ password: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme; /** User name used to authenticate with the remote SCIM service. */ user: string; } export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = /*@__PURE__*/ S.suspend(() => S.Struct({ password: S.String, scheme: AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme, user: S.String, }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme = "oauthbearertoken"; export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken { /** Token used to authenticate with the remote SCIM service. */ token: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme; } export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = /*@__PURE__*/ S.suspend(() => S.Struct({ token: S.String, scheme: AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme, }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme = "oauth2"; export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList = Array; export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 { /** URL used to generate the auth code used during token generation. */ authorizationUrl: string; /** Client ID used to authenticate when generating a token for authenticating with the remote SCIM service. */ clientId: string; /** Secret used to authenticate when generating a token for authenticating with the remove SCIM service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme; /** URL used to generate the token used to authenticate with the remote SCIM service. */ tokenUrl: string; /** The authorization scopes to request when generating the token used to authenticate with the remove SCIM service. */ scopes?: AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList | null; } export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = /*@__PURE__*/ S.suspend(() => S.Struct({ authorizationUrl: S.String.pipe(T.Body("authorization_url")), clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme, tokenUrl: S.String.pipe(T.Body("token_url")), scopes: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthentication = | AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic | AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 | AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], [ "authorizationUrl", "clientId", "clientSecret", "scheme", "tokenUrl", "scopes", ], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsGetResultSelfHostedApplicationScimConfigMappingsItemOperations = AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations; export const AccessApplicationsGetResultSelfHostedApplicationScimConfigMappingsItemOperations = AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations; export type AccessApplicationsGetResultSelfHostedApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsGetResultSelfHostedApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSelfHostedApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsGetResultSelfHostedApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsGetResultSelfHostedApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations, ), ), strictness: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationScimConfigMappingsList = Array; export const AccessApplicationsGetResultSelfHostedApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSelfHostedApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultSelfHostedApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsGetResultSelfHostedApplicationScimConfigMappingsList | null; } export const AccessApplicationsGetResultSelfHostedApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationSelfHostedDomainsList = Array; export const AccessApplicationsGetResultSelfHostedApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultSelfHostedApplicationTagsList = Array; export const AccessApplicationsGetResultSelfHostedApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultSelfHostedApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; /** The application type. */ type: AccessApplicationsGetResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsGetResultSelfHostedApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsGetResultSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsGetResultSelfHostedApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsGetResultSelfHostedApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultSelfHostedApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsGetResultSelfHostedApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsGetResultSelfHostedApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsGetResultSelfHostedApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsGetResultSelfHostedApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsGetResultSelfHostedApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsGetResultSelfHostedApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, type: AccessApplicationsGetResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr(AccessApplicationsGetResultSelfHostedApplicationPoliciesList), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsGetResultSelfHostedApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSelfHostedApplication", }) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationAllowedIdpsList = Array; export const AccessApplicationsGetResultSaaSApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationCustomPagesList = Array; export const AccessApplicationsGetResultSaaSApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultSaaSApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsGetResultSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsGetResultSaaSApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSaaSApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultSaaSApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultSaaSApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireList = Array; export const AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsGetResultSaaSApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsGetResultSaaSApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultSaaSApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsGetResultSaaSApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationPoliciesList = Array; export const AccessApplicationsGetResultSaaSApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSaaSApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppAuthType = | "saml" | "oidc"; export const AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppAuthType = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat = | "urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" | "urn:oasis:names:tc:SAML:2.0:attrname-format:basic" | "urn:oasis:names:tc:SAML:2.0:attrname-format:uri"; export const AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem = AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem; export const AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem = AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem; export type AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList = Array; export const AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem, ) as any as S.Schema; export interface AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource { /** The name of the IdP attribute. */ name?: string | null; /** A mapping from IdP ID to attribute name. */ nameByIdp?: AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList | null; } export const AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.NullOr(S.String)), nameByIdp: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList, ).pipe(T.Body("name_by_idp")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource", }) as any as S.Schema; export interface AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem { /** The SAML FriendlyName of the attribute. */ friendlyName?: string | null; /** The name of the attribute. */ name?: string | null; /** A globally unique name for an identity or service provider. */ nameFormat?: AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat | null; /** If the attribute is required when building a SAML assertion. */ required?: boolean | null; source?: AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource | null; } export const AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ friendlyName: S.optional( S.NullOr(S.String).pipe(T.Body("friendly_name")), ), name: S.optional(S.NullOr(S.String)), nameFormat: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat, ).pipe(T.Body("name_format")), ), required: S.optional(S.NullOr(S.Boolean)), source: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem", }) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList = Array; export const AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem, ) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat = | "id" | "email"; export const AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSApp { /** Optional identifier indicating the authentication protocol used for the saas app. Required for OIDC. Default if unset is "saml" */ authType?: AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppAuthType | null; /** The service provider's endpoint that is responsible for receiving and parsing a SAML assertion. */ consumerServiceUrl?: string | null; customAttributes?: AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList | null; /** The URL that the user will be redirected to after a successful login for IDP initiated logins. */ defaultRelayState?: string | null; /** The unique identifier for your SaaS application. */ idpEntityId?: string | null; /** The format of the name identifier sent to the SaaS application. */ nameIdFormat?: AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat | null; /** A [JSONata](https://jsonata.org/) expression that transforms an application's user identities into a NameID value for its SAML assertion. This expression should evaluate to a singular string. The output of this expression can override the `name_id_format` setting. */ nameIdTransformJsonata?: string | null; /** The Access public certificate that will be used to verify your identity. */ publicKey?: string | null; /** A [JSONata] (https://jsonata.org/) expression that transforms an application's user identities into attribute assertions in the SAML response. The expression can transform id, email, name, and groups values. It can also transform fields listed in the saml_attributes or oidc_fields of the identity provider used to authenticate. The output of this expression must be a JSON object. */ samlAttributeTransformJsonata?: string | null; /** A globally unique name for an identity or service provider. */ spEntityId?: string | null; /** The endpoint where your SaaS application will send login requests. */ ssoEndpoint?: string | null; } export const AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSApp = /*@__PURE__*/ S.suspend(() => S.Struct({ authType: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppAuthType, ).pipe(T.Body("auth_type")), ), consumerServiceUrl: S.optional( S.NullOr(S.String).pipe(T.Body("consumer_service_url")), ), customAttributes: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList, ).pipe(T.Body("custom_attributes")), ), defaultRelayState: S.optional( S.NullOr(S.String).pipe(T.Body("default_relay_state")), ), idpEntityId: S.optional(S.NullOr(S.String).pipe(T.Body("idp_entity_id"))), nameIdFormat: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat, ).pipe(T.Body("name_id_format")), ), nameIdTransformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("name_id_transform_jsonata")), ), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), samlAttributeTransformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("saml_attribute_transform_jsonata")), ), spEntityId: S.optional(S.NullOr(S.String).pipe(T.Body("sp_entity_id"))), ssoEndpoint: S.optional(S.NullOr(S.String).pipe(T.Body("sso_endpoint"))), }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSApp", }) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppAuthType = | "saml" | "oidc"; export const AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppAuthType = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope = | "groups" | "profile" | "email" | "openid"; export const AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap = { [key: string]: string | undefined }; export const AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource { /** The name of the IdP claim. */ name?: string | null; /** A mapping from IdP ID to claim name. */ nameByIdp?: AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap | null; } export const AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.NullOr(S.String)), nameByIdp: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap, ).pipe(T.Body("name_by_idp")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource", }) as any as S.Schema; export interface AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem { /** The name of the claim. */ name?: string | null; /** If the claim is required when building an OIDC token. */ required?: boolean | null; /** The scope of the claim. */ scope?: AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope | null; source?: AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource | null; } export const AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.NullOr(S.String)), required: S.optional(S.NullOr(S.Boolean)), scope: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope, ), ), source: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem", }) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList = Array; export const AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem, ) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesItem = | "authorization_code" | "authorization_code_with_pkce" | "refresh_tokens" | "hybrid" | "implicit"; export const AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList = Array; export const AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesItem, ) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions = AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions; export const AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions = AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions; export type AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList = Array; export const AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions = AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions; export const AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions = AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions; export type AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppScopesItem = | "openid" | "groups" | "email" | "profile"; export const AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppScopesItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppScopesList = Array; export const AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppScopesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppScopesItem, ) as any as S.Schema; export interface AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSApp { /** The lifetime of the OIDC Access Token after creation. Valid units are m,h. Must be greater than or equal to 1m and less than or equal to 24h. */ accessTokenLifetime?: string | null; /** If client secret should be required on the token endpoint when authorization_code_with_pkce grant is used. */ allowPkceWithoutClientSecret?: boolean | null; /** The URL where this applications tile redirects users */ appLauncherUrl?: string | null; /** Identifier of the authentication protocol used for the saas app. Required for OIDC. */ authType?: AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppAuthType | null; /** The application client id */ clientId?: string | null; /** The application client secret, only returned on POST request. */ clientSecret?: string | null; customClaims?: AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList | null; /** The OIDC flows supported by this application */ grantTypes?: AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList | null; /** A regex to filter Cloudflare groups returned in ID token and userinfo endpoint */ groupFilterRegex?: string | null; hybridAndImplicitOptions?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions | null; /** The Access public certificate that will be used to verify your identity. */ publicKey?: string | null; /** The permitted URL's for Cloudflare to return Authorization codes and Access/ID tokens */ redirectUris?: AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList | null; refreshTokenOptions?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions | null; /** Define the user information shared with access, "offline_access" scope will be automatically enabled if refresh tokens are enabled */ scopes?: AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppScopesList | null; } export const AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSApp = /*@__PURE__*/ S.suspend(() => S.Struct({ accessTokenLifetime: S.optional( S.NullOr(S.String).pipe(T.Body("access_token_lifetime")), ), allowPkceWithoutClientSecret: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_pkce_without_client_secret")), ), appLauncherUrl: S.optional( S.NullOr(S.String).pipe(T.Body("app_launcher_url")), ), authType: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppAuthType, ).pipe(T.Body("auth_type")), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), customClaims: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList, ).pipe(T.Body("custom_claims")), ), grantTypes: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList, ).pipe(T.Body("grant_types")), ), groupFilterRegex: S.optional( S.NullOr(S.String).pipe(T.Body("group_filter_regex")), ), hybridAndImplicitOptions: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions, ).pipe(T.Body("hybrid_and_implicit_options")), ), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), redirectUris: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList, ).pipe(T.Body("redirect_uris")), ), refreshTokenOptions: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions, ).pipe(T.Body("refresh_token_options")), ), scopes: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSAppScopesList, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSApp", }) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationSaasApp = | AccessApplicationsGetResultSaaSApplicationSaasAppSAMLSaaSApp | AccessApplicationsGetResultSaaSApplicationSaasAppOIDCSaaSApp; export const AccessApplicationsGetResultSaaSApplicationSaasApp = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "authType", "consumerServiceUrl", "customAttributes", "defaultRelayState", "idpEntityId", "nameIdFormat", "nameIdTransformJsonata", "publicKey", "samlAttributeTransformJsonata", "spEntityId", "ssoEndpoint", ], [ "accessTokenLifetime", "allowPkceWithoutClientSecret", "appLauncherUrl", "authType", "clientId", "clientSecret", "customClaims", "grantTypes", "groupFilterRegex", "hybridAndImplicitOptions", "publicKey", "redirectUris", "refreshTokenOptions", "scopes", ], ]), ); export type AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsGetResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsGetResultSaaSApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsGetResultSaaSApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsGetResultSaaSApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultSaaSApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsGetResultSaaSApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsGetResultSaaSApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationScimConfigMappingsList = Array; export const AccessApplicationsGetResultSaaSApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultSaaSApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultSaaSApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsGetResultSaaSApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsGetResultSaaSApplicationScimConfigMappingsList | null; } export const AccessApplicationsGetResultSaaSApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsGetResultSaaSApplicationTagsList = Array; export const AccessApplicationsGetResultSaaSApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultSaaSApplication { /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsGetResultSaaSApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsGetResultSaaSApplicationCustomPagesList | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsGetResultSaaSApplicationPoliciesList | null; saasApp?: AccessApplicationsGetResultSaaSApplicationSaasApp | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsGetResultSaaSApplicationScimConfig | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsGetResultSaaSApplicationTagsList | null; /** The application type. */ type?: AccessApplicationsGetResultSelfHostedApplicationType | null; } export const AccessApplicationsGetResultSaaSApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customPages: S.optional( S.NullOr( AccessApplicationsGetResultSaaSApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr(AccessApplicationsGetResultSaaSApplicationPoliciesList), ), saasApp: S.optional( S.NullOr(AccessApplicationsGetResultSaaSApplicationSaasApp).pipe( T.Body("saas_app"), ), ), scimConfig: S.optional( S.NullOr(AccessApplicationsGetResultSaaSApplicationScimConfig).pipe( T.Body("scim_config"), ), ), tags: S.optional( S.NullOr(AccessApplicationsGetResultSaaSApplicationTagsList), ), type: S.optional( S.NullOr(AccessApplicationsGetResultSelfHostedApplicationType), ), }), ).annotate({ identifier: "AccessApplicationsGetResultSaaSApplication", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsGetResultBrowserSSHApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserSSHApplicationAllowedIdpsList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationCustomPagesList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPublicDestination { type?: AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemWorkerDestination { type: AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationDestinationsItem = | AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPublicDestination | AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPrivateDestination | AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemWorkerDestination | AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllWorkersDestination | AccessApplicationsGetResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsGetResultBrowserSSHApplicationDestinationsList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserSSHApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserSSHApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultBrowserSSHApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsGetResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsGetResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsGetResultBrowserSSHApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsGetResultBrowserSSHApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsGetResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsGetResultBrowserSSHApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserSSHApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationPoliciesList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserSSHApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsGetResultBrowserSSHApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserSSHApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsGetResultBrowserSSHApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationScimConfigMappingsList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserSSHApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserSSHApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsGetResultBrowserSSHApplicationScimConfigMappingsList | null; } export const AccessApplicationsGetResultBrowserSSHApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationSelfHostedDomainsList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserSSHApplicationTagsList = Array; export const AccessApplicationsGetResultBrowserSSHApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserSSHApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; /** The application type. */ type: AccessApplicationsGetResultBrowserSSHApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsGetResultBrowserSSHApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsGetResultSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsGetResultBrowserSSHApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsGetResultBrowserSSHApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultBrowserSSHApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsGetResultBrowserSSHApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsGetResultBrowserSSHApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsGetResultBrowserSSHApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsGetResultBrowserSSHApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsGetResultBrowserSSHApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsGetResultBrowserSSHApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, type: AccessApplicationsGetResultBrowserSSHApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr(AccessApplicationsGetResultBrowserSSHApplicationPoliciesList), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsGetResultBrowserSSHApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsGetResultBrowserSSHApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserSSHApplication", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsGetResultBrowserVNCApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserVNCApplicationAllowedIdpsList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationCustomPagesList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPublicDestination { type?: AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemWorkerDestination { type: AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationDestinationsItem = | AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPublicDestination | AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPrivateDestination | AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemWorkerDestination | AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllWorkersDestination | AccessApplicationsGetResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsGetResultBrowserVNCApplicationDestinationsList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserVNCApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserVNCApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultBrowserVNCApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsGetResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsGetResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsGetResultBrowserVNCApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsGetResultBrowserVNCApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsGetResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsGetResultBrowserVNCApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserVNCApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationPoliciesList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserVNCApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsGetResultBrowserVNCApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserVNCApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsGetResultBrowserVNCApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationScimConfigMappingsList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserVNCApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserVNCApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsGetResultBrowserVNCApplicationScimConfigMappingsList | null; } export const AccessApplicationsGetResultBrowserVNCApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationSelfHostedDomainsList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserVNCApplicationTagsList = Array; export const AccessApplicationsGetResultBrowserVNCApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserVNCApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; /** The application type. */ type: AccessApplicationsGetResultBrowserVNCApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsGetResultBrowserVNCApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsGetResultSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsGetResultBrowserVNCApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsGetResultBrowserVNCApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultBrowserVNCApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsGetResultBrowserVNCApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsGetResultBrowserVNCApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsGetResultBrowserVNCApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsGetResultBrowserVNCApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsGetResultBrowserVNCApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsGetResultBrowserVNCApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, type: AccessApplicationsGetResultBrowserVNCApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr(AccessApplicationsGetResultBrowserVNCApplicationPoliciesList), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsGetResultBrowserVNCApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsGetResultBrowserVNCApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserVNCApplication", }) as any as S.Schema; export type AccessApplicationsGetResultAppLauncherApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsGetResultAppLauncherApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultAppLauncherApplicationAllowedIdpsList = Array; export const AccessApplicationsGetResultAppLauncherApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultAppLauncherApplicationCustomPagesList = Array; export const AccessApplicationsGetResultAppLauncherApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsGetResultAppLauncherApplicationFooterLinksItem = AccessApplicationsCreateRequestFooterLinksItem; export const AccessApplicationsGetResultAppLauncherApplicationFooterLinksItem = AccessApplicationsCreateRequestFooterLinksItem; export type AccessApplicationsGetResultAppLauncherApplicationFooterLinksList = Array; export const AccessApplicationsGetResultAppLauncherApplicationFooterLinksList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestFooterLinksItem, ) as any as S.Schema; export type AccessApplicationsGetResultAppLauncherApplicationLandingPageDesign = AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign; export const AccessApplicationsGetResultAppLauncherApplicationLandingPageDesign = AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultAppLauncherApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsGetResultAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultAppLauncherApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultAppLauncherApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultAppLauncherApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireList = Array; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsGetResultAppLauncherApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsGetResultAppLauncherApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultAppLauncherApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsGetResultAppLauncherApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsGetResultAppLauncherApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsGetResultAppLauncherApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsGetResultAppLauncherApplicationPoliciesList = Array; export const AccessApplicationsGetResultAppLauncherApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultAppLauncherApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsGetResultAppLauncherApplication { /** The application type. */ type: AccessApplicationsGetResultAppLauncherApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsGetResultAppLauncherApplicationAllowedIdpsList | null; /** The image URL of the logo shown in the App Launcher header. */ appLauncherLogoUrl?: string | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The background color of the App Launcher page. */ bgColor?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsGetResultAppLauncherApplicationCustomPagesList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** The links in the App Launcher footer. */ footerLinks?: AccessApplicationsGetResultAppLauncherApplicationFooterLinksList | null; /** The background color of the App Launcher header. */ headerBgColor?: string | null; /** The design of the App Launcher landing page shown to users when they log in. */ landingPageDesign?: AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsGetResultAppLauncherApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Determines when to skip the App Launcher landing page. */ skipAppLauncherLoginPage?: boolean | null; } export const AccessApplicationsGetResultAppLauncherApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultAppLauncherApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsGetResultAppLauncherApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherLogoUrl: S.optional( S.NullOr(S.String).pipe(T.Body("app_launcher_logo_url")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), bgColor: S.optional(S.NullOr(S.String).pipe(T.Body("bg_color"))), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsGetResultAppLauncherApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), footerLinks: S.optional( S.NullOr( AccessApplicationsGetResultAppLauncherApplicationFooterLinksList, ).pipe(T.Body("footer_links")), ), headerBgColor: S.optional( S.NullOr(S.String).pipe(T.Body("header_bg_color")), ), landingPageDesign: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign, ).pipe(T.Body("landing_page_design")), ), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr(AccessApplicationsGetResultAppLauncherApplicationPoliciesList), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipAppLauncherLoginPage: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_app_launcher_login_page")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultAppLauncherApplication", }) as any as S.Schema; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationAllowedIdpsList = Array; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationCustomPagesList = Array; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList = Array; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesList = Array; export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsGetResultDeviceEnrollmentPermissionsApplication { /** The application type. */ type: AccessApplicationsGetResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationCustomPagesList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultDeviceEnrollmentPermissionsApplication", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationAllowedIdpsList = Array; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationCustomPagesList = Array; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireList = Array; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesList = Array; export const AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserIsolationPermissionsApplication { /** The application type. */ type: AccessApplicationsGetResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsGetResultBrowserIsolationPermissionsApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsGetResultBrowserIsolationPermissionsApplicationCustomPagesList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultBrowserIsolationPermissionsApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserIsolationPermissionsApplication", }) as any as S.Schema; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationAllowedIdpsList = Array; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationCustomPagesList = Array; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList = Array; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesList = Array; export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsGetResultGatewayIdentityProxyEndpointApplication { /** The application type. */ type: AccessApplicationsGetResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationCustomPagesList | null; /** The proxy endpoint domain in the format: 10 alphanumeric characters followed by .proxy.cloudflare-gateway.com */ domain?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultGatewayIdentityProxyEndpointApplication", }) as any as S.Schema; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultBookmarkApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsGetResultBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsGetResultBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBookmarkApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBookmarkApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBookmarkApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBookmarkApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireList = Array; export const AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBookmarkApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsGetResultBookmarkApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultBookmarkApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsGetResultBookmarkApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsGetResultBookmarkApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsGetResultBookmarkApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsGetResultBookmarkApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsGetResultBookmarkApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultBookmarkApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsGetResultBookmarkApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsGetResultBookmarkApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsGetResultBookmarkApplicationPoliciesList = Array; export const AccessApplicationsGetResultBookmarkApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBookmarkApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsGetResultBookmarkApplicationTagsList = Array; export const AccessApplicationsGetResultBookmarkApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultBookmarkApplication { /** UUID. */ id?: string | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** The URL or domain of the bookmark. */ domain?: string | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsGetResultBookmarkApplicationPoliciesList | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsGetResultBookmarkApplicationTagsList | null; /** The application type. */ type?: AccessApplicationsGetResultSelfHostedApplicationType | null; } export const AccessApplicationsGetResultBookmarkApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), domain: S.optional(S.NullOr(S.String)), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr(AccessApplicationsGetResultBookmarkApplicationPoliciesList), ), tags: S.optional( S.NullOr(AccessApplicationsGetResultBookmarkApplicationTagsList), ), type: S.optional( S.NullOr(AccessApplicationsGetResultSelfHostedApplicationType), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBookmarkApplication", }) as any as S.Schema; export type AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItemProtocol = "SSH"; export const AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItemProtocol = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList = Array; export const AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItemTargetAttributesMap = { [key: string]: | AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList | undefined; }; export const AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItemTargetAttributesMap = /*@__PURE__*/ S.Record( S.String, AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList, ) as any as S.Schema; export interface AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItem { /** The port that the targets use for the chosen communication protocol. A port cannot be assigned to multiple protocols. */ port: number; /** The communication protocol your application secures. */ protocol: AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItemProtocol; /** Contains a map of target attribute keys to target attribute values. */ targetAttributes: AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItemTargetAttributesMap; } export const AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItem = /*@__PURE__*/ S.suspend(() => S.Struct({ port: S.Number, protocol: AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItemProtocol, targetAttributes: AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItemTargetAttributesMap.pipe( T.Body("target_attributes"), ), }), ).annotate({ identifier: "AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItem", }) as any as S.Schema; export type AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaList = Array; export const AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItem, ) as any as S.Schema; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList = Array; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultInfrastructureApplicationPoliciesItemConnectionRulesSsh { /** Contains the Unix usernames that may be used when connecting over SSH. */ usernames: AccessApplicationsGetResultInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList; /** Enables using Identity Provider email alias as SSH username. */ allowEmailAlias?: boolean | null; } export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemConnectionRulesSsh = /*@__PURE__*/ S.suspend(() => S.Struct({ usernames: AccessApplicationsGetResultInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList, allowEmailAlias: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_email_alias")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultInfrastructureApplicationPoliciesItemConnectionRulesSsh", }) as any as S.Schema; export interface AccessApplicationsGetResultInfrastructureApplicationPoliciesItemConnectionRules { /** The SSH-specific rules that define how users may connect to the targets secured by your application. */ ssh?: AccessApplicationsGetResultInfrastructureApplicationPoliciesItemConnectionRulesSsh | null; } export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ ssh: S.optional( S.NullOr( AccessApplicationsGetResultInfrastructureApplicationPoliciesItemConnectionRulesSsh, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultInfrastructureApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = "piv_key"; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultInfrastructureApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. For infrastructure applications, only `piv_key` is supported. */ allowedAuthenticators?: AccessApplicationsGetResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultInfrastructureApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireList = Array; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsGetResultInfrastructureApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** The rules that define how users may connect to the targets secured by your application. */ connectionRules?: AccessApplicationsGetResultInfrastructureApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeList | null; /** Configures multi-factor authentication (MFA) settings for infrastructure applications. */ mfaConfig?: AccessApplicationsGetResultInfrastructureApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireList | null; updatedAt?: string | null; } export const AccessApplicationsGetResultInfrastructureApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), connectionRules: S.optional( S.NullOr( AccessApplicationsGetResultInfrastructureApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsGetResultInfrastructureApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsGetResultInfrastructureApplicationPoliciesItemIncludeList, ), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultInfrastructureApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), require: S.optional( S.NullOr( AccessApplicationsGetResultInfrastructureApplicationPoliciesItemRequireList, ), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsGetResultInfrastructureApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsGetResultInfrastructureApplicationPoliciesList = Array; export const AccessApplicationsGetResultInfrastructureApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultInfrastructureApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsGetResultInfrastructureApplication { targetCriteria: AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaList; /** The application type. */ type: AccessApplicationsGetResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** Audience tag. */ aud?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsGetResultInfrastructureApplicationPoliciesList | null; } export const AccessApplicationsGetResultInfrastructureApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ targetCriteria: AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaList.pipe( T.Body("target_criteria"), ), type: AccessApplicationsGetResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), aud: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsGetResultInfrastructureApplicationPoliciesList, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultInfrastructureApplication", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItemProtocol = "RDP"; export const AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItemProtocol = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap = { [key: string]: | AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList | undefined; }; export const AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap = /*@__PURE__*/ S.Record( S.String, AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItem { /** The port that the targets use for the chosen communication protocol. A port cannot be assigned to multiple protocols. */ port: number; /** The communication protocol your application secures. */ protocol: AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItemProtocol; /** Contains a map of target attribute keys to target attribute values. */ targetAttributes: AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap; } export const AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItem = /*@__PURE__*/ S.suspend(() => S.Struct({ port: S.Number, protocol: AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItemProtocol, targetAttributes: AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap.pipe( T.Body("target_attributes"), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItem", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationAllowedIdpsList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationCustomPagesList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPublicDestination { type?: AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemWorkerDestination { type: AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationDestinationsItem = | AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPublicDestination | AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPrivateDestination | AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemWorkerDestination | AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllWorkersDestination | AccessApplicationsGetResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsGetResultBrowserRDPApplicationDestinationsList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserRDPApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserRDPApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultBrowserRDPApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsGetResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsGetResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsGetResultBrowserRDPApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsGetResultBrowserRDPApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsGetResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsGetResultBrowserRDPApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserRDPApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationPoliciesList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserRDPApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsGetResultBrowserRDPApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultBrowserRDPApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsGetResultBrowserRDPApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationScimConfigMappingsList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultBrowserRDPApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserRDPApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsGetResultBrowserRDPApplicationScimConfigMappingsList | null; } export const AccessApplicationsGetResultBrowserRDPApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationSelfHostedDomainsList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultBrowserRDPApplicationTagsList = Array; export const AccessApplicationsGetResultBrowserRDPApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultBrowserRDPApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; targetCriteria: AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaList; /** The application type. */ type: AccessApplicationsGetResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsGetResultBrowserRDPApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsGetResultSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsGetResultBrowserRDPApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsGetResultBrowserRDPApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultBrowserRDPApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsGetResultBrowserRDPApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsGetResultBrowserRDPApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsGetResultBrowserRDPApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsGetResultBrowserRDPApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsGetResultBrowserRDPApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsGetResultBrowserRDPApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, targetCriteria: AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaList.pipe( T.Body("target_criteria"), ), type: AccessApplicationsGetResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr(AccessApplicationsGetResultBrowserRDPApplicationPoliciesList), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsGetResultBrowserRDPApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsGetResultBrowserRDPApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultBrowserRDPApplication", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationAllowedIdpsList = Array; export const AccessApplicationsGetResultMcpServerApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationCustomPagesList = Array; export const AccessApplicationsGetResultMcpServerApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsGetResultMcpServerApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerApplicationDestinationsItemPublicDestination { type?: AccessApplicationsGetResultMcpServerApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsGetResultMcpServerApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsGetResultMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultMcpServerApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsGetResultMcpServerApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsGetResultMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsGetResultMcpServerApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsGetResultMcpServerApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsGetResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsGetResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsGetResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsGetResultMcpServerApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerApplicationDestinationsItemWorkerDestination { type: AccessApplicationsGetResultMcpServerApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsGetResultMcpServerApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultMcpServerApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsGetResultMcpServerApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsGetResultMcpServerApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsGetResultMcpServerApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultMcpServerApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationDestinationsItem = | AccessApplicationsGetResultMcpServerApplicationDestinationsItemPublicDestination | AccessApplicationsGetResultMcpServerApplicationDestinationsItemPrivateDestination | AccessApplicationsGetResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsGetResultMcpServerApplicationDestinationsItemWorkerDestination | AccessApplicationsGetResultMcpServerApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllWorkersDestination | AccessApplicationsGetResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsGetResultMcpServerApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsGetResultMcpServerApplicationDestinationsList = Array; export const AccessApplicationsGetResultMcpServerApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsGetResultMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsGetResultMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsGetResultMcpServerApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsGetResultMcpServerApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsGetResultMcpServerApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsGetResultMcpServerApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsGetResultMcpServerApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsGetResultMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireList = Array; export const AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsGetResultMcpServerApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultMcpServerApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsGetResultMcpServerApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationPoliciesList = Array; export const AccessApplicationsGetResultMcpServerApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsGetResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsGetResultMcpServerApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsGetResultMcpServerApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsGetResultMcpServerApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsGetResultMcpServerApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsGetResultMcpServerApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationScimConfigMappingsList = Array; export const AccessApplicationsGetResultMcpServerApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsGetResultMcpServerApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsGetResultMcpServerApplicationScimConfigMappingsList | null; } export const AccessApplicationsGetResultMcpServerApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerApplicationTagsList = Array; export const AccessApplicationsGetResultMcpServerApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerApplication { /** The application type. */ type: AccessApplicationsGetResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsGetResultMcpServerApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsGetResultMcpServerApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsGetResultMcpServerApplicationDestinationsList | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsGetResultMcpServerApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; policies?: AccessApplicationsGetResultMcpServerApplicationPoliciesList | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsGetResultMcpServerApplicationScimConfig | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsGetResultMcpServerApplicationTagsList | null; } export const AccessApplicationsGetResultMcpServerApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowedIdps: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationDestinationsList, ), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), policies: S.optional( S.NullOr(AccessApplicationsGetResultMcpServerApplicationPoliciesList), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerApplicationScimConfig, ).pipe(T.Body("scim_config")), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), tags: S.optional( S.NullOr(AccessApplicationsGetResultMcpServerApplicationTagsList), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerApplication", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationAllowedIdpsList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationCustomPagesList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPublicDestination { type?: AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemWorkerDestination { type: AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItem = | AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPublicDestination | AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPrivateDestination | AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemWorkerDestination | AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllWorkersDestination | AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsGetResultMcpServerPortalApplicationDestinationsList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerPortalApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsGetResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsGetResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsGetResultMcpServerPortalApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsGetResultMcpServerPortalApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsGetResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsGetResultMcpServerPortalApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsGetResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationPoliciesList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsGetResultMcpServerPortalApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsGetResultMcpServerPortalApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsGetResultMcpServerPortalApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationScimConfigMappingsList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsGetResultMcpServerPortalApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerPortalApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsGetResultMcpServerPortalApplicationScimConfigMappingsList | null; } export const AccessApplicationsGetResultMcpServerPortalApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsGetResultMcpServerPortalApplicationTagsList = Array; export const AccessApplicationsGetResultMcpServerPortalApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsGetResultMcpServerPortalApplication { /** The application type. */ type: AccessApplicationsGetResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsGetResultMcpServerPortalApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsGetResultMcpServerPortalApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsGetResultMcpServerPortalApplicationDestinationsList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsGetResultMcpServerPortalApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; policies?: AccessApplicationsGetResultMcpServerPortalApplicationPoliciesList | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsGetResultMcpServerPortalApplicationScimConfig | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsGetResultMcpServerPortalApplicationTagsList | null; } export const AccessApplicationsGetResultMcpServerPortalApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsGetResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowedIdps: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationDestinationsList, ), ), domain: S.optional(S.NullOr(S.String)), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), policies: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationPoliciesList, ), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsGetResultMcpServerPortalApplicationScimConfig, ).pipe(T.Body("scim_config")), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), tags: S.optional( S.NullOr(AccessApplicationsGetResultMcpServerPortalApplicationTagsList), ), }), ).annotate({ identifier: "AccessApplicationsGetResultMcpServerPortalApplication", }) as any as S.Schema; export type AccessApplicationsGetResult = | AccessApplicationsGetResultSelfHostedApplication | AccessApplicationsGetResultSaaSApplication | AccessApplicationsGetResultBrowserSSHApplication | AccessApplicationsGetResultBrowserVNCApplication | AccessApplicationsGetResultAppLauncherApplication | AccessApplicationsGetResultDeviceEnrollmentPermissionsApplication | AccessApplicationsGetResultBrowserIsolationPermissionsApplication | AccessApplicationsGetResultGatewayIdentityProxyEndpointApplication | AccessApplicationsGetResultBookmarkApplication | AccessApplicationsGetResultInfrastructureApplication | AccessApplicationsGetResultBrowserRDPApplication | AccessApplicationsGetResultMcpServerApplication | AccessApplicationsGetResultMcpServerPortalApplication; export const AccessApplicationsGetResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "domain", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "id", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "customPages", "logoUrl", "name", "policies", "saasApp", "scimConfig", "tags", "type", ], [ "domain", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "domain", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "type", "id", "allowedIdps", "appLauncherLogoUrl", "aud", "autoRedirectToIdentity", "bgColor", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "footerLinks", "headerBgColor", "landingPageDesign", "name", "policies", "sessionDuration", "skipAppLauncherLoginPage", ], [ "type", "id", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "name", "policies", "sessionDuration", ], [ "type", "id", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "name", "policies", "sessionDuration", ], [ "type", "id", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "name", "policies", "sessionDuration", ], [ "id", "appLauncherVisible", "aud", "domain", "logoUrl", "name", "policies", "tags", "type", ], ["targetCriteria", "type", "id", "aud", "name", "policies"], [ "domain", "targetCriteria", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "type", "id", "allowAuthenticateViaWarp", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "httpOnlyCookieAttribute", "logoUrl", "name", "oauthConfiguration", "optionsPreflightBypass", "policies", "sameSiteCookieAttribute", "scimConfig", "sessionDuration", "tags", ], [ "type", "id", "allowAuthenticateViaWarp", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "domain", "httpOnlyCookieAttribute", "logoUrl", "name", "oauthConfiguration", "optionsPreflightBypass", "policies", "sameSiteCookieAttribute", "scimConfig", "sessionDuration", "tags", ], ]), ); export type GetAccessApplicationResponse = AccessApplicationsGetResult; export const GetAccessApplicationResponse = /*@__PURE__*/ S.suspend(() => AccessApplicationsGetResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "GetAccessApplicationResponse", }) as any as S.Schema; export interface GetAccessApplicationForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** Identifier. */ appId: string; } export const GetAccessApplicationForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), appId: S.String.pipe(T.Label("app_id")), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/apps/{app_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessApplicationForZoneRequest", }) as any as S.Schema; export interface GetAccessApplicationPolicyForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ appId: string; /** UUID. */ policyId: string; } export const GetAccessApplicationPolicyForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), appId: S.String.pipe(T.Label("app_id")), policyId: S.String.pipe(T.Label("policy_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/apps/{app_id}/policies/{policy_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessApplicationPolicyForAccountRequest", }) as any as S.Schema; export type AccessApplicationsPoliciesGetResponseApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsPoliciesGetResponseApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsPoliciesGetResponseApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsPoliciesGetResponseApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsPoliciesGetResponseApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsPoliciesGetResponseApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesGetResponseApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsPoliciesGetResponseApprovalGroupsList = Array; export const AccessApplicationsPoliciesGetResponseApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesGetResponseApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsPoliciesGetResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsPoliciesGetResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesGetResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsPoliciesGetResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesGetResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsPoliciesGetResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsPoliciesGetResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesGetResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsPoliciesGetResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesGetResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesGetResponseConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsPoliciesGetResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsPoliciesGetResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsPoliciesGetResponseConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsPoliciesGetResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsPoliciesGetResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesGetResponseConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsPoliciesGetResponseConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsPoliciesGetResponseConnectionRulesRdp | null; } export const AccessApplicationsPoliciesGetResponseConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr(AccessApplicationsPoliciesGetResponseConnectionRulesRdp), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesGetResponseConnectionRules", }) as any as S.Schema; export type AccessApplicationsPoliciesGetResponseDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessApplicationsPoliciesGetResponseDecision = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesGetResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessApplicationsPoliciesGetResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessApplicationsPoliciesGetResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessApplicationsPoliciesGetResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessApplicationsPoliciesGetResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsPoliciesGetResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessApplicationsPoliciesGetResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessApplicationsPoliciesGetResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessApplicationsPoliciesGetResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessApplicationsPoliciesGetResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessApplicationsPoliciesGetResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessApplicationsPoliciesGetResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessApplicationsPoliciesGetResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessApplicationsPoliciesGetResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessApplicationsPoliciesGetResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessApplicationsPoliciesGetResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessApplicationsPoliciesGetResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessApplicationsPoliciesGetResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessApplicationsPoliciesGetResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessApplicationsPoliciesGetResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessApplicationsPoliciesGetResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessApplicationsPoliciesGetResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessApplicationsPoliciesGetResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessApplicationsPoliciesGetResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessApplicationsPoliciesGetResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessApplicationsPoliciesGetResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessApplicationsPoliciesGetResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessApplicationsPoliciesGetResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessApplicationsPoliciesGetResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessApplicationsPoliciesGetResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessApplicationsPoliciesGetResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessApplicationsPoliciesGetResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessApplicationsPoliciesGetResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessApplicationsPoliciesGetResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessApplicationsPoliciesGetResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessApplicationsPoliciesGetResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessApplicationsPoliciesGetResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessApplicationsPoliciesGetResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessApplicationsPoliciesGetResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export const AccessApplicationsPoliciesGetResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export type AccessApplicationsPoliciesGetResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export const AccessApplicationsPoliciesGetResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export type AccessApplicationsPoliciesGetResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessApplicationsPoliciesGetResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessApplicationsPoliciesGetResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessApplicationsPoliciesGetResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessApplicationsPoliciesGetResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessApplicationsPoliciesGetResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessApplicationsPoliciesGetResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessApplicationsPoliciesGetResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessApplicationsPoliciesGetResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessApplicationsPoliciesGetResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessApplicationsPoliciesGetResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessApplicationsPoliciesGetResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessApplicationsPoliciesGetResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessApplicationsPoliciesGetResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessApplicationsPoliciesGetResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessApplicationsPoliciesGetResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessApplicationsPoliciesGetResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessApplicationsPoliciesGetResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessApplicationsPoliciesGetResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessApplicationsPoliciesGetResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessApplicationsPoliciesGetResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessApplicationsPoliciesGetResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessApplicationsPoliciesGetResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessApplicationsPoliciesGetResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessApplicationsPoliciesGetResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesGetResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsPoliciesGetResponseExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessApplicationsPoliciesGetResponseExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesGetResponseExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsPoliciesGetResponseExcludeList = Array; export const AccessApplicationsPoliciesGetResponseExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesGetResponseExcludeItem, ) as any as S.Schema; export type AccessApplicationsPoliciesGetResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsPoliciesGetResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsPoliciesGetResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsPoliciesGetResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsPoliciesGetResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsPoliciesGetResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsPoliciesGetResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsPoliciesGetResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsPoliciesGetResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsPoliciesGetResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsPoliciesGetResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsPoliciesGetResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsPoliciesGetResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsPoliciesGetResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsPoliciesGetResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsPoliciesGetResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsPoliciesGetResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsPoliciesGetResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsPoliciesGetResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsPoliciesGetResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsPoliciesGetResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsPoliciesGetResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsPoliciesGetResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsPoliciesGetResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsPoliciesGetResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsPoliciesGetResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsPoliciesGetResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsPoliciesGetResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsPoliciesGetResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsPoliciesGetResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsPoliciesGetResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsPoliciesGetResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsPoliciesGetResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsPoliciesGetResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsPoliciesGetResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsPoliciesGetResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsPoliciesGetResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsPoliciesGetResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsPoliciesGetResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsPoliciesGetResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsPoliciesGetResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsPoliciesGetResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsPoliciesGetResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsPoliciesGetResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsPoliciesGetResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsPoliciesGetResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsPoliciesGetResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsPoliciesGetResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsPoliciesGetResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsPoliciesGetResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsPoliciesGetResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesGetResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsPoliciesGetResponseIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesGetResponseIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsPoliciesGetResponseIncludeList = Array; export const AccessApplicationsPoliciesGetResponseIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesGetResponseIncludeItem, ) as any as S.Schema; export type AccessApplicationsPoliciesGetResponseMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsPoliciesGetResponseMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesGetResponseMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsPoliciesGetResponseMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesGetResponseMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesGetResponseMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsPoliciesGetResponseMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsPoliciesGetResponseMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsPoliciesGetResponseMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesGetResponseMfaConfig", }) as any as S.Schema; export type AccessApplicationsPoliciesGetResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsPoliciesGetResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsPoliciesGetResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsPoliciesGetResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsPoliciesGetResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsPoliciesGetResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsPoliciesGetResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsPoliciesGetResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsPoliciesGetResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsPoliciesGetResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsPoliciesGetResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsPoliciesGetResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsPoliciesGetResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsPoliciesGetResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsPoliciesGetResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsPoliciesGetResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsPoliciesGetResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsPoliciesGetResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsPoliciesGetResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsPoliciesGetResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsPoliciesGetResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsPoliciesGetResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsPoliciesGetResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsPoliciesGetResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsPoliciesGetResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsPoliciesGetResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsPoliciesGetResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsPoliciesGetResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsPoliciesGetResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsPoliciesGetResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsPoliciesGetResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsPoliciesGetResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsPoliciesGetResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsPoliciesGetResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsPoliciesGetResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsPoliciesGetResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsPoliciesGetResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsPoliciesGetResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsPoliciesGetResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsPoliciesGetResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsPoliciesGetResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsPoliciesGetResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsPoliciesGetResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsPoliciesGetResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsPoliciesGetResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsPoliciesGetResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsPoliciesGetResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsPoliciesGetResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsPoliciesGetResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsPoliciesGetResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsPoliciesGetResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesGetResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsPoliciesGetResponseRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesGetResponseRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsPoliciesGetResponseRequireList = Array; export const AccessApplicationsPoliciesGetResponseRequireList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesGetResponseRequireItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessApplicationPolicyResponse { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsPoliciesGetResponseApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsPoliciesGetResponseConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsPoliciesGetResponseDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsPoliciesGetResponseExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsPoliciesGetResponseIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsPoliciesGetResponseMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsPoliciesGetResponseRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const GetAccessApplicationPolicyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr(AccessApplicationsPoliciesGetResponseApprovalGroupsList).pipe( T.Body("approval_groups"), ), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr(AccessApplicationsPoliciesGetResponseConnectionRules).pipe( T.Body("connection_rules"), ), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr(AccessApplicationsPoliciesGetResponseDecision), ), exclude: S.optional( S.NullOr(AccessApplicationsPoliciesGetResponseExcludeList), ), include: S.optional( S.NullOr(AccessApplicationsPoliciesGetResponseIncludeList), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr(AccessApplicationsPoliciesGetResponseMfaConfig).pipe( T.Body("mfa_config"), ), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr(AccessApplicationsPoliciesGetResponseRequireList), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessApplicationPolicyResponse", }) as any as S.Schema; export interface GetAccessApplicationPolicyForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ appId: string; /** UUID. */ policyId: string; } export const GetAccessApplicationPolicyForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), appId: S.String.pipe(T.Label("app_id")), policyId: S.String.pipe(T.Label("policy_id")), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/apps/{app_id}/policies/{policy_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessApplicationPolicyForZoneRequest", }) as any as S.Schema; export interface GetAccessApplicationPolicyTestRequest { /** Identifier. */ accountId: string; /** The UUID of the policy test. */ policyTestId: string; } export const GetAccessApplicationPolicyTestRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), policyTestId: S.String.pipe(T.Label("policy_test_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/policy-tests/{policy_test_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessApplicationPolicyTestRequest", }) as any as S.Schema; export type AccessApplicationsPolicyTestsGetResponseStatus = | "blocked" | "processing" | "exceeded time" | "complete"; export const AccessApplicationsPolicyTestsGetResponseStatus = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessApplicationPolicyTestResponse { /** The UUID of the policy test. */ id?: string | null; /** The percentage of (processed) users approved based on policy evaluation results. */ percentApproved?: number | null; /** The percentage of (processed) users blocked based on policy evaluation results. */ percentBlocked?: number | null; /** The percentage of (processed) users errored based on policy evaluation results. */ percentErrored?: number | null; /** The percentage of users processed so far (of the entire user base). */ percentUsersProcessed?: number | null; /** The status of the policy test. */ status?: AccessApplicationsPolicyTestsGetResponseStatus | null; /** The total number of users in the user base. */ totalUsers?: number | null; /** The number of (processed) users approved based on policy evaluation results. */ usersApproved?: number | null; /** The number of (processed) users blocked based on policy evaluation results. */ usersBlocked?: number | null; /** The number of (processed) users errored based on policy evaluation results. */ usersErrored?: number | null; } export const GetAccessApplicationPolicyTestResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), percentApproved: S.optional( S.NullOr(S.Number).pipe(T.Body("percent_approved")), ), percentBlocked: S.optional( S.NullOr(S.Number).pipe(T.Body("percent_blocked")), ), percentErrored: S.optional( S.NullOr(S.Number).pipe(T.Body("percent_errored")), ), percentUsersProcessed: S.optional( S.NullOr(S.Number).pipe(T.Body("percent_users_processed")), ), status: S.optional( S.NullOr(AccessApplicationsPolicyTestsGetResponseStatus), ), totalUsers: S.optional(S.NullOr(S.Number).pipe(T.Body("total_users"))), usersApproved: S.optional( S.NullOr(S.Number).pipe(T.Body("users_approved")), ), usersBlocked: S.optional( S.NullOr(S.Number).pipe(T.Body("users_blocked")), ), usersErrored: S.optional( S.NullOr(S.Number).pipe(T.Body("users_errored")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessApplicationPolicyTestResponse", }) as any as S.Schema; export interface GetAccessBookmarkRequest { accountId: string; /** UUID. */ bookmarkId: string; } export const GetAccessBookmarkRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), bookmarkId: S.String.pipe(T.Label("bookmark_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/bookmarks/{bookmark_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessBookmarkRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessBookmarkResponse { /** The unique identifier for the Bookmark application. */ id: string; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** The domain of the Bookmark application. */ domain?: string | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the Bookmark application. */ name?: string | null; } export const GetAccessBookmarkResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), domain: S.optional(S.NullOr(S.String)), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessBookmarkResponse", }) as any as S.Schema; export interface GetAccessCertificateForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ certificateId: string; } export const GetAccessCertificateForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), certificateId: S.String.pipe(T.Label("certificate_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/certificates/{certificate_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessCertificateForAccountRequest", }) as any as S.Schema; export type AccessCertificatesGetResponseAssociatedHostnamesList = Array; export const AccessCertificatesGetResponseAssociatedHostnamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessCertificateResponse { /** The ID of the application that will use this certificate. */ id?: string | null; /** The hostnames of the applications that will use this certificate. */ associatedHostnames?: AccessCertificatesGetResponseAssociatedHostnamesList | null; expiresOn?: string | null; /** The MD5 fingerprint of the certificate. */ fingerprint?: string | null; /** The name of the certificate. */ name?: string | null; } export const GetAccessCertificateResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), associatedHostnames: S.optional( S.NullOr(AccessCertificatesGetResponseAssociatedHostnamesList).pipe( T.Body("associated_hostnames"), ), ), expiresOn: S.optional(S.NullOr(S.String).pipe(T.Body("expires_on"))), fingerprint: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessCertificateResponse", }) as any as S.Schema; export interface GetAccessCertificateForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ certificateId: string; } export const GetAccessCertificateForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), certificateId: S.String.pipe(T.Label("certificate_id")), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/certificates/{certificate_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessCertificateForZoneRequest", }) as any as S.Schema; export interface GetAccessCertificateSettingForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; } export const GetAccessCertificateSettingForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/certificates/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessCertificateSettingForAccountRequest", }) as any as S.Schema; export interface AccessCertificatesSettingsGetResultItem { /** Request client certificates for this hostname in China. Can only be set to true if this zone is china network enabled. */ chinaNetwork: boolean; /** Client Certificate Forwarding is a feature that takes the client cert provided by the eyeball to the edge, and forwards it to the origin as a HTTP header to allow logging on the origin. */ clientCertificateForwarding: boolean; /** The hostname that these settings apply to. */ hostname: string; } export const AccessCertificatesSettingsGetResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ chinaNetwork: S.Boolean.pipe(T.Body("china_network")), clientCertificateForwarding: S.Boolean.pipe( T.Body("client_certificate_forwarding"), ), hostname: S.String, }), ).annotate({ identifier: "AccessCertificatesSettingsGetResultItem", }) as any as S.Schema; export type AccessCertificatesSettingsGetResultList = Array; export const AccessCertificatesSettingsGetResultList = /*@__PURE__*/ S.Array( AccessCertificatesSettingsGetResultItem, ) as any as S.Schema; export interface GetAccessCertificateSettingResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessCertificatesSettingsGetResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const GetAccessCertificateSettingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessCertificatesSettingsGetResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessCertificateSettingResponse", }) as any as S.Schema; export interface GetAccessCertificateSettingForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; } export const GetAccessCertificateSettingForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/certificates/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessCertificateSettingForZoneRequest", }) as any as S.Schema; export interface GetAccessCustomPageRequest { /** Identifier. */ accountId: string; /** UUID. */ customPageId: string; } export const GetAccessCustomPageRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), customPageId: S.String.pipe(T.Label("custom_page_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/custom_pages/{custom_page_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessCustomPageRequest", }) as any as S.Schema; export type AccessCustomPagesGetResponseType = "identity_denied" | "forbidden"; export const AccessCustomPagesGetResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessCustomPageResponse { /** Custom page HTML. */ customHtml: string; /** Custom page name. */ name: string; /** Custom page type. */ type: AccessCustomPagesGetResponseType; /** UUID. */ uid?: string | null; } export const GetAccessCustomPageResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ customHtml: S.String.pipe(T.Body("custom_html")), name: S.String, type: AccessCustomPagesGetResponseType, uid: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessCustomPageResponse", }) as any as S.Schema; export interface GetAccessGroupForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ groupId: string; } export const GetAccessGroupForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), groupId: S.String.pipe(T.Label("group_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/groups/{group_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessGroupForAccountRequest", }) as any as S.Schema; export type AccessGroupsGetResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessGroupsGetResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessGroupsGetResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessGroupsGetResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessGroupsGetResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessGroupsGetResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessGroupsGetResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessGroupsGetResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessGroupsGetResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessGroupsGetResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessGroupsGetResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessGroupsGetResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessGroupsGetResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessGroupsGetResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessGroupsGetResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessGroupsGetResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessGroupsGetResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessGroupsGetResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessGroupsGetResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessGroupsGetResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessGroupsGetResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessGroupsGetResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessGroupsGetResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessGroupsGetResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessGroupsGetResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessGroupsGetResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessGroupsGetResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessGroupsGetResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessGroupsGetResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessGroupsGetResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessGroupsGetResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessGroupsGetResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessGroupsGetResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessGroupsGetResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessGroupsGetResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessGroupsGetResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessGroupsGetResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessGroupsGetResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessGroupsGetResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessGroupsGetResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessGroupsGetResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessGroupsGetResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessGroupsGetResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessGroupsGetResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessGroupsGetResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessGroupsGetResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessGroupsGetResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessGroupsGetResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessGroupsGetResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessGroupsGetResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessGroupsGetResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export const AccessGroupsGetResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export type AccessGroupsGetResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export const AccessGroupsGetResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export type AccessGroupsGetResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessGroupsGetResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessGroupsGetResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessGroupsGetResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessGroupsGetResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessGroupsGetResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessGroupsGetResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessGroupsGetResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessGroupsGetResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessGroupsGetResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessGroupsGetResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessGroupsGetResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessGroupsGetResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessGroupsGetResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessGroupsGetResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessGroupsGetResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessGroupsGetResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessGroupsGetResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessGroupsGetResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessGroupsGetResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessGroupsGetResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessGroupsGetResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessGroupsGetResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessGroupsGetResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessGroupsGetResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessGroupsGetResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessGroupsGetResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessGroupsGetResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessGroupsGetResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessGroupsGetResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessGroupsGetResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessGroupsGetResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessGroupsGetResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessGroupsGetResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessGroupsGetResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessGroupsGetResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessGroupsGetResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessGroupsGetResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessGroupsGetResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsGetResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export type AccessGroupsGetResponseExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessGroupsGetResponseExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsGetResponseExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessGroupsGetResponseExcludeList = Array; export const AccessGroupsGetResponseExcludeList = /*@__PURE__*/ S.Array( AccessGroupsGetResponseExcludeItem, ) as any as S.Schema; export type AccessGroupsGetResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessGroupsGetResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessGroupsGetResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessGroupsGetResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessGroupsGetResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessGroupsGetResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessGroupsGetResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessGroupsGetResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessGroupsGetResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessGroupsGetResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessGroupsGetResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessGroupsGetResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessGroupsGetResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessGroupsGetResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessGroupsGetResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessGroupsGetResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessGroupsGetResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessGroupsGetResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessGroupsGetResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessGroupsGetResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessGroupsGetResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessGroupsGetResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessGroupsGetResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessGroupsGetResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessGroupsGetResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessGroupsGetResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessGroupsGetResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessGroupsGetResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessGroupsGetResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessGroupsGetResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessGroupsGetResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessGroupsGetResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessGroupsGetResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessGroupsGetResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessGroupsGetResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessGroupsGetResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessGroupsGetResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessGroupsGetResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessGroupsGetResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessGroupsGetResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessGroupsGetResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessGroupsGetResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessGroupsGetResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessGroupsGetResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessGroupsGetResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessGroupsGetResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessGroupsGetResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessGroupsGetResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessGroupsGetResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessGroupsGetResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessGroupsGetResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsGetResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessGroupsGetResponseIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsGetResponseIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessGroupsGetResponseIncludeList = Array; export const AccessGroupsGetResponseIncludeList = /*@__PURE__*/ S.Array( AccessGroupsGetResponseIncludeItem, ) as any as S.Schema; export type AccessGroupsGetResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessGroupsGetResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessGroupsGetResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessGroupsGetResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessGroupsGetResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessGroupsGetResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessGroupsGetResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessGroupsGetResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessGroupsGetResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessGroupsGetResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessGroupsGetResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessGroupsGetResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessGroupsGetResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessGroupsGetResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessGroupsGetResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessGroupsGetResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessGroupsGetResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessGroupsGetResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessGroupsGetResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessGroupsGetResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessGroupsGetResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessGroupsGetResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessGroupsGetResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessGroupsGetResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessGroupsGetResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessGroupsGetResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessGroupsGetResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessGroupsGetResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessGroupsGetResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessGroupsGetResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessGroupsGetResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessGroupsGetResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessGroupsGetResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessGroupsGetResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessGroupsGetResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessGroupsGetResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessGroupsGetResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessGroupsGetResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessGroupsGetResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessGroupsGetResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessGroupsGetResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessGroupsGetResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessGroupsGetResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessGroupsGetResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessGroupsGetResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessGroupsGetResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessGroupsGetResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessGroupsGetResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessGroupsGetResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessGroupsGetResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessGroupsGetResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsGetResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessGroupsGetResponseRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsGetResponseRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessGroupsGetResponseRequireList = Array; export const AccessGroupsGetResponseRequireList = /*@__PURE__*/ S.Array( AccessGroupsGetResponseRequireItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessGroupResponse { /** UUID. */ id?: string | null; /** Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessGroupsGetResponseExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessGroupsGetResponseIncludeList | null; /** Whether this is the default group */ isDefault?: boolean | null; /** The name of the Access group. */ name?: string | null; /** Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules. */ require?: AccessGroupsGetResponseRequireList | null; } export const GetAccessGroupResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), exclude: S.optional(S.NullOr(AccessGroupsGetResponseExcludeList)), include: S.optional(S.NullOr(AccessGroupsGetResponseIncludeList)), isDefault: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_default"))), name: S.optional(S.NullOr(S.String)), require: S.optional(S.NullOr(AccessGroupsGetResponseRequireList)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessGroupResponse", }) as any as S.Schema; export interface GetAccessGroupForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ groupId: string; } export const GetAccessGroupForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), groupId: S.String.pipe(T.Label("group_id")), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/groups/{group_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessGroupForZoneRequest", }) as any as S.Schema; export interface GetAccessIdpFederationGrantRequest { /** Identifier. */ accountId: string; /** Identifier. */ grantId: string; } export const GetAccessIdpFederationGrantRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), grantId: S.String.pipe(T.Label("grant_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/idp_federation_grants/{grant_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessIdpFederationGrantRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessIdpFederationGrantResponse { /** UID of the IdP federation grant. */ id: string; /** UID of the identity provider being federated. */ idpId: string; } export const GetAccessIdpFederationGrantResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, idpId: S.String.pipe(T.Body("idp_id")), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessIdpFederationGrantResponse", }) as any as S.Schema; export interface GetAccessInfrastructureTargetRequest { /** Account identifier */ accountId: string; /** Target identifier */ targetId: string; } export const GetAccessInfrastructureTargetRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), targetId: S.String.pipe(T.Label("target_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/infrastructure/targets/{target_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessInfrastructureTargetRequest", }) as any as S.Schema; export type AccessInfrastructureTargetsGetResponseIpIpv4 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export const AccessInfrastructureTargetsGetResponseIpIpv4 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export type AccessInfrastructureTargetsGetResponseIpIpv6 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export const AccessInfrastructureTargetsGetResponseIpIpv6 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export type AccessInfrastructureTargetsGetResponseIp = AccessInfrastructureTargetsBulkUpdateResultItemIp; export const AccessInfrastructureTargetsGetResponseIp = AccessInfrastructureTargetsBulkUpdateResultItemIp; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessInfrastructureTargetResponse { /** Target identifier */ id: string; /** Date and time at which the target was created */ createdAt: string; /** A non-unique field that refers to a target */ hostname: string; /** The IPv4/IPv6 address that identifies where to reach a target */ ip: AccessInfrastructureTargetsBulkUpdateResultItemIp; /** Date and time at which the target was modified */ modifiedAt: string; } export const GetAccessInfrastructureTargetResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), hostname: S.String, ip: AccessInfrastructureTargetsBulkUpdateResultItemIp, modifiedAt: S.String.pipe(T.Body("modified_at")), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessInfrastructureTargetResponse", }) as any as S.Schema; export interface GetAccessKeyRequest { /** Identifier. */ accountId: string; } export const GetAccessKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/keys", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessKeyRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessKeyResponse { /** The number of days until the next key rotation. */ daysUntilNextRotation?: number | null; /** The number of days between key rotations. */ keyRotationIntervalDays?: number | null; /** The timestamp of the previous key rotation. */ lastKeyRotationAt?: string | null; } export const GetAccessKeyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ daysUntilNextRotation: S.optional( S.NullOr(S.Number).pipe(T.Body("days_until_next_rotation")), ), keyRotationIntervalDays: S.optional( S.NullOr(S.Number).pipe(T.Body("key_rotation_interval_days")), ), lastKeyRotationAt: S.optional( S.NullOr(S.String).pipe(T.Body("last_key_rotation_at")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessKeyResponse", }) as any as S.Schema; export interface GetAccessPolicyRequest { /** Identifier. */ accountId: string; /** The UUID of the policy */ policyId: string; } export const GetAccessPolicyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), policyId: S.String.pipe(T.Label("policy_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/policies/{policy_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessPolicyRequest", }) as any as S.Schema; export type AccessPoliciesGetResponseApprovalGroupsItemEmailAddressesList = Array; export const AccessPoliciesGetResponseApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessPoliciesGetResponseApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessPoliciesGetResponseApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessPoliciesGetResponseApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessPoliciesGetResponseApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessPoliciesGetResponseApprovalGroupsItem", }) as any as S.Schema; export type AccessPoliciesGetResponseApprovalGroupsList = Array; export const AccessPoliciesGetResponseApprovalGroupsList = /*@__PURE__*/ S.Array( AccessPoliciesGetResponseApprovalGroupsItem, ) as any as S.Schema; export type AccessPoliciesGetResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessPoliciesGetResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessPoliciesGetResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessPoliciesGetResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessPoliciesGetResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessPoliciesGetResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessPoliciesGetResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessPoliciesGetResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessPoliciesGetResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessPoliciesGetResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessPoliciesGetResponseConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessPoliciesGetResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessPoliciesGetResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessPoliciesGetResponseConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessPoliciesGetResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessPoliciesGetResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessPoliciesGetResponseConnectionRulesRdp", }) as any as S.Schema; export interface AccessPoliciesGetResponseConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessPoliciesGetResponseConnectionRulesRdp | null; } export const AccessPoliciesGetResponseConnectionRules = /*@__PURE__*/ S.suspend( () => S.Struct({ rdp: S.optional(S.NullOr(AccessPoliciesGetResponseConnectionRulesRdp)), }), ).annotate({ identifier: "AccessPoliciesGetResponseConnectionRules", }) as any as S.Schema; export type AccessPoliciesGetResponseDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessPoliciesGetResponseDecision = /*@__PURE__*/ S.String; export type AccessPoliciesGetResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessPoliciesGetResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessPoliciesGetResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessPoliciesGetResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessPoliciesGetResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessPoliciesGetResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessPoliciesGetResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessPoliciesGetResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessPoliciesGetResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessPoliciesGetResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessPoliciesGetResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessPoliciesGetResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessPoliciesGetResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessPoliciesGetResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessPoliciesGetResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessPoliciesGetResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessPoliciesGetResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessPoliciesGetResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessPoliciesGetResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessPoliciesGetResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessPoliciesGetResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessPoliciesGetResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessPoliciesGetResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessPoliciesGetResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessPoliciesGetResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessPoliciesGetResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessPoliciesGetResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessPoliciesGetResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessPoliciesGetResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessPoliciesGetResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessPoliciesGetResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessPoliciesGetResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessPoliciesGetResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessPoliciesGetResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessPoliciesGetResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessPoliciesGetResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessPoliciesGetResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessPoliciesGetResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessPoliciesGetResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessPoliciesGetResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessPoliciesGetResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessPoliciesGetResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessPoliciesGetResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessPoliciesGetResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessPoliciesGetResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessPoliciesGetResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessPoliciesGetResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessPoliciesGetResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessPoliciesGetResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessPoliciesGetResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessPoliciesGetResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export const AccessPoliciesGetResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export type AccessPoliciesGetResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export const AccessPoliciesGetResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export type AccessPoliciesGetResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessPoliciesGetResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessPoliciesGetResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessPoliciesGetResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessPoliciesGetResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessPoliciesGetResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessPoliciesGetResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessPoliciesGetResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessPoliciesGetResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessPoliciesGetResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessPoliciesGetResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessPoliciesGetResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessPoliciesGetResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessPoliciesGetResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessPoliciesGetResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessPoliciesGetResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessPoliciesGetResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessPoliciesGetResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessPoliciesGetResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessPoliciesGetResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessPoliciesGetResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessPoliciesGetResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessPoliciesGetResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessPoliciesGetResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessPoliciesGetResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessPoliciesGetResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessPoliciesGetResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessPoliciesGetResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessPoliciesGetResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessPoliciesGetResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessPoliciesGetResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessPoliciesGetResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessPoliciesGetResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessPoliciesGetResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessPoliciesGetResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessPoliciesGetResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessPoliciesGetResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessPoliciesGetResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessPoliciesGetResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesGetResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export type AccessPoliciesGetResponseExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessPoliciesGetResponseExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesGetResponseExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesGetResponseExcludeList = Array; export const AccessPoliciesGetResponseExcludeList = /*@__PURE__*/ S.Array( AccessPoliciesGetResponseExcludeItem, ) as any as S.Schema; export type AccessPoliciesGetResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessPoliciesGetResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessPoliciesGetResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessPoliciesGetResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessPoliciesGetResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessPoliciesGetResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessPoliciesGetResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessPoliciesGetResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessPoliciesGetResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessPoliciesGetResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessPoliciesGetResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessPoliciesGetResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessPoliciesGetResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessPoliciesGetResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessPoliciesGetResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessPoliciesGetResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessPoliciesGetResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessPoliciesGetResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessPoliciesGetResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessPoliciesGetResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessPoliciesGetResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessPoliciesGetResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessPoliciesGetResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessPoliciesGetResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessPoliciesGetResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessPoliciesGetResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessPoliciesGetResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessPoliciesGetResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessPoliciesGetResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessPoliciesGetResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessPoliciesGetResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessPoliciesGetResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessPoliciesGetResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessPoliciesGetResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessPoliciesGetResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessPoliciesGetResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessPoliciesGetResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessPoliciesGetResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessPoliciesGetResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessPoliciesGetResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessPoliciesGetResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessPoliciesGetResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessPoliciesGetResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessPoliciesGetResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessPoliciesGetResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessPoliciesGetResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessPoliciesGetResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessPoliciesGetResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessPoliciesGetResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessPoliciesGetResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessPoliciesGetResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesGetResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessPoliciesGetResponseIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesGetResponseIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesGetResponseIncludeList = Array; export const AccessPoliciesGetResponseIncludeList = /*@__PURE__*/ S.Array( AccessPoliciesGetResponseIncludeItem, ) as any as S.Schema; export type AccessPoliciesGetResponseMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessPoliciesGetResponseMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessPoliciesGetResponseMfaConfigAllowedAuthenticatorsList = Array; export const AccessPoliciesGetResponseMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessPoliciesGetResponseMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessPoliciesGetResponseMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessPoliciesGetResponseMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessPoliciesGetResponseMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessPoliciesGetResponseMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessPoliciesGetResponseMfaConfig", }) as any as S.Schema; export type AccessPoliciesGetResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessPoliciesGetResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessPoliciesGetResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessPoliciesGetResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessPoliciesGetResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessPoliciesGetResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessPoliciesGetResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessPoliciesGetResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessPoliciesGetResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessPoliciesGetResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessPoliciesGetResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessPoliciesGetResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessPoliciesGetResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessPoliciesGetResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessPoliciesGetResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessPoliciesGetResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessPoliciesGetResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessPoliciesGetResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessPoliciesGetResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessPoliciesGetResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessPoliciesGetResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessPoliciesGetResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessPoliciesGetResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessPoliciesGetResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessPoliciesGetResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessPoliciesGetResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessPoliciesGetResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessPoliciesGetResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessPoliciesGetResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessPoliciesGetResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessPoliciesGetResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessPoliciesGetResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessPoliciesGetResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessPoliciesGetResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessPoliciesGetResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessPoliciesGetResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessPoliciesGetResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessPoliciesGetResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessPoliciesGetResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessPoliciesGetResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessPoliciesGetResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessPoliciesGetResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessPoliciesGetResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessPoliciesGetResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessPoliciesGetResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessPoliciesGetResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessPoliciesGetResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessPoliciesGetResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessPoliciesGetResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessPoliciesGetResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessPoliciesGetResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesGetResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessPoliciesGetResponseRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesGetResponseRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesGetResponseRequireList = Array; export const AccessPoliciesGetResponseRequireList = /*@__PURE__*/ S.Array( AccessPoliciesGetResponseRequireItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessPolicyResponse { /** The UUID of the policy */ id?: string | null; /** Number of access applications currently using this policy. */ appCount?: number | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessPoliciesGetResponseApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessPoliciesGetResponseConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessPoliciesGetResponseDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessPoliciesGetResponseExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessPoliciesGetResponseIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessPoliciesGetResponseMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessPoliciesGetResponseRequireList | null; reusable?: boolean | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const GetAccessPolicyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), appCount: S.optional(S.NullOr(S.Number).pipe(T.Body("app_count"))), approvalGroups: S.optional( S.NullOr(AccessPoliciesGetResponseApprovalGroupsList).pipe( T.Body("approval_groups"), ), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr(AccessPoliciesGetResponseConnectionRules).pipe( T.Body("connection_rules"), ), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional(S.NullOr(AccessPoliciesGetResponseDecision)), exclude: S.optional(S.NullOr(AccessPoliciesGetResponseExcludeList)), include: S.optional(S.NullOr(AccessPoliciesGetResponseIncludeList)), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr(AccessPoliciesGetResponseMfaConfig).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional(S.NullOr(AccessPoliciesGetResponseRequireList)), reusable: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessPolicyResponse", }) as any as S.Schema; export interface GetAccessSamlCertificateRequest { /** Identifier. */ accountId: string; /** UUID. */ samlCertSetId: string; } export const GetAccessSamlCertificateRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), samlCertSetId: S.String.pipe(T.Label("saml_cert_set_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/saml_certificates/{saml_cert_set_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessSamlCertificateRequest", }) as any as S.Schema; export interface AccessSamlCertificatesGetResponseCurrentCertificate { /** Indicates whether the certificate can be used for IdP configuration. */ isCurrent: boolean; /** Certificate expiration date */ notAfter: string; /** The public certificate in PEM format */ publicCertificate: string; /** Unique identifier for the certificate */ uid: string; } export const AccessSamlCertificatesGetResponseCurrentCertificate = /*@__PURE__*/ S.suspend(() => S.Struct({ isCurrent: S.Boolean.pipe(T.Body("is_current")), notAfter: S.String.pipe(T.Body("not_after")), publicCertificate: S.String.pipe(T.Body("public_certificate")), uid: S.String, }), ).annotate({ identifier: "AccessSamlCertificatesGetResponseCurrentCertificate", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessSamlCertificateResponse { /** When the certificate set was created */ createdAt: string; /** Unique identifier for the certificate set */ uid: string; /** When the certificate set was last updated */ updatedAt: string; /** The current active certificate */ currentCertificate?: AccessSamlCertificatesGetResponseCurrentCertificate | null; /** The previous certificate (maintained during rotation period). May be null when no rotation has occurred. Mirrors the structure of `saml_certificate`. */ previousCertificate?: unknown | null; } export const GetAccessSamlCertificateResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ createdAt: S.String.pipe(T.Body("created_at")), uid: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), currentCertificate: S.optional( S.NullOr(AccessSamlCertificatesGetResponseCurrentCertificate).pipe( T.Body("current_certificate"), ), ), previousCertificate: S.optional( S.NullOr(S.Unknown).pipe(T.Body("previous_certificate")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessSamlCertificateResponse", }) as any as S.Schema; export interface GetAccessServiceTokenForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ serviceTokenId: string; } export const GetAccessServiceTokenForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), serviceTokenId: S.String.pipe(T.Label("service_token_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/service_tokens/{service_token_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessServiceTokenForAccountRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessServiceTokenResponse { id: string; /** The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header. */ clientId?: string | null; /** The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h). */ duration?: string | null; expiresAt?: string | null; /** The name of the service token. */ name?: string | null; } export const GetAccessServiceTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), duration: S.optional(S.NullOr(S.String)), expiresAt: S.optional(S.NullOr(S.String).pipe(T.Body("expires_at"))), name: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessServiceTokenResponse", }) as any as S.Schema; export interface GetAccessServiceTokenForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ serviceTokenId: string; } export const GetAccessServiceTokenForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), serviceTokenId: S.String.pipe(T.Label("service_token_id")), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/service_tokens/{service_token_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessServiceTokenForZoneRequest", }) as any as S.Schema; export interface GetAccessTagRequest { /** Identifier. */ accountId: string; /** The name of the tag */ tagName: string; } export const GetAccessTagRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tagName: S.String.pipe(T.Label("tag_name")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/tags/{tag_name}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessTagRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessTagResponse { /** The name of the tag */ name: string; } export const GetAccessTagResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.String, }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessTagResponse", }) as any as S.Schema; export interface GetAccessUserRequest { /** Identifier. */ accountId: string; /** UUID. */ userId: string; } export const GetAccessUserRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), userId: S.String.pipe(T.Label("user_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/users/{user_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessUserRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessUserResponse { /** UUID. */ id?: string | null; /** True if the user has authenticated with Cloudflare Access. */ accessSeat?: boolean | null; /** The number of active devices registered to the user. */ activeDeviceCount?: number | null; createdAt?: string | null; /** The email of the user. */ email?: string | null; /** True if the user has logged into the WARP client. */ gatewaySeat?: boolean | null; /** The time at which the user last successfully logged in. */ lastSuccessfulLogin?: string | null; /** The name of the user. */ name?: string | null; /** The unique API identifier for the Zero Trust seat. */ seatUid?: string | null; /** The unique API identifier for the user. */ uid?: string | null; updatedAt?: string | null; } export const GetAccessUserResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), accessSeat: S.optional(S.NullOr(S.Boolean).pipe(T.Body("access_seat"))), activeDeviceCount: S.optional( S.NullOr(S.Number).pipe(T.Body("active_device_count")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), email: S.optional(S.NullOr(S.String)), gatewaySeat: S.optional(S.NullOr(S.Boolean).pipe(T.Body("gateway_seat"))), lastSuccessfulLogin: S.optional( S.NullOr(S.String).pipe(T.Body("last_successful_login")), ), name: S.optional(S.NullOr(S.String)), seatUid: S.optional(S.NullOr(S.String).pipe(T.Body("seat_uid"))), uid: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessUserResponse", }) as any as S.Schema; export interface GetAccessUserActiveSessionRequest { /** Identifier. */ accountId: string; /** UUID. */ userId: string; nonce: string; } export const GetAccessUserActiveSessionRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), userId: S.String.pipe(T.Label("user_id")), nonce: S.String.pipe(T.Label()), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/users/{user_id}/active_sessions/{nonce}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessUserActiveSessionRequest", }) as any as S.Schema; export interface AccessUsersActiveSessionsGetResponseDeviceSessionsValue { lastAuthenticated?: number | null; } export const AccessUsersActiveSessionsGetResponseDeviceSessionsValue = /*@__PURE__*/ S.suspend(() => S.Struct({ lastAuthenticated: S.optional( S.NullOr(S.Number).pipe(T.Body("last_authenticated")), ), }), ).annotate({ identifier: "AccessUsersActiveSessionsGetResponseDeviceSessionsValue", }) as any as S.Schema; export type AccessUsersActiveSessionsGetResponseDeviceSessionsMap = { [key: string]: | AccessUsersActiveSessionsGetResponseDeviceSessionsValue | undefined; }; export const AccessUsersActiveSessionsGetResponseDeviceSessionsMap = /*@__PURE__*/ S.Record( S.String, AccessUsersActiveSessionsGetResponseDeviceSessionsValue, ) as any as S.Schema; export interface AccessUsersActiveSessionsGetResponseDevicePostureValueCheck { exists?: boolean | null; path?: string | null; } export const AccessUsersActiveSessionsGetResponseDevicePostureValueCheck = /*@__PURE__*/ S.suspend(() => S.Struct({ exists: S.optional(S.NullOr(S.Boolean)), path: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessUsersActiveSessionsGetResponseDevicePostureValueCheck", }) as any as S.Schema; export interface AccessUsersActiveSessionsGetResponseDevicePostureValue { id?: string | null; check?: AccessUsersActiveSessionsGetResponseDevicePostureValueCheck | null; data?: unknown | null; description?: string | null; error?: string | null; ruleName?: string | null; success?: boolean | null; timestamp?: string | null; type?: string | null; } export const AccessUsersActiveSessionsGetResponseDevicePostureValue = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), check: S.optional( S.NullOr(AccessUsersActiveSessionsGetResponseDevicePostureValueCheck), ), data: S.optional(S.NullOr(S.Unknown)), description: S.optional(S.NullOr(S.String)), error: S.optional(S.NullOr(S.String)), ruleName: S.optional(S.NullOr(S.String).pipe(T.Body("rule_name"))), success: S.optional(S.NullOr(S.Boolean)), timestamp: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessUsersActiveSessionsGetResponseDevicePostureValue", }) as any as S.Schema; export type AccessUsersActiveSessionsGetResponseDevicePostureMap = { [key: string]: | AccessUsersActiveSessionsGetResponseDevicePostureValue | undefined; }; export const AccessUsersActiveSessionsGetResponseDevicePostureMap = /*@__PURE__*/ S.Record( S.String, AccessUsersActiveSessionsGetResponseDevicePostureValue, ) as any as S.Schema; export interface AccessUsersActiveSessionsGetResponseGeo { country?: string | null; } export const AccessUsersActiveSessionsGetResponseGeo = /*@__PURE__*/ S.suspend( () => S.Struct({ country: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessUsersActiveSessionsGetResponseGeo", }) as any as S.Schema; export interface AccessUsersActiveSessionsGetResponseIdp { id?: string | null; type?: string | null; } export const AccessUsersActiveSessionsGetResponseIdp = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessUsersActiveSessionsGetResponseIdp", }) as any as S.Schema; export interface AccessUsersActiveSessionsGetResponseMtlsAuth { authStatus?: string | null; certIssuerDn?: string | null; certIssuerSki?: string | null; certPresented?: boolean | null; certSerial?: string | null; } export const AccessUsersActiveSessionsGetResponseMtlsAuth = /*@__PURE__*/ S.suspend(() => S.Struct({ authStatus: S.optional(S.NullOr(S.String).pipe(T.Body("auth_status"))), certIssuerDn: S.optional( S.NullOr(S.String).pipe(T.Body("cert_issuer_dn")), ), certIssuerSki: S.optional( S.NullOr(S.String).pipe(T.Body("cert_issuer_ski")), ), certPresented: S.optional( S.NullOr(S.Boolean).pipe(T.Body("cert_presented")), ), certSerial: S.optional(S.NullOr(S.String).pipe(T.Body("cert_serial"))), }), ).annotate({ identifier: "AccessUsersActiveSessionsGetResponseMtlsAuth", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessUserActiveSessionResponse { accountId?: string | null; authStatus?: string | null; commonName?: string | null; deviceId?: string | null; deviceSessions?: AccessUsersActiveSessionsGetResponseDeviceSessionsMap | null; devicePosture?: AccessUsersActiveSessionsGetResponseDevicePostureMap | null; email?: string | null; geo?: AccessUsersActiveSessionsGetResponseGeo | null; iat?: number | null; idp?: AccessUsersActiveSessionsGetResponseIdp | null; ip?: string | null; isGateway?: boolean | null; isWarp?: boolean | null; isActive?: boolean | null; mtlsAuth?: AccessUsersActiveSessionsGetResponseMtlsAuth | null; serviceTokenId?: string | null; serviceTokenStatus?: boolean | null; userUuid?: string | null; version?: number | null; } export const GetAccessUserActiveSessionResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.optional(S.NullOr(S.String).pipe(T.Body("account_id"))), authStatus: S.optional(S.NullOr(S.String).pipe(T.Body("auth_status"))), commonName: S.optional(S.NullOr(S.String).pipe(T.Body("common_name"))), deviceId: S.optional(S.NullOr(S.String).pipe(T.Body("device_id"))), deviceSessions: S.optional( S.NullOr(AccessUsersActiveSessionsGetResponseDeviceSessionsMap).pipe( T.Body("device_sessions"), ), ), devicePosture: S.optional( S.NullOr(AccessUsersActiveSessionsGetResponseDevicePostureMap), ), email: S.optional(S.NullOr(S.String)), geo: S.optional(S.NullOr(AccessUsersActiveSessionsGetResponseGeo)), iat: S.optional(S.NullOr(S.Number)), idp: S.optional(S.NullOr(AccessUsersActiveSessionsGetResponseIdp)), ip: S.optional(S.NullOr(S.String)), isGateway: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_gateway"))), isWarp: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_warp"))), isActive: S.optional(S.NullOr(S.Boolean)), mtlsAuth: S.optional( S.NullOr(AccessUsersActiveSessionsGetResponseMtlsAuth).pipe( T.Body("mtls_auth"), ), ), serviceTokenId: S.optional( S.NullOr(S.String).pipe(T.Body("service_token_id")), ), serviceTokenStatus: S.optional( S.NullOr(S.Boolean).pipe(T.Body("service_token_status")), ), userUuid: S.optional(S.NullOr(S.String).pipe(T.Body("user_uuid"))), version: S.optional(S.NullOr(S.Number)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessUserActiveSessionResponse", }) as any as S.Schema; export interface GetAccessUserLastSeenIdentityRequest { /** Identifier. */ accountId: string; /** UUID. */ userId: string; } export const GetAccessUserLastSeenIdentityRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), userId: S.String.pipe(T.Label("user_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/users/{user_id}/last_seen_identity", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessUserLastSeenIdentityRequest", }) as any as S.Schema; export type AccessUsersLastSeenIdentityGetResponseDeviceSessionsValue = AccessUsersActiveSessionsGetResponseDeviceSessionsValue; export const AccessUsersLastSeenIdentityGetResponseDeviceSessionsValue = AccessUsersActiveSessionsGetResponseDeviceSessionsValue; export type AccessUsersLastSeenIdentityGetResponseDeviceSessionsMap = { [key: string]: | AccessUsersActiveSessionsGetResponseDeviceSessionsValue | undefined; }; export const AccessUsersLastSeenIdentityGetResponseDeviceSessionsMap = /*@__PURE__*/ S.Record( S.String, AccessUsersActiveSessionsGetResponseDeviceSessionsValue, ) as any as S.Schema; export type AccessUsersLastSeenIdentityGetResponseDevicePostureValueCheck = AccessUsersActiveSessionsGetResponseDevicePostureValueCheck; export const AccessUsersLastSeenIdentityGetResponseDevicePostureValueCheck = AccessUsersActiveSessionsGetResponseDevicePostureValueCheck; export type AccessUsersLastSeenIdentityGetResponseDevicePostureValue = AccessUsersActiveSessionsGetResponseDevicePostureValue; export const AccessUsersLastSeenIdentityGetResponseDevicePostureValue = AccessUsersActiveSessionsGetResponseDevicePostureValue; export type AccessUsersLastSeenIdentityGetResponseDevicePostureMap = { [key: string]: | AccessUsersActiveSessionsGetResponseDevicePostureValue | undefined; }; export const AccessUsersLastSeenIdentityGetResponseDevicePostureMap = /*@__PURE__*/ S.Record( S.String, AccessUsersActiveSessionsGetResponseDevicePostureValue, ) as any as S.Schema; export type AccessUsersLastSeenIdentityGetResponseGeo = AccessUsersActiveSessionsGetResponseGeo; export const AccessUsersLastSeenIdentityGetResponseGeo = AccessUsersActiveSessionsGetResponseGeo; export type AccessUsersLastSeenIdentityGetResponseIdp = AccessUsersActiveSessionsGetResponseIdp; export const AccessUsersLastSeenIdentityGetResponseIdp = AccessUsersActiveSessionsGetResponseIdp; export type AccessUsersLastSeenIdentityGetResponseMtlsAuth = AccessUsersActiveSessionsGetResponseMtlsAuth; export const AccessUsersLastSeenIdentityGetResponseMtlsAuth = AccessUsersActiveSessionsGetResponseMtlsAuth; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetAccessUserLastSeenIdentityResponse { accountId?: string | null; authStatus?: string | null; commonName?: string | null; deviceId?: string | null; deviceSessions?: AccessUsersLastSeenIdentityGetResponseDeviceSessionsMap | null; devicePosture?: AccessUsersLastSeenIdentityGetResponseDevicePostureMap | null; email?: string | null; geo?: AccessUsersActiveSessionsGetResponseGeo | null; iat?: number | null; idp?: AccessUsersActiveSessionsGetResponseIdp | null; ip?: string | null; isGateway?: boolean | null; isWarp?: boolean | null; mtlsAuth?: AccessUsersActiveSessionsGetResponseMtlsAuth | null; serviceTokenId?: string | null; serviceTokenStatus?: boolean | null; userUuid?: string | null; version?: number | null; } export const GetAccessUserLastSeenIdentityResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.optional(S.NullOr(S.String).pipe(T.Body("account_id"))), authStatus: S.optional(S.NullOr(S.String).pipe(T.Body("auth_status"))), commonName: S.optional(S.NullOr(S.String).pipe(T.Body("common_name"))), deviceId: S.optional(S.NullOr(S.String).pipe(T.Body("device_id"))), deviceSessions: S.optional( S.NullOr(AccessUsersLastSeenIdentityGetResponseDeviceSessionsMap).pipe( T.Body("device_sessions"), ), ), devicePosture: S.optional( S.NullOr(AccessUsersLastSeenIdentityGetResponseDevicePostureMap), ), email: S.optional(S.NullOr(S.String)), geo: S.optional(S.NullOr(AccessUsersActiveSessionsGetResponseGeo)), iat: S.optional(S.NullOr(S.Number)), idp: S.optional(S.NullOr(AccessUsersActiveSessionsGetResponseIdp)), ip: S.optional(S.NullOr(S.String)), isGateway: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_gateway"))), isWarp: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_warp"))), mtlsAuth: S.optional( S.NullOr(AccessUsersActiveSessionsGetResponseMtlsAuth).pipe( T.Body("mtls_auth"), ), ), serviceTokenId: S.optional( S.NullOr(S.String).pipe(T.Body("service_token_id")), ), serviceTokenStatus: S.optional( S.NullOr(S.Boolean).pipe(T.Body("service_token_status")), ), userUuid: S.optional(S.NullOr(S.String).pipe(T.Body("user_uuid"))), version: S.optional(S.NullOr(S.Number)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetAccessUserLastSeenIdentityResponse", }) as any as S.Schema; export type GetCasbApplicationRequestSlug = | "GITHUB" | "GOOGLE_WORKSPACE" | "MICROSOFT_INTERNAL" | "SALESFORCE" | "SLACK"; export const GetCasbApplicationRequestSlug = /*@__PURE__*/ S.String; export interface GetCasbApplicationRequest { accountId: string; slug: GetCasbApplicationRequestSlug | (string & {}); } export const GetCasbApplicationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), slug: GetCasbApplicationRequestSlug.pipe(T.Label()), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/one/applications/{slug}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetCasbApplicationRequest", }) as any as S.Schema; export type GetCasbApplicationResponseAuthMethodsItemSupportedEnvironmentsList = Array; export const GetCasbApplicationResponseAuthMethodsItemSupportedEnvironmentsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface GetCasbApplicationResponseAuthMethodsItem { /** Human-readable auth method name. */ displayName: string; /** Whether this is the default auth method. */ isDefault: boolean; /** Auth method identifier. */ slug: string; /** Environments this auth method supports. */ supportedEnvironments: GetCasbApplicationResponseAuthMethodsItemSupportedEnvironmentsList; } export const GetCasbApplicationResponseAuthMethodsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ displayName: S.String.pipe(T.Body("display_name")), isDefault: S.Boolean.pipe(T.Body("is_default")), slug: S.String, supportedEnvironments: GetCasbApplicationResponseAuthMethodsItemSupportedEnvironmentsList.pipe( T.Body("supported_environments"), ), }), ).annotate({ identifier: "GetCasbApplicationResponseAuthMethodsItem", }) as any as S.Schema; export type GetCasbApplicationResponseAuthMethodsList = Array; export const GetCasbApplicationResponseAuthMethodsList = /*@__PURE__*/ S.Array( GetCasbApplicationResponseAuthMethodsItem, ) as any as S.Schema; export type GetCasbApplicationResponseSlug = | "GITHUB" | "GOOGLE_WORKSPACE" | "MICROSOFT_INTERNAL" | "SALESFORCE" | "SLACK"; export const GetCasbApplicationResponseSlug = /*@__PURE__*/ S.String; export type GetCasbApplicationResponseUseCasesItemBaseScopesItemSeverity = | "low" | "medium" | "high" | "critical"; export const GetCasbApplicationResponseUseCasesItemBaseScopesItemSeverity = /*@__PURE__*/ S.String; export interface GetCasbApplicationResponseUseCasesItemBaseScopesItem { /** Human-readable permission name. */ displayName: string; /** Vendor-native scope identifier. */ scope: string; /** Permission sensitivity level. */ severity: GetCasbApplicationResponseUseCasesItemBaseScopesItemSeverity; } export const GetCasbApplicationResponseUseCasesItemBaseScopesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ displayName: S.String.pipe(T.Body("display_name")), scope: S.String, severity: GetCasbApplicationResponseUseCasesItemBaseScopesItemSeverity, }), ).annotate({ identifier: "GetCasbApplicationResponseUseCasesItemBaseScopesItem", }) as any as S.Schema; export type GetCasbApplicationResponseUseCasesItemBaseScopesList = Array; export const GetCasbApplicationResponseUseCasesItemBaseScopesList = /*@__PURE__*/ S.Array( GetCasbApplicationResponseUseCasesItemBaseScopesItem, ) as any as S.Schema; export type GetCasbApplicationResponseUseCasesItemFeaturesItemScopesItemSeverity = | "low" | "medium" | "high" | "critical"; export const GetCasbApplicationResponseUseCasesItemFeaturesItemScopesItemSeverity = /*@__PURE__*/ S.String; export interface GetCasbApplicationResponseUseCasesItemFeaturesItemScopesItem { /** Human-readable permission name. */ displayName: string; /** Vendor-native scope identifier. */ scope: string; /** Permission sensitivity level. */ severity: GetCasbApplicationResponseUseCasesItemFeaturesItemScopesItemSeverity; } export const GetCasbApplicationResponseUseCasesItemFeaturesItemScopesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ displayName: S.String.pipe(T.Body("display_name")), scope: S.String, severity: GetCasbApplicationResponseUseCasesItemFeaturesItemScopesItemSeverity, }), ).annotate({ identifier: "GetCasbApplicationResponseUseCasesItemFeaturesItemScopesItem", }) as any as S.Schema; export type GetCasbApplicationResponseUseCasesItemFeaturesItemScopesList = Array; export const GetCasbApplicationResponseUseCasesItemFeaturesItemScopesList = /*@__PURE__*/ S.Array( GetCasbApplicationResponseUseCasesItemFeaturesItemScopesItem, ) as any as S.Schema; export interface GetCasbApplicationResponseUseCasesItemFeaturesItem { /** Feature description. */ description: string; /** Human-readable feature name. */ displayName: string; /** Additional scopes when feature is enabled. */ scopes: GetCasbApplicationResponseUseCasesItemFeaturesItemScopesList; /** Feature identifier. */ slug: string; } export const GetCasbApplicationResponseUseCasesItemFeaturesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ description: S.String, displayName: S.String.pipe(T.Body("display_name")), scopes: GetCasbApplicationResponseUseCasesItemFeaturesItemScopesList, slug: S.String, }), ).annotate({ identifier: "GetCasbApplicationResponseUseCasesItemFeaturesItem", }) as any as S.Schema; export type GetCasbApplicationResponseUseCasesItemFeaturesList = Array; export const GetCasbApplicationResponseUseCasesItemFeaturesList = /*@__PURE__*/ S.Array( GetCasbApplicationResponseUseCasesItemFeaturesItem, ) as any as S.Schema; export interface GetCasbApplicationResponseUseCasesItem { /** Scopes always required for this use case. */ baseScopes: GetCasbApplicationResponseUseCasesItemBaseScopesList; /** Use case description. */ description: string; /** Human-readable use case name. */ displayName: string; /** Optional features with extra scopes. */ features: GetCasbApplicationResponseUseCasesItemFeaturesList; /** Use case identifier. */ slug: string; } export const GetCasbApplicationResponseUseCasesItem = /*@__PURE__*/ S.suspend( () => S.Struct({ baseScopes: GetCasbApplicationResponseUseCasesItemBaseScopesList.pipe( T.Body("base_scopes"), ), description: S.String, displayName: S.String.pipe(T.Body("display_name")), features: GetCasbApplicationResponseUseCasesItemFeaturesList, slug: S.String, }), ).annotate({ identifier: "GetCasbApplicationResponseUseCasesItem", }) as any as S.Schema; export type GetCasbApplicationResponseUseCasesList = Array; export const GetCasbApplicationResponseUseCasesList = /*@__PURE__*/ S.Array( GetCasbApplicationResponseUseCasesItem, ) as any as S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface GetCasbApplicationResponse { /** Available authentication methods. */ authMethods: GetCasbApplicationResponseAuthMethodsList; /** Vendor category. */ category: string; /** Brief description. */ description: string; /** Human-readable vendor name. */ displayName: string; /** Whether DLP scanning is supported. */ dlpEnabled: boolean; /** Setup instructions for the user. */ instructions: string; /** Logo path. */ logo: string; /** Vendor identifier. */ slug: GetCasbApplicationResponseSlug; /** Use cases with full scope details. */ useCases: GetCasbApplicationResponseUseCasesList; } export const GetCasbApplicationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ authMethods: GetCasbApplicationResponseAuthMethodsList.pipe( T.Body("auth_methods"), ), category: S.String, description: S.String, displayName: S.String.pipe(T.Body("display_name")), dlpEnabled: S.Boolean.pipe(T.Body("dlp_enabled")), instructions: S.String, logo: S.String, slug: GetCasbApplicationResponseSlug, useCases: GetCasbApplicationResponseUseCasesList.pipe(T.Body("use_cases")), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetCasbApplicationResponse", }) as any as S.Schema; export interface GetCasbIntegrationRequest { accountId: string; id: string; } export const GetCasbIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String.pipe(T.Label()), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/one/integrations/{id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetCasbIntegrationRequest", }) as any as S.Schema; export type GetCasbIntegrationResponseApplicationMap = { [key: string]: string | undefined; }; export const GetCasbIntegrationResponseApplicationMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export type GetCasbIntegrationResponseAuthMethodMap = { [key: string]: string | undefined; }; export const GetCasbIntegrationResponseAuthMethodMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export type GetCasbIntegrationResponseAuthorizationLinkComponentsMap = { [key: string]: unknown | undefined; }; export const GetCasbIntegrationResponseAuthorizationLinkComponentsMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export interface GetCasbIntegrationResponseAuthorizationLink { components: GetCasbIntegrationResponseAuthorizationLinkComponentsMap; link: string; } export const GetCasbIntegrationResponseAuthorizationLink = /*@__PURE__*/ S.suspend(() => S.Struct({ components: GetCasbIntegrationResponseAuthorizationLinkComponentsMap, link: S.String, }), ).annotate({ identifier: "GetCasbIntegrationResponseAuthorizationLink", }) as any as S.Schema; export type GetCasbIntegrationResponseDlpProfilesList = Array; export const GetCasbIntegrationResponseDlpProfilesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GetCasbIntegrationResponseHealthDetailsItemMap = { [key: string]: unknown | undefined; }; export const GetCasbIntegrationResponseHealthDetailsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type GetCasbIntegrationResponseHealthDetailsList = Array; export const GetCasbIntegrationResponseHealthDetailsList = /*@__PURE__*/ S.Array( GetCasbIntegrationResponseHealthDetailsItemMap, ) as any as S.Schema; export type GetCasbIntegrationResponseUseCasesItemMap = { [key: string]: unknown | undefined; }; export const GetCasbIntegrationResponseUseCasesItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type GetCasbIntegrationResponseUseCasesList = Array; export const GetCasbIntegrationResponseUseCasesList = /*@__PURE__*/ S.Array( GetCasbIntegrationResponseUseCasesItemMap, ) as any as S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface GetCasbIntegrationResponse { /** Integration ID. */ id: string; application: GetCasbIntegrationResponseApplicationMap; /** The integration's authentication method. */ authMethod: GetCasbIntegrationResponseAuthMethodMap; /** Authorization link for the integration. */ authorizationLink: GetCasbIntegrationResponseAuthorizationLink; /** When the integration was created. */ created: string; /** Credentials expiry time. */ credentialsExpiry: string; /** DLP Profiles enabled for the integration. */ dlpProfiles: GetCasbIntegrationResponseDlpProfilesList; /** Health details with remediation hints. */ healthDetails: GetCasbIntegrationResponseHealthDetailsList; /** Whether the user paused the integration. */ isPaused: boolean; /** Last time the integration was hydrated. */ lastHydrated: string; /** Name of the integration. */ name: string; /** Organization ID. */ organizationId: number; /** Integration status. */ status: string; /** When the integration was last updated. */ updated: string; /** Use cases enabled for the integration. */ useCases: GetCasbIntegrationResponseUseCasesList; } export const GetCasbIntegrationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, application: GetCasbIntegrationResponseApplicationMap, authMethod: GetCasbIntegrationResponseAuthMethodMap.pipe( T.Body("auth_method"), ), authorizationLink: GetCasbIntegrationResponseAuthorizationLink.pipe( T.Body("authorization_link"), ), created: S.String, credentialsExpiry: S.String.pipe(T.Body("credentials_expiry")), dlpProfiles: GetCasbIntegrationResponseDlpProfilesList.pipe( T.Body("dlp_profiles"), ), healthDetails: GetCasbIntegrationResponseHealthDetailsList.pipe( T.Body("health_details"), ), isPaused: S.Boolean.pipe(T.Body("is_paused")), lastHydrated: S.String.pipe(T.Body("last_hydrated")), name: S.String, organizationId: S.Number.pipe(T.Body("organization_id")), status: S.String, updated: S.String, useCases: GetCasbIntegrationResponseUseCasesList.pipe(T.Body("use_cases")), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetCasbIntegrationResponse", }) as any as S.Schema; export interface GetConnectivitySettingRequest { /** Cloudflare account ID */ accountId: string; } export const GetConnectivitySettingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/zerotrust/connectivity_settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetConnectivitySettingRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetConnectivitySettingResponse { /** A flag to enable the ICMP proxy for the account network. */ icmpProxyEnabled?: boolean | null; /** A flag to enable WARP to WARP traffic. */ offrampWarpEnabled?: boolean | null; } export const GetConnectivitySettingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ icmpProxyEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("icmp_proxy_enabled")), ), offrampWarpEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("offramp_warp_enabled")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetConnectivitySettingResponse", }) as any as S.Schema; export interface GetDeviceRequest { accountId: string; /** Registration ID. Equal to Device ID except for accounts which enabled [multi-user mode](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/windows-multiuser/). */ deviceId: string; } export const GetDeviceRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), deviceId: S.String.pipe(T.Label("device_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/{device_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceRequest", }) as any as S.Schema; export interface DevicesGetResponseAccount { id?: string | null; accountType?: string | null; /** The name of the enrolled account. */ name?: string | null; } export const DevicesGetResponseAccount = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), accountType: S.optional(S.NullOr(S.String).pipe(T.Body("account_type"))), name: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesGetResponseAccount", }) as any as S.Schema; export interface DevicesGetResponseUser { /** UUID. */ id?: string | null; /** The contact email address of the user. */ email?: string | null; /** The enrolled device user's name. */ name?: string | null; } export const DevicesGetResponseUser = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), email: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesGetResponseUser", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDeviceResponse { /** Registration ID. Equal to Device ID except for accounts which enabled [multi-user mode](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/windows-multiuser/). */ id?: string | null; account?: DevicesGetResponseAccount | null; /** When the device was created. */ created?: string | null; /** True if the device was deleted. */ deleted?: boolean | null; deviceType?: string | null; gatewayDeviceId?: string | null; /** IPv4 or IPv6 address. */ ip?: string | null; /** The device's public key. */ key?: string | null; /** Type of the key. */ keyType?: string | null; /** When the device last connected to Cloudflare services. */ lastSeen?: string | null; /** The device mac address. */ macAddress?: string | null; /** The device model name. */ model?: string | null; /** The device name. */ name?: string | null; /** The operating system version. */ osVersion?: string | null; /** The device serial number. */ serialNumber?: string | null; /** Type of the tunnel connection used. */ tunnelType?: string | null; /** When the device was updated. */ updated?: string | null; user?: DevicesGetResponseUser | null; /** The WARP client version. */ version?: string | null; } export const GetDeviceResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), account: S.optional(S.NullOr(DevicesGetResponseAccount)), created: S.optional(S.NullOr(S.String)), deleted: S.optional(S.NullOr(S.Boolean)), deviceType: S.optional(S.NullOr(S.String).pipe(T.Body("device_type"))), gatewayDeviceId: S.optional( S.NullOr(S.String).pipe(T.Body("gateway_device_id")), ), ip: S.optional(S.NullOr(S.String)), key: S.optional(S.NullOr(S.String)), keyType: S.optional(S.NullOr(S.String).pipe(T.Body("key_type"))), lastSeen: S.optional(S.NullOr(S.String).pipe(T.Body("last_seen"))), macAddress: S.optional(S.NullOr(S.String).pipe(T.Body("mac_address"))), model: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), osVersion: S.optional(S.NullOr(S.String).pipe(T.Body("os_version"))), serialNumber: S.optional(S.NullOr(S.String).pipe(T.Body("serial_number"))), tunnelType: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_type"))), updated: S.optional(S.NullOr(S.String)), user: S.optional(S.NullOr(DevicesGetResponseUser)), version: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceResponse", }) as any as S.Schema; export interface GetDeviceDeploymentGroupRequest { accountId: string; groupId: string; } export const GetDeviceDeploymentGroupRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), groupId: S.String.pipe(T.Label("group_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/deployment-groups/{group_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceDeploymentGroupRequest", }) as any as S.Schema; export type DevicesDeploymentGroupsGetResponseVersionConfigItem = DevicesDeploymentGroupsCreateRequestVersionConfigItem; export const DevicesDeploymentGroupsGetResponseVersionConfigItem = DevicesDeploymentGroupsCreateRequestVersionConfigItem; export type DevicesDeploymentGroupsGetResponseVersionConfigList = Array; export const DevicesDeploymentGroupsGetResponseVersionConfigList = /*@__PURE__*/ S.Array( DevicesDeploymentGroupsCreateRequestVersionConfigItem, ) as any as S.Schema; export type DevicesDeploymentGroupsGetResponsePolicyIdsList = Array; export const DevicesDeploymentGroupsGetResponsePolicyIdsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDeviceDeploymentGroupResponse { /** The ID of the deployment group. */ id: string; /** The RFC3339Nano timestamp when the deployment group was created. */ createdAt: string; /** A user-friendly name for the deployment group. */ name: string; /** The RFC3339Nano timestamp when the deployment group was last updated. */ updatedAt: string; /** Contains version configurations for different target environments. */ versionConfig: DevicesDeploymentGroupsGetResponseVersionConfigList; /** Contains a list of policy IDs assigned to this deployment group. */ policyIds?: DevicesDeploymentGroupsGetResponsePolicyIdsList | null; } export const GetDeviceDeploymentGroupResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), versionConfig: DevicesDeploymentGroupsGetResponseVersionConfigList.pipe( T.Body("version_config"), ), policyIds: S.optional( S.NullOr(DevicesDeploymentGroupsGetResponsePolicyIdsList).pipe( T.Body("policy_ids"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceDeploymentGroupResponse", }) as any as S.Schema; export interface GetDeviceDevicesRequest { accountId: string; deviceId: string; /** Comma-separated list of additional information that should be included in the device response. Supported values are: "last_seen_registration.policy". */ include?: string; } export const GetDeviceDevicesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), deviceId: S.String.pipe(T.Label("device_id")), include: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/physical-devices/{device_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceDevicesRequest", }) as any as S.Schema; export interface DevicesDevicesGetResponseLastSeenRegistrationPolicy { /** The ID of the device settings profile. */ id: string; /** Whether the device settings profile is the default profile for the account. */ default: boolean; /** Whether the device settings profile was deleted. */ deleted: boolean; /** The name of the device settings profile. */ name: string; /** The RFC3339 timestamp of when the device settings profile last changed for the registration. */ updatedAt: string; } export const DevicesDevicesGetResponseLastSeenRegistrationPolicy = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, default: S.Boolean, deleted: S.Boolean, name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), }), ).annotate({ identifier: "DevicesDevicesGetResponseLastSeenRegistrationPolicy", }) as any as S.Schema; export interface DevicesDevicesGetResponseLastSeenRegistration { /** A summary of the device profile evaluated for the registration. */ policy?: DevicesDevicesGetResponseLastSeenRegistrationPolicy | null; } export const DevicesDevicesGetResponseLastSeenRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ policy: S.optional( S.NullOr(DevicesDevicesGetResponseLastSeenRegistrationPolicy), ), }), ).annotate({ identifier: "DevicesDevicesGetResponseLastSeenRegistration", }) as any as S.Schema; export type DevicesDevicesGetResponseLastSeenUser = DevicesGetResponseUser; export const DevicesDevicesGetResponseLastSeenUser = DevicesGetResponseUser; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDeviceDevicesResponse { /** The unique ID of the device. */ id: string; /** The number of active registrations for the device. Active registrations are those which haven't been revoked or deleted. */ activeRegistrations: number; /** The RFC3339 timestamp when the device was created. */ createdAt: string; /** The RFC3339 timestamp when the device was last seen. */ lastSeenAt: string; /** The name of the device. */ name: string; /** The RFC3339 timestamp when the device was last updated. */ updatedAt: string; /** Version of the WARP client. */ clientVersion?: string | null; /** The RFC3339 timestamp when the device was deleted. */ deletedAt?: string | null; /** The device operating system. */ deviceType?: string | null; /** A string that uniquely identifies the hardware or virtual machine (VM). */ hardwareId?: string | null; /** The last seen registration for the device. */ lastSeenRegistration?: DevicesDevicesGetResponseLastSeenRegistration | null; /** The last user to use the WARP device. */ lastSeenUser?: DevicesGetResponseUser | null; /** The device MAC address. */ macAddress?: string | null; /** The device manufacturer. */ manufacturer?: string | null; /** The model name of the device. */ model?: string | null; /** The device operating system version number. */ osVersion?: string | null; /** Additional operating system version details. For Windows, the UBR (Update Build Revision). For Mac or iOS, the Product Version Extra. For Linux, the distribution name and version. */ osVersionExtra?: string | null; /** **Deprecated**: IP information is provided by DEX - see https://developers.cloudflare.com/api/resources/zero_trust/subresources/dex/subresources/fleet_status/subresources/devices/methods/list/ */ publicIp?: string | null; /** The device serial number. */ serialNumber?: string | null; } export const GetDeviceDevicesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, activeRegistrations: S.Number.pipe(T.Body("active_registrations")), createdAt: S.String.pipe(T.Body("created_at")), lastSeenAt: S.String.pipe(T.Body("last_seen_at")), name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), clientVersion: S.optional( S.NullOr(S.String).pipe(T.Body("client_version")), ), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), deviceType: S.optional(S.NullOr(S.String).pipe(T.Body("device_type"))), hardwareId: S.optional(S.NullOr(S.String).pipe(T.Body("hardware_id"))), lastSeenRegistration: S.optional( S.NullOr(DevicesDevicesGetResponseLastSeenRegistration).pipe( T.Body("last_seen_registration"), ), ), lastSeenUser: S.optional( S.NullOr(DevicesGetResponseUser).pipe(T.Body("last_seen_user")), ), macAddress: S.optional(S.NullOr(S.String).pipe(T.Body("mac_address"))), manufacturer: S.optional(S.NullOr(S.String)), model: S.optional(S.NullOr(S.String)), osVersion: S.optional(S.NullOr(S.String).pipe(T.Body("os_version"))), osVersionExtra: S.optional( S.NullOr(S.String).pipe(T.Body("os_version_extra")), ), publicIp: S.optional(S.NullOr(S.String).pipe(T.Body("public_ip"))), serialNumber: S.optional(S.NullOr(S.String).pipe(T.Body("serial_number"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceDevicesResponse", }) as any as S.Schema; export interface GetDeviceDexTestRequest { /** Unique identifier linked to an account. */ accountId: string; /** The unique identifier for the test. */ dexTestId: string; } export const GetDeviceDexTestRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), dexTestId: S.String.pipe(T.Label("dex_test_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/devices/dex_tests/{dex_test_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceDexTestRequest", }) as any as S.Schema; export type DevicesDexTestsGetResponseDataKind = "http" | "traceroute"; export const DevicesDexTestsGetResponseDataKind = /*@__PURE__*/ S.String; export type DevicesDexTestsGetResponseDataMethod = "GET"; export const DevicesDexTestsGetResponseDataMethod = /*@__PURE__*/ S.String; export interface DevicesDexTestsGetResponseData { /** The desired endpoint to test. */ host: string; /** The type of test. */ kind: DevicesDexTestsGetResponseDataKind; /** The HTTP request method type. */ method?: DevicesDexTestsGetResponseDataMethod | null; } export const DevicesDexTestsGetResponseData = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.String, kind: DevicesDexTestsGetResponseDataKind, method: S.optional(S.NullOr(DevicesDexTestsGetResponseDataMethod)), }), ).annotate({ identifier: "DevicesDexTestsGetResponseData", }) as any as S.Schema; export type DevicesDexTestsGetResponseTargetPoliciesItem = DevicesDexTestsCreateResponseTargetPoliciesItem; export const DevicesDexTestsGetResponseTargetPoliciesItem = DevicesDexTestsCreateResponseTargetPoliciesItem; export type DevicesDexTestsGetResponseTargetPoliciesList = Array; export const DevicesDexTestsGetResponseTargetPoliciesList = /*@__PURE__*/ S.Array( DevicesDexTestsCreateResponseTargetPoliciesItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDeviceDexTestResponse { /** The configuration object which contains the details for the WARP client to conduct the test. */ data: DevicesDexTestsGetResponseData; /** Determines whether or not the test is active. */ enabled: boolean; /** How often the test will run. */ interval: string; /** The name of the DEX test. Must be unique. */ name: string; /** Additional details about the test. */ description?: string | null; /** DEX rules targeted by this test */ targetPolicies?: DevicesDexTestsGetResponseTargetPoliciesList | null; targeted?: boolean | null; /** The unique identifier for the test. */ testId?: string | null; } export const GetDeviceDexTestResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ data: DevicesDexTestsGetResponseData, enabled: S.Boolean, interval: S.String, name: S.String, description: S.optional(S.NullOr(S.String)), targetPolicies: S.optional( S.NullOr(DevicesDexTestsGetResponseTargetPoliciesList).pipe( T.Body("target_policies"), ), ), targeted: S.optional(S.NullOr(S.Boolean)), testId: S.optional(S.NullOr(S.String).pipe(T.Body("test_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceDexTestResponse", }) as any as S.Schema; export interface GetDeviceFleetStatusRequest { /** Unique identifier linked to an account. */ accountId: string; /** Unique identifier for the physical device (UUID). */ deviceId: string; /** Number of minutes before current time. */ sinceMinutes: number; /** List of data centers to filter results. */ colo?: string; /** Current time in ISO format. */ timeNow?: string; } export const GetDeviceFleetStatusRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), deviceId: S.String.pipe(T.Label("device_id")), sinceMinutes: S.Number.pipe(T.Query("since_minutes")), colo: S.optional(S.String.pipe(T.Query())), timeNow: S.optional(S.String.pipe(T.Query("time_now"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/devices/{device_id}/fleet-status/live", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceFleetStatusRequest", }) as any as S.Schema; export interface DevicesFleetStatusGetResponseCpuPctByAppItem { /** CPU usage percentage, on a scale of 0 to 100. */ cpuPct?: number | null; /** Application name. */ name?: string | null; } export const DevicesFleetStatusGetResponseCpuPctByAppItem = /*@__PURE__*/ S.suspend(() => S.Struct({ cpuPct: S.optional(S.NullOr(S.Number).pipe(T.Body("cpu_pct"))), name: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesFleetStatusGetResponseCpuPctByAppItem", }) as any as S.Schema; export type DevicesFleetStatusGetResponseCpuPctByAppList = Array; export const DevicesFleetStatusGetResponseCpuPctByAppList = /*@__PURE__*/ S.Array( DevicesFleetStatusGetResponseCpuPctByAppItem, ) as any as S.Schema; export interface DevicesFleetStatusGetResponseDeviceIpv4Location { city?: string | null; countryIso?: string | null; stateIso?: string | null; zip?: string | null; } export const DevicesFleetStatusGetResponseDeviceIpv4Location = /*@__PURE__*/ S.suspend(() => S.Struct({ city: S.optional(S.NullOr(S.String)), countryIso: S.optional(S.NullOr(S.String).pipe(T.Body("country_iso"))), stateIso: S.optional(S.NullOr(S.String).pipe(T.Body("state_iso"))), zip: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesFleetStatusGetResponseDeviceIpv4Location", }) as any as S.Schema; export interface DevicesFleetStatusGetResponseDeviceIpv4 { address?: string | null; asn?: number | null; aso?: string | null; location?: DevicesFleetStatusGetResponseDeviceIpv4Location | null; name?: string | null; netmask?: string | null; /** IP version (`1` for IPv4, `2` for IPv6, `0` if unknown). */ version?: number | null; } export const DevicesFleetStatusGetResponseDeviceIpv4 = /*@__PURE__*/ S.suspend( () => S.Struct({ address: S.optional(S.NullOr(S.String)), asn: S.optional(S.NullOr(S.Number)), aso: S.optional(S.NullOr(S.String)), location: S.optional( S.NullOr(DevicesFleetStatusGetResponseDeviceIpv4Location), ), name: S.optional(S.NullOr(S.String)), netmask: S.optional(S.NullOr(S.String)), version: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DevicesFleetStatusGetResponseDeviceIpv4", }) as any as S.Schema; export type DevicesFleetStatusGetResponseDeviceIpv6Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export const DevicesFleetStatusGetResponseDeviceIpv6Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export type DevicesFleetStatusGetResponseDeviceIpv6 = DevicesFleetStatusGetResponseDeviceIpv4; export const DevicesFleetStatusGetResponseDeviceIpv6 = DevicesFleetStatusGetResponseDeviceIpv4; export type DevicesFleetStatusGetResponseGatewayIpv4Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export const DevicesFleetStatusGetResponseGatewayIpv4Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export type DevicesFleetStatusGetResponseGatewayIpv4 = DevicesFleetStatusGetResponseDeviceIpv4; export const DevicesFleetStatusGetResponseGatewayIpv4 = DevicesFleetStatusGetResponseDeviceIpv4; export type DevicesFleetStatusGetResponseGatewayIpv6Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export const DevicesFleetStatusGetResponseGatewayIpv6Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export type DevicesFleetStatusGetResponseGatewayIpv6 = DevicesFleetStatusGetResponseDeviceIpv4; export const DevicesFleetStatusGetResponseGatewayIpv6 = DevicesFleetStatusGetResponseDeviceIpv4; export type DevicesFleetStatusGetResponseIspIpv4Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export const DevicesFleetStatusGetResponseIspIpv4Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export type DevicesFleetStatusGetResponseIspIpv4 = DevicesFleetStatusGetResponseDeviceIpv4; export const DevicesFleetStatusGetResponseIspIpv4 = DevicesFleetStatusGetResponseDeviceIpv4; export type DevicesFleetStatusGetResponseIspIpv6Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export const DevicesFleetStatusGetResponseIspIpv6Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export type DevicesFleetStatusGetResponseIspIpv6 = DevicesFleetStatusGetResponseDeviceIpv4; export const DevicesFleetStatusGetResponseIspIpv6 = DevicesFleetStatusGetResponseDeviceIpv4; export interface DevicesFleetStatusGetResponseRamUsedPctByAppItem { /** Application name. */ name?: string | null; /** RAM usage percentage, on a scale of 0 to 100. */ ramUsedPct?: number | null; } export const DevicesFleetStatusGetResponseRamUsedPctByAppItem = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.NullOr(S.String)), ramUsedPct: S.optional(S.NullOr(S.Number).pipe(T.Body("ram_used_pct"))), }), ).annotate({ identifier: "DevicesFleetStatusGetResponseRamUsedPctByAppItem", }) as any as S.Schema; export type DevicesFleetStatusGetResponseRamUsedPctByAppList = Array; export const DevicesFleetStatusGetResponseRamUsedPctByAppList = /*@__PURE__*/ S.Array( DevicesFleetStatusGetResponseRamUsedPctByAppItem, ) as any as S.Schema; export interface DevicesFleetStatusGetResponseRttMinRttUs { downstream?: number | null; upstream?: number | null; } export const DevicesFleetStatusGetResponseRttMinRttUs = /*@__PURE__*/ S.suspend( () => S.Struct({ downstream: S.optional(S.NullOr(S.Number)), upstream: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DevicesFleetStatusGetResponseRttMinRttUs", }) as any as S.Schema; export type DevicesFleetStatusGetResponseRttRttUs = DevicesFleetStatusGetResponseRttMinRttUs; export const DevicesFleetStatusGetResponseRttRttUs = DevicesFleetStatusGetResponseRttMinRttUs; export type DevicesFleetStatusGetResponseRttRttVarUs = DevicesFleetStatusGetResponseRttMinRttUs; export const DevicesFleetStatusGetResponseRttRttVarUs = DevicesFleetStatusGetResponseRttMinRttUs; export interface DevicesFleetStatusGetResponseRtt { /** Minimum round-trip time in microseconds. */ minRttUs?: DevicesFleetStatusGetResponseRttMinRttUs | null; /** Round-trip time in microseconds. */ rttUs?: DevicesFleetStatusGetResponseRttMinRttUs | null; /** Round-trip time variance in microseconds. */ rttVarUs?: DevicesFleetStatusGetResponseRttMinRttUs | null; } export const DevicesFleetStatusGetResponseRtt = /*@__PURE__*/ S.suspend(() => S.Struct({ minRttUs: S.optional(S.NullOr(DevicesFleetStatusGetResponseRttMinRttUs)), rttUs: S.optional(S.NullOr(DevicesFleetStatusGetResponseRttMinRttUs)), rttVarUs: S.optional(S.NullOr(DevicesFleetStatusGetResponseRttMinRttUs)), }), ).annotate({ identifier: "DevicesFleetStatusGetResponseRtt", }) as any as S.Schema; export type DevicesFleetStatusGetResponseTunnelStatsBytesLost = DevicesFleetStatusGetResponseRttMinRttUs; export const DevicesFleetStatusGetResponseTunnelStatsBytesLost = DevicesFleetStatusGetResponseRttMinRttUs; export type DevicesFleetStatusGetResponseTunnelStatsBytesReceived = DevicesFleetStatusGetResponseRttMinRttUs; export const DevicesFleetStatusGetResponseTunnelStatsBytesReceived = DevicesFleetStatusGetResponseRttMinRttUs; export type DevicesFleetStatusGetResponseTunnelStatsBytesRetransmitted = DevicesFleetStatusGetResponseRttMinRttUs; export const DevicesFleetStatusGetResponseTunnelStatsBytesRetransmitted = DevicesFleetStatusGetResponseRttMinRttUs; export type DevicesFleetStatusGetResponseTunnelStatsBytesSent = DevicesFleetStatusGetResponseRttMinRttUs; export const DevicesFleetStatusGetResponseTunnelStatsBytesSent = DevicesFleetStatusGetResponseRttMinRttUs; export type DevicesFleetStatusGetResponseTunnelStatsPacketsLost = DevicesFleetStatusGetResponseRttMinRttUs; export const DevicesFleetStatusGetResponseTunnelStatsPacketsLost = DevicesFleetStatusGetResponseRttMinRttUs; export type DevicesFleetStatusGetResponseTunnelStatsPacketsReceived = DevicesFleetStatusGetResponseRttMinRttUs; export const DevicesFleetStatusGetResponseTunnelStatsPacketsReceived = DevicesFleetStatusGetResponseRttMinRttUs; export type DevicesFleetStatusGetResponseTunnelStatsPacketsRetransmitted = DevicesFleetStatusGetResponseRttMinRttUs; export const DevicesFleetStatusGetResponseTunnelStatsPacketsRetransmitted = DevicesFleetStatusGetResponseRttMinRttUs; export type DevicesFleetStatusGetResponseTunnelStatsPacketsSent = DevicesFleetStatusGetResponseRttMinRttUs; export const DevicesFleetStatusGetResponseTunnelStatsPacketsSent = DevicesFleetStatusGetResponseRttMinRttUs; export interface DevicesFleetStatusGetResponseTunnelStats { /** Number of bytes lost, split by direction. */ bytesLost?: DevicesFleetStatusGetResponseRttMinRttUs | null; /** Number of bytes received, split by direction. */ bytesReceived?: DevicesFleetStatusGetResponseRttMinRttUs | null; /** Number of bytes retransmitted, split by direction. */ bytesRetransmitted?: DevicesFleetStatusGetResponseRttMinRttUs | null; /** Number of bytes sent, split by direction. */ bytesSent?: DevicesFleetStatusGetResponseRttMinRttUs | null; /** Number of packets lost, split by direction. */ packetsLost?: DevicesFleetStatusGetResponseRttMinRttUs | null; /** Number of packets received, split by direction. */ packetsReceived?: DevicesFleetStatusGetResponseRttMinRttUs | null; /** Number of packets retransmitted, split by direction. */ packetsRetransmitted?: DevicesFleetStatusGetResponseRttMinRttUs | null; /** Number of packets sent, split by direction. */ packetsSent?: DevicesFleetStatusGetResponseRttMinRttUs | null; /** The measurement window duration in milliseconds. */ statsWindowMs?: number | null; } export const DevicesFleetStatusGetResponseTunnelStats = /*@__PURE__*/ S.suspend( () => S.Struct({ bytesLost: S.optional(S.NullOr(DevicesFleetStatusGetResponseRttMinRttUs)), bytesReceived: S.optional( S.NullOr(DevicesFleetStatusGetResponseRttMinRttUs), ), bytesRetransmitted: S.optional( S.NullOr(DevicesFleetStatusGetResponseRttMinRttUs), ), bytesSent: S.optional(S.NullOr(DevicesFleetStatusGetResponseRttMinRttUs)), packetsLost: S.optional( S.NullOr(DevicesFleetStatusGetResponseRttMinRttUs), ), packetsReceived: S.optional( S.NullOr(DevicesFleetStatusGetResponseRttMinRttUs), ), packetsRetransmitted: S.optional( S.NullOr(DevicesFleetStatusGetResponseRttMinRttUs), ), packetsSent: S.optional( S.NullOr(DevicesFleetStatusGetResponseRttMinRttUs), ), statsWindowMs: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DevicesFleetStatusGetResponseTunnelStats", }) as any as S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface GetDeviceFleetStatusResponse { /** Cloudflare colo airport code. */ colo: string; /** Device identifier (UUID v4) */ deviceId: string; /** The mode under which the WARP client is run. */ mode: string; /** Operating system. */ platform: string; /** Network status. */ status: string; timestamp: string; /** WARP client version. */ version: string; alwaysOn?: boolean | null; batteryCharging?: boolean | null; batteryCycles?: number | null; batteryPct?: number | null; connectionType?: string | null; cpuPct?: number | null; cpuPctByApp?: DevicesFleetStatusGetResponseCpuPctByAppList | null; deviceIpv4?: DevicesFleetStatusGetResponseDeviceIpv4 | null; deviceIpv6?: DevicesFleetStatusGetResponseDeviceIpv4 | null; /** Device identifier (human readable). */ deviceName?: string | null; /** Deprecated: use registrationId. Device registration identifier (UUID). */ deviceRegistration?: string | null; diskReadBps?: number | null; diskUsagePct?: number | null; diskWriteBps?: number | null; dohSubdomain?: string | null; estimatedLossPct?: number | null; firewallEnabled?: boolean | null; gatewayIpv4?: DevicesFleetStatusGetResponseDeviceIpv4 | null; gatewayIpv6?: DevicesFleetStatusGetResponseDeviceIpv4 | null; handshakeLatencyMs?: number | null; ispIpv4?: DevicesFleetStatusGetResponseDeviceIpv4 | null; ispIpv6?: DevicesFleetStatusGetResponseDeviceIpv4 | null; metal?: string | null; networkRcvdBps?: number | null; networkSentBps?: number | null; networkSsid?: string | null; /** User contact email address */ personEmail?: string | null; ramAvailableKb?: number | null; ramUsedPct?: number | null; ramUsedPctByApp?: DevicesFleetStatusGetResponseRamUsedPctByAppList | null; /** Device registration identifier (UUID v4). On multi-user devices, this uniquely identifies a user's registration on the device. */ registrationId?: string | null; /** Round-trip time statistics for the WARP tunnel. */ rtt?: DevicesFleetStatusGetResponseRtt | null; switchLocked?: boolean | null; /** WARP tunnel packet and byte counters. */ tunnelStats?: DevicesFleetStatusGetResponseTunnelStats | null; tunnelType?: string | null; wifiStrengthDbm?: number | null; } export const GetDeviceFleetStatusResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ colo: S.String, deviceId: S.String, mode: S.String, platform: S.String, status: S.String, timestamp: S.String, version: S.String, alwaysOn: S.optional(S.NullOr(S.Boolean)), batteryCharging: S.optional(S.NullOr(S.Boolean)), batteryCycles: S.optional(S.NullOr(S.Number)), batteryPct: S.optional(S.NullOr(S.Number)), connectionType: S.optional(S.NullOr(S.String)), cpuPct: S.optional(S.NullOr(S.Number)), cpuPctByApp: S.optional( S.NullOr(DevicesFleetStatusGetResponseCpuPctByAppList), ), deviceIpv4: S.optional(S.NullOr(DevicesFleetStatusGetResponseDeviceIpv4)), deviceIpv6: S.optional(S.NullOr(DevicesFleetStatusGetResponseDeviceIpv4)), deviceName: S.optional(S.NullOr(S.String)), deviceRegistration: S.optional(S.NullOr(S.String)), diskReadBps: S.optional(S.NullOr(S.Number)), diskUsagePct: S.optional(S.NullOr(S.Number)), diskWriteBps: S.optional(S.NullOr(S.Number)), dohSubdomain: S.optional(S.NullOr(S.String)), estimatedLossPct: S.optional(S.NullOr(S.Number)), firewallEnabled: S.optional(S.NullOr(S.Boolean)), gatewayIpv4: S.optional(S.NullOr(DevicesFleetStatusGetResponseDeviceIpv4)), gatewayIpv6: S.optional(S.NullOr(DevicesFleetStatusGetResponseDeviceIpv4)), handshakeLatencyMs: S.optional(S.NullOr(S.Number)), ispIpv4: S.optional(S.NullOr(DevicesFleetStatusGetResponseDeviceIpv4)), ispIpv6: S.optional(S.NullOr(DevicesFleetStatusGetResponseDeviceIpv4)), metal: S.optional(S.NullOr(S.String)), networkRcvdBps: S.optional(S.NullOr(S.Number)), networkSentBps: S.optional(S.NullOr(S.Number)), networkSsid: S.optional(S.NullOr(S.String)), personEmail: S.optional(S.NullOr(S.String)), ramAvailableKb: S.optional(S.NullOr(S.Number)), ramUsedPct: S.optional(S.NullOr(S.Number)), ramUsedPctByApp: S.optional( S.NullOr(DevicesFleetStatusGetResponseRamUsedPctByAppList), ), registrationId: S.optional(S.NullOr(S.String)), rtt: S.optional(S.NullOr(DevicesFleetStatusGetResponseRtt)), switchLocked: S.optional(S.NullOr(S.Boolean)), tunnelStats: S.optional(S.NullOr(DevicesFleetStatusGetResponseTunnelStats)), tunnelType: S.optional(S.NullOr(S.String)), wifiStrengthDbm: S.optional(S.NullOr(S.Number)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceFleetStatusResponse", }) as any as S.Schema; export interface GetDeviceIpProfileRequest { accountId: string; profileId: string; } export const GetDeviceIpProfileRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), profileId: S.String.pipe(T.Label("profile_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/ip-profiles/{profile_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceIpProfileRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDeviceIpProfileResponse { /** The ID of the Device IP profile. */ id: string; /** The RFC3339Nano timestamp when the Device IP profile was created. */ createdAt: string; /** An optional description of the Device IP profile. */ description: string; /** Whether the Device IP profile is enabled. */ enabled: boolean; /** The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes". */ match: string; /** A user-friendly name for the Device IP profile. */ name: string; /** The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field. */ precedence: number; /** The ID of the Subnet. */ subnetId: string; /** The RFC3339Nano timestamp when the Device IP profile was last updated. */ updatedAt: string; } export const GetDeviceIpProfileResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), description: S.String, enabled: S.Boolean, match: S.String, name: S.String, precedence: S.Number, subnetId: S.String.pipe(T.Body("subnet_id")), updatedAt: S.String.pipe(T.Body("updated_at")), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceIpProfileResponse", }) as any as S.Schema; export interface GetDeviceNetworkRequest { accountId: string; /** API UUID. */ networkId: string; } export const GetDeviceNetworkRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), networkId: S.String.pipe(T.Label("network_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/networks/{network_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceNetworkRequest", }) as any as S.Schema; export type DevicesNetworksGetResponseConfig = DevicesNetworksCreateResponseConfig; export const DevicesNetworksGetResponseConfig = DevicesNetworksCreateResponseConfig; export type DevicesNetworksGetResponseType = "tls"; export const DevicesNetworksGetResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDeviceNetworkResponse { /** The configuration object containing information for the WARP client to detect the managed network. */ config?: DevicesNetworksCreateResponseConfig | null; /** The name of the device managed network. This name must be unique. */ name?: string | null; /** API UUID. */ networkId?: string | null; /** The type of device managed network. */ type?: DevicesNetworksGetResponseType | null; } export const GetDeviceNetworkResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ config: S.optional(S.NullOr(DevicesNetworksCreateResponseConfig)), name: S.optional(S.NullOr(S.String)), networkId: S.optional(S.NullOr(S.String).pipe(T.Body("network_id"))), type: S.optional(S.NullOr(DevicesNetworksGetResponseType)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceNetworkResponse", }) as any as S.Schema; export interface GetDeviceOverrideCodeRequest { accountId: string; registrationId: string; } export const GetDeviceOverrideCodeRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), registrationId: S.String.pipe(T.Label("registration_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/registrations/{registration_id}/override_codes", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceOverrideCodeRequest", }) as any as S.Schema; export type DevicesOverrideCodesGetResponseDisableForTimeMap = { [key: string]: string | undefined; }; export const DevicesOverrideCodesGetResponseDisableForTimeMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDeviceOverrideCodeResponse { disableForTime?: DevicesOverrideCodesGetResponseDisableForTimeMap | null; } export const GetDeviceOverrideCodeResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ disableForTime: S.optional( S.NullOr(DevicesOverrideCodesGetResponseDisableForTimeMap).pipe( T.Body("disable_for_time"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceOverrideCodeResponse", }) as any as S.Schema; export interface GetDevicePolicyCustomRequest { accountId: string; policyId: string; } export const GetDevicePolicyCustomRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), policyId: S.String.pipe(T.Label("policy_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/policy/{policy_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyCustomRequest", }) as any as S.Schema; export type DevicesPoliciesCustomGetResponseDnsSearchSuffixesItem = DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem; export const DevicesPoliciesCustomGetResponseDnsSearchSuffixesItem = DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem; export type DevicesPoliciesCustomGetResponseDnsSearchSuffixesList = Array; export const DevicesPoliciesCustomGetResponseDnsSearchSuffixesList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem, ) as any as S.Schema; export type DevicesPoliciesCustomGetResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export const DevicesPoliciesCustomGetResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export type DevicesPoliciesCustomGetResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomGetResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export type DevicesPoliciesCustomGetResponseExcludeItem = | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomGetResponseExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomGetResponseExcludeList = Array; export const DevicesPoliciesCustomGetResponseExcludeList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomGetResponseExcludeItem, ) as any as S.Schema; export type DevicesPoliciesCustomGetResponseFallbackDomainsItemDnsServerList = Array; export const DevicesPoliciesCustomGetResponseFallbackDomainsItemDnsServerList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomGetResponseFallbackDomainsItem { /** The domain suffix to match when resolving locally. */ suffix: string; /** A description of the fallback domain, displayed in the client UI. */ description?: string | null; /** A list of IP addresses to handle domain resolution. */ dnsServer?: DevicesPoliciesCustomGetResponseFallbackDomainsItemDnsServerList | null; } export const DevicesPoliciesCustomGetResponseFallbackDomainsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ suffix: S.String, description: S.optional(S.NullOr(S.String)), dnsServer: S.optional( S.NullOr( DevicesPoliciesCustomGetResponseFallbackDomainsItemDnsServerList, ).pipe(T.Body("dns_server")), ), }), ).annotate({ identifier: "DevicesPoliciesCustomGetResponseFallbackDomainsItem", }) as any as S.Schema; export type DevicesPoliciesCustomGetResponseFallbackDomainsList = Array; export const DevicesPoliciesCustomGetResponseFallbackDomainsList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomGetResponseFallbackDomainsItem, ) as any as S.Schema; export type DevicesPoliciesCustomGetResponseGlobalAccelerationApiEndpointsList = Array; export const DevicesPoliciesCustomGetResponseGlobalAccelerationApiEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesCustomGetResponseGlobalAccelerationMasqueEndpointsList = Array; export const DevicesPoliciesCustomGetResponseGlobalAccelerationMasqueEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesCustomGetResponseGlobalAccelerationWireguardEndpointsList = Array; export const DevicesPoliciesCustomGetResponseGlobalAccelerationWireguardEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomGetResponseGlobalAcceleration { /** IP:port entries for the API endpoints. */ apiEndpoints: DevicesPoliciesCustomGetResponseGlobalAccelerationApiEndpointsList; /** Global acceleration settings are used only when "enabled". */ enabled: boolean; /** IP:port entries for the MASQUE tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ masqueEndpoints: DevicesPoliciesCustomGetResponseGlobalAccelerationMasqueEndpointsList; /** IP:port entries for the WireGuard tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ wireguardEndpoints: DevicesPoliciesCustomGetResponseGlobalAccelerationWireguardEndpointsList; } export const DevicesPoliciesCustomGetResponseGlobalAcceleration = /*@__PURE__*/ S.suspend(() => S.Struct({ apiEndpoints: DevicesPoliciesCustomGetResponseGlobalAccelerationApiEndpointsList.pipe( T.Body("api_endpoints"), ), enabled: S.Boolean, masqueEndpoints: DevicesPoliciesCustomGetResponseGlobalAccelerationMasqueEndpointsList.pipe( T.Body("masque_endpoints"), ), wireguardEndpoints: DevicesPoliciesCustomGetResponseGlobalAccelerationWireguardEndpointsList.pipe( T.Body("wireguard_endpoints"), ), }), ).annotate({ identifier: "DevicesPoliciesCustomGetResponseGlobalAcceleration", }) as any as S.Schema; export type DevicesPoliciesCustomGetResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export const DevicesPoliciesCustomGetResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export type DevicesPoliciesCustomGetResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomGetResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export type DevicesPoliciesCustomGetResponseIncludeItem = | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomGetResponseIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomGetResponseIncludeList = Array; export const DevicesPoliciesCustomGetResponseIncludeList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomGetResponseIncludeItem, ) as any as S.Schema; export type DevicesPoliciesCustomGetResponseServiceModeV2 = DevicesPoliciesCustomCreateResponseServiceModeV2; export const DevicesPoliciesCustomGetResponseServiceModeV2 = DevicesPoliciesCustomCreateResponseServiceModeV2; export type DevicesPoliciesCustomGetResponseTargetTestsItem = DevicesPoliciesCustomCreateResponseTargetTestsItem; export const DevicesPoliciesCustomGetResponseTargetTestsItem = DevicesPoliciesCustomCreateResponseTargetTestsItem; export type DevicesPoliciesCustomGetResponseTargetTestsList = Array; export const DevicesPoliciesCustomGetResponseTargetTestsList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateResponseTargetTestsItem, ) as any as S.Schema; export type DevicesPoliciesCustomGetResponseVirtualNetworksAllowedList = Array; export const DevicesPoliciesCustomGetResponseVirtualNetworksAllowedList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomGetResponseVirtualNetworks { /** List of virtual network IDs the device is allowed to access. When virtual_networks is set, at least one entry is required. */ allowed: DevicesPoliciesCustomGetResponseVirtualNetworksAllowedList; /** The default virtual network ID. Must be included in the `allowed` list. */ default: string; } export const DevicesPoliciesCustomGetResponseVirtualNetworks = /*@__PURE__*/ S.suspend(() => S.Struct({ allowed: DevicesPoliciesCustomGetResponseVirtualNetworksAllowedList, default: S.String, }), ).annotate({ identifier: "DevicesPoliciesCustomGetResponseVirtualNetworks", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDevicePolicyCustomResponse { /** Whether to allow the user to switch WARP between modes. */ allowModeSwitch?: boolean | null; /** Whether to receive update notifications when a new version of the client is available. */ allowUpdates?: boolean | null; /** Whether to allow devices to leave the organization. */ allowedToLeave?: boolean | null; /** The amount of time in seconds to reconnect after having been disabled. */ autoConnect?: number | null; /** Turn on the captive portal after the specified amount of time. */ captivePortal?: number | null; /** Whether the policy is the default policy for an account. */ default?: boolean | null; /** A description of the policy. */ description?: string | null; /** If the `dns_server` field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to `true`. */ disableAutoFallback?: boolean | null; /** List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear. */ dnsSearchSuffixes?: DevicesPoliciesCustomGetResponseDnsSearchSuffixesList | null; /** Whether the policy will be applied to matching devices. */ enabled?: boolean | null; /** List of routes excluded in the WARP client's tunnel. */ exclude?: DevicesPoliciesCustomGetResponseExcludeList | null; /** Whether to add Microsoft IPs to Split Tunnel exclusions. */ excludeOfficeIps?: boolean | null; fallbackDomains?: DevicesPoliciesCustomGetResponseFallbackDomainsList | null; gatewayUniqueId?: string | null; /** Global Acceleration settings for China. When configured, WARP clients connect to the Global Accelerator addresses instead of the default ones. Please contact your account representative to enable this feature on your account. See https://developers.cloudflare.com/china-network/concepts/global-acceleration/. */ globalAcceleration?: DevicesPoliciesCustomGetResponseGlobalAcceleration | null; /** List of routes included in the WARP client's tunnel. */ include?: DevicesPoliciesCustomGetResponseIncludeList | null; /** The amount of time in minutes a user is allowed access to their LAN. A value of 0 will allow LAN access until the next WARP reconnection, such as a reboot or a laptop waking from sleep. Note that this field is omitted from the response if null or unset. */ lanAllowMinutes?: number | null; /** The size of the subnet for the local access network. Note that this field is omitted from the response if null or unset. */ lanAllowSubnetSize?: number | null; /** The wirefilter expression to match devices. Available values: "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.service_token_uuid", "identity.saml_attributes", "network", "os.name", "os.version". */ match?: string | null; /** The name of the device settings profile. */ name?: string | null; policyId?: string | null; /** The precedence of the policy. Lower values indicate higher precedence. Policies will be evaluated in ascending order of this field. */ precedence?: number | null; /** Determines if the operating system will register WARP's local interface IP with your on-premises DNS server. */ registerInterfaceIpWithDns?: boolean | null; /** Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only). */ sccmVpnBoundarySupport?: boolean | null; serviceModeV2?: DevicesPoliciesCustomCreateResponseServiceModeV2 | null; /** The URL to launch when the Send Feedback button is clicked. */ supportUrl?: string | null; /** Whether to allow the user to turn off the WARP switch and disconnect the client. */ switchLocked?: boolean | null; targetTests?: DevicesPoliciesCustomGetResponseTargetTestsList | null; /** Determines which tunnel protocol to use. */ tunnelProtocol?: string | null; /** Virtual network access settings for the device. */ virtualNetworks?: DevicesPoliciesCustomGetResponseVirtualNetworks | null; } export const GetDevicePolicyCustomResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ allowModeSwitch: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_mode_switch")), ), allowUpdates: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_updates"))), allowedToLeave: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allowed_to_leave")), ), autoConnect: S.optional(S.NullOr(S.Number).pipe(T.Body("auto_connect"))), captivePortal: S.optional( S.NullOr(S.Number).pipe(T.Body("captive_portal")), ), default: S.optional(S.NullOr(S.Boolean)), description: S.optional(S.NullOr(S.String)), disableAutoFallback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("disable_auto_fallback")), ), dnsSearchSuffixes: S.optional( S.NullOr(DevicesPoliciesCustomGetResponseDnsSearchSuffixesList).pipe( T.Body("dns_search_suffixes"), ), ), enabled: S.optional(S.NullOr(S.Boolean)), exclude: S.optional(S.NullOr(DevicesPoliciesCustomGetResponseExcludeList)), excludeOfficeIps: S.optional( S.NullOr(S.Boolean).pipe(T.Body("exclude_office_ips")), ), fallbackDomains: S.optional( S.NullOr(DevicesPoliciesCustomGetResponseFallbackDomainsList).pipe( T.Body("fallback_domains"), ), ), gatewayUniqueId: S.optional( S.NullOr(S.String).pipe(T.Body("gateway_unique_id")), ), globalAcceleration: S.optional( S.NullOr(DevicesPoliciesCustomGetResponseGlobalAcceleration).pipe( T.Body("global_acceleration"), ), ), include: S.optional(S.NullOr(DevicesPoliciesCustomGetResponseIncludeList)), lanAllowMinutes: S.optional( S.NullOr(S.Number).pipe(T.Body("lan_allow_minutes")), ), lanAllowSubnetSize: S.optional( S.NullOr(S.Number).pipe(T.Body("lan_allow_subnet_size")), ), match: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policyId: S.optional(S.NullOr(S.String).pipe(T.Body("policy_id"))), precedence: S.optional(S.NullOr(S.Number)), registerInterfaceIpWithDns: S.optional( S.NullOr(S.Boolean).pipe(T.Body("register_interface_ip_with_dns")), ), sccmVpnBoundarySupport: S.optional( S.NullOr(S.Boolean).pipe(T.Body("sccm_vpn_boundary_support")), ), serviceModeV2: S.optional( S.NullOr(DevicesPoliciesCustomCreateResponseServiceModeV2).pipe( T.Body("service_mode_v2"), ), ), supportUrl: S.optional(S.NullOr(S.String).pipe(T.Body("support_url"))), switchLocked: S.optional(S.NullOr(S.Boolean).pipe(T.Body("switch_locked"))), targetTests: S.optional( S.NullOr(DevicesPoliciesCustomGetResponseTargetTestsList).pipe( T.Body("target_tests"), ), ), tunnelProtocol: S.optional( S.NullOr(S.String).pipe(T.Body("tunnel_protocol")), ), virtualNetworks: S.optional( S.NullOr(DevicesPoliciesCustomGetResponseVirtualNetworks).pipe( T.Body("virtual_networks"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyCustomResponse", }) as any as S.Schema; export interface GetDevicePolicyCustomExcludeRequest { accountId: string; policyId: string; } export const GetDevicePolicyCustomExcludeRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), policyId: S.String.pipe(T.Label("policy_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/policy/{policy_id}/exclude", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyCustomExcludeRequest", }) as any as S.Schema; export type DevicesPoliciesCustomExcludesGetResultItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export const DevicesPoliciesCustomExcludesGetResultItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export type DevicesPoliciesCustomExcludesGetResultItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomExcludesGetResultItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export type DevicesPoliciesCustomExcludesGetResultItem = | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomExcludesGetResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomExcludesGetResultList = Array; export const DevicesPoliciesCustomExcludesGetResultList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomExcludesGetResultItem, ) as any as S.Schema; export interface GetDevicePolicyCustomExcludeResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPoliciesCustomExcludesGetResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const GetDevicePolicyCustomExcludeResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: DevicesPoliciesCustomExcludesGetResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyCustomExcludeResponse", }) as any as S.Schema; export interface GetDevicePolicyCustomFallbackDomainRequest { accountId: string; policyId: string; } export const GetDevicePolicyCustomFallbackDomainRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), policyId: S.String.pipe(T.Label("policy_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/policy/{policy_id}/fallback_domains", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyCustomFallbackDomainRequest", }) as any as S.Schema; export type DevicesPoliciesCustomFallbackDomainsGetResultItemDnsServerList = Array; export const DevicesPoliciesCustomFallbackDomainsGetResultItemDnsServerList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomFallbackDomainsGetResultItem { /** The domain suffix to match when resolving locally. */ suffix: string; /** A description of the fallback domain, displayed in the client UI. */ description?: string | null; /** A list of IP addresses to handle domain resolution. */ dnsServer?: DevicesPoliciesCustomFallbackDomainsGetResultItemDnsServerList | null; } export const DevicesPoliciesCustomFallbackDomainsGetResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ suffix: S.String, description: S.optional(S.NullOr(S.String)), dnsServer: S.optional( S.NullOr( DevicesPoliciesCustomFallbackDomainsGetResultItemDnsServerList, ).pipe(T.Body("dns_server")), ), }), ).annotate({ identifier: "DevicesPoliciesCustomFallbackDomainsGetResultItem", }) as any as S.Schema; export type DevicesPoliciesCustomFallbackDomainsGetResultList = Array; export const DevicesPoliciesCustomFallbackDomainsGetResultList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomFallbackDomainsGetResultItem, ) as any as S.Schema; export interface GetDevicePolicyCustomFallbackDomainResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPoliciesCustomFallbackDomainsGetResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const GetDevicePolicyCustomFallbackDomainResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesPoliciesCustomFallbackDomainsGetResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyCustomFallbackDomainResponse", }) as any as S.Schema; export interface GetDevicePolicyCustomIncludeRequest { accountId: string; policyId: string; } export const GetDevicePolicyCustomIncludeRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), policyId: S.String.pipe(T.Label("policy_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/policy/{policy_id}/include", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyCustomIncludeRequest", }) as any as S.Schema; export type DevicesPoliciesCustomIncludesGetResultItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export const DevicesPoliciesCustomIncludesGetResultItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export type DevicesPoliciesCustomIncludesGetResultItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomIncludesGetResultItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export type DevicesPoliciesCustomIncludesGetResultItem = | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomIncludesGetResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomIncludesGetResultList = Array; export const DevicesPoliciesCustomIncludesGetResultList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomIncludesGetResultItem, ) as any as S.Schema; export interface GetDevicePolicyCustomIncludeResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPoliciesCustomIncludesGetResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const GetDevicePolicyCustomIncludeResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: DevicesPoliciesCustomIncludesGetResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyCustomIncludeResponse", }) as any as S.Schema; export interface GetDevicePolicyDefaultRequest { accountId: string; } export const GetDevicePolicyDefaultRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/policy", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyDefaultRequest", }) as any as S.Schema; export type DevicesPoliciesDefaultGetResponseDnsSearchSuffixesItem = DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem; export const DevicesPoliciesDefaultGetResponseDnsSearchSuffixesItem = DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem; export type DevicesPoliciesDefaultGetResponseDnsSearchSuffixesList = Array; export const DevicesPoliciesDefaultGetResponseDnsSearchSuffixesList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem, ) as any as S.Schema; export type DevicesPoliciesDefaultGetResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export const DevicesPoliciesDefaultGetResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export type DevicesPoliciesDefaultGetResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesDefaultGetResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export type DevicesPoliciesDefaultGetResponseExcludeItem = | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesDefaultGetResponseExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesDefaultGetResponseExcludeList = Array; export const DevicesPoliciesDefaultGetResponseExcludeList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultGetResponseExcludeItem, ) as any as S.Schema; export type DevicesPoliciesDefaultGetResponseFallbackDomainsItemDnsServerList = Array; export const DevicesPoliciesDefaultGetResponseFallbackDomainsItemDnsServerList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesDefaultGetResponseFallbackDomainsItem { /** The domain suffix to match when resolving locally. */ suffix: string; /** A description of the fallback domain, displayed in the client UI. */ description?: string | null; /** A list of IP addresses to handle domain resolution. */ dnsServer?: DevicesPoliciesDefaultGetResponseFallbackDomainsItemDnsServerList | null; } export const DevicesPoliciesDefaultGetResponseFallbackDomainsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ suffix: S.String, description: S.optional(S.NullOr(S.String)), dnsServer: S.optional( S.NullOr( DevicesPoliciesDefaultGetResponseFallbackDomainsItemDnsServerList, ).pipe(T.Body("dns_server")), ), }), ).annotate({ identifier: "DevicesPoliciesDefaultGetResponseFallbackDomainsItem", }) as any as S.Schema; export type DevicesPoliciesDefaultGetResponseFallbackDomainsList = Array; export const DevicesPoliciesDefaultGetResponseFallbackDomainsList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultGetResponseFallbackDomainsItem, ) as any as S.Schema; export type DevicesPoliciesDefaultGetResponseGlobalAccelerationApiEndpointsList = Array; export const DevicesPoliciesDefaultGetResponseGlobalAccelerationApiEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesDefaultGetResponseGlobalAccelerationMasqueEndpointsList = Array; export const DevicesPoliciesDefaultGetResponseGlobalAccelerationMasqueEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesDefaultGetResponseGlobalAccelerationWireguardEndpointsList = Array; export const DevicesPoliciesDefaultGetResponseGlobalAccelerationWireguardEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesDefaultGetResponseGlobalAcceleration { /** IP:port entries for the API endpoints. */ apiEndpoints: DevicesPoliciesDefaultGetResponseGlobalAccelerationApiEndpointsList; /** Global acceleration settings are used only when "enabled". */ enabled: boolean; /** IP:port entries for the MASQUE tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ masqueEndpoints: DevicesPoliciesDefaultGetResponseGlobalAccelerationMasqueEndpointsList; /** IP:port entries for the WireGuard tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ wireguardEndpoints: DevicesPoliciesDefaultGetResponseGlobalAccelerationWireguardEndpointsList; } export const DevicesPoliciesDefaultGetResponseGlobalAcceleration = /*@__PURE__*/ S.suspend(() => S.Struct({ apiEndpoints: DevicesPoliciesDefaultGetResponseGlobalAccelerationApiEndpointsList.pipe( T.Body("api_endpoints"), ), enabled: S.Boolean, masqueEndpoints: DevicesPoliciesDefaultGetResponseGlobalAccelerationMasqueEndpointsList.pipe( T.Body("masque_endpoints"), ), wireguardEndpoints: DevicesPoliciesDefaultGetResponseGlobalAccelerationWireguardEndpointsList.pipe( T.Body("wireguard_endpoints"), ), }), ).annotate({ identifier: "DevicesPoliciesDefaultGetResponseGlobalAcceleration", }) as any as S.Schema; export type DevicesPoliciesDefaultGetResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export const DevicesPoliciesDefaultGetResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export type DevicesPoliciesDefaultGetResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesDefaultGetResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export type DevicesPoliciesDefaultGetResponseIncludeItem = | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesDefaultGetResponseIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesDefaultGetResponseIncludeList = Array; export const DevicesPoliciesDefaultGetResponseIncludeList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultGetResponseIncludeItem, ) as any as S.Schema; export type DevicesPoliciesDefaultGetResponseServiceModeV2 = DevicesPoliciesCustomCreateResponseServiceModeV2; export const DevicesPoliciesDefaultGetResponseServiceModeV2 = DevicesPoliciesCustomCreateResponseServiceModeV2; export type DevicesPoliciesDefaultGetResponseVirtualNetworksAllowedList = Array; export const DevicesPoliciesDefaultGetResponseVirtualNetworksAllowedList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesDefaultGetResponseVirtualNetworks { /** List of virtual network IDs the device is allowed to access. When virtual_networks is set, at least one entry is required. */ allowed: DevicesPoliciesDefaultGetResponseVirtualNetworksAllowedList; /** The default virtual network ID. Must be included in the `allowed` list. */ default: string; } export const DevicesPoliciesDefaultGetResponseVirtualNetworks = /*@__PURE__*/ S.suspend(() => S.Struct({ allowed: DevicesPoliciesDefaultGetResponseVirtualNetworksAllowedList, default: S.String, }), ).annotate({ identifier: "DevicesPoliciesDefaultGetResponseVirtualNetworks", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDevicePolicyDefaultResponse { /** Whether to allow the user to switch WARP between modes. */ allowModeSwitch?: boolean | null; /** Whether to receive update notifications when a new version of the client is available. */ allowUpdates?: boolean | null; /** Whether to allow devices to leave the organization. */ allowedToLeave?: boolean | null; /** The amount of time in seconds to reconnect after having been disabled. */ autoConnect?: number | null; /** Turn on the captive portal after the specified amount of time. */ captivePortal?: number | null; /** Whether the policy will be applied to matching devices. */ default?: boolean | null; /** If the `dns_server` field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to `true`. */ disableAutoFallback?: boolean | null; /** List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear. */ dnsSearchSuffixes?: DevicesPoliciesDefaultGetResponseDnsSearchSuffixesList | null; /** Whether the policy will be applied to matching devices. */ enabled?: boolean | null; /** List of routes excluded in the WARP client's tunnel. */ exclude?: DevicesPoliciesDefaultGetResponseExcludeList | null; /** Whether to add Microsoft IPs to Split Tunnel exclusions. */ excludeOfficeIps?: boolean | null; fallbackDomains?: DevicesPoliciesDefaultGetResponseFallbackDomainsList | null; gatewayUniqueId?: string | null; /** Global Acceleration settings for China. When configured, WARP clients connect to the Global Accelerator addresses instead of the default ones. Please contact your account representative to enable this feature on your account. See https://developers.cloudflare.com/china-network/concepts/global-acceleration/. */ globalAcceleration?: DevicesPoliciesDefaultGetResponseGlobalAcceleration | null; /** List of routes included in the WARP client's tunnel. */ include?: DevicesPoliciesDefaultGetResponseIncludeList | null; policyId?: string | null; /** Determines if the operating system will register WARP's local interface IP with your on-premises DNS server. */ registerInterfaceIpWithDns?: boolean | null; /** Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only). */ sccmVpnBoundarySupport?: boolean | null; serviceModeV2?: DevicesPoliciesCustomCreateResponseServiceModeV2 | null; /** The URL to launch when the Send Feedback button is clicked. */ supportUrl?: string | null; /** Whether to allow the user to turn off the WARP switch and disconnect the client. */ switchLocked?: boolean | null; /** Determines which tunnel protocol to use. */ tunnelProtocol?: string | null; /** Virtual network access settings for the device. */ virtualNetworks?: DevicesPoliciesDefaultGetResponseVirtualNetworks | null; } export const GetDevicePolicyDefaultResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ allowModeSwitch: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_mode_switch")), ), allowUpdates: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_updates"))), allowedToLeave: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allowed_to_leave")), ), autoConnect: S.optional(S.NullOr(S.Number).pipe(T.Body("auto_connect"))), captivePortal: S.optional( S.NullOr(S.Number).pipe(T.Body("captive_portal")), ), default: S.optional(S.NullOr(S.Boolean)), disableAutoFallback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("disable_auto_fallback")), ), dnsSearchSuffixes: S.optional( S.NullOr(DevicesPoliciesDefaultGetResponseDnsSearchSuffixesList).pipe( T.Body("dns_search_suffixes"), ), ), enabled: S.optional(S.NullOr(S.Boolean)), exclude: S.optional(S.NullOr(DevicesPoliciesDefaultGetResponseExcludeList)), excludeOfficeIps: S.optional( S.NullOr(S.Boolean).pipe(T.Body("exclude_office_ips")), ), fallbackDomains: S.optional( S.NullOr(DevicesPoliciesDefaultGetResponseFallbackDomainsList).pipe( T.Body("fallback_domains"), ), ), gatewayUniqueId: S.optional( S.NullOr(S.String).pipe(T.Body("gateway_unique_id")), ), globalAcceleration: S.optional( S.NullOr(DevicesPoliciesDefaultGetResponseGlobalAcceleration).pipe( T.Body("global_acceleration"), ), ), include: S.optional(S.NullOr(DevicesPoliciesDefaultGetResponseIncludeList)), policyId: S.optional(S.NullOr(S.String).pipe(T.Body("policy_id"))), registerInterfaceIpWithDns: S.optional( S.NullOr(S.Boolean).pipe(T.Body("register_interface_ip_with_dns")), ), sccmVpnBoundarySupport: S.optional( S.NullOr(S.Boolean).pipe(T.Body("sccm_vpn_boundary_support")), ), serviceModeV2: S.optional( S.NullOr(DevicesPoliciesCustomCreateResponseServiceModeV2).pipe( T.Body("service_mode_v2"), ), ), supportUrl: S.optional(S.NullOr(S.String).pipe(T.Body("support_url"))), switchLocked: S.optional(S.NullOr(S.Boolean).pipe(T.Body("switch_locked"))), tunnelProtocol: S.optional( S.NullOr(S.String).pipe(T.Body("tunnel_protocol")), ), virtualNetworks: S.optional( S.NullOr(DevicesPoliciesDefaultGetResponseVirtualNetworks).pipe( T.Body("virtual_networks"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyDefaultResponse", }) as any as S.Schema; export interface GetDevicePolicyDefaultCertificateRequest { zoneId: string; } export const GetDevicePolicyDefaultCertificateRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/devices/policy/certificates", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyDefaultCertificateRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDevicePolicyDefaultCertificateResponse { /** The current status of the device policy certificate provisioning feature for WARP clients. */ enabled: boolean; } export const GetDevicePolicyDefaultCertificateResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyDefaultCertificateResponse", }) as any as S.Schema; export interface GetDevicePolicyDefaultExcludeRequest { accountId: string; } export const GetDevicePolicyDefaultExcludeRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/policy/exclude", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyDefaultExcludeRequest", }) as any as S.Schema; export type DevicesPoliciesDefaultExcludesGetResultItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export const DevicesPoliciesDefaultExcludesGetResultItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export type DevicesPoliciesDefaultExcludesGetResultItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesDefaultExcludesGetResultItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export type DevicesPoliciesDefaultExcludesGetResultItem = | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesDefaultExcludesGetResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesDefaultExcludesGetResultList = Array; export const DevicesPoliciesDefaultExcludesGetResultList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultExcludesGetResultItem, ) as any as S.Schema; export interface GetDevicePolicyDefaultExcludeResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPoliciesDefaultExcludesGetResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const GetDevicePolicyDefaultExcludeResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: DevicesPoliciesDefaultExcludesGetResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyDefaultExcludeResponse", }) as any as S.Schema; export interface GetDevicePolicyDefaultFallbackDomainRequest { accountId: string; } export const GetDevicePolicyDefaultFallbackDomainRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/policy/fallback_domains", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyDefaultFallbackDomainRequest", }) as any as S.Schema; export type DevicesPoliciesDefaultFallbackDomainsGetResultItemDnsServerList = Array; export const DevicesPoliciesDefaultFallbackDomainsGetResultItemDnsServerList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesDefaultFallbackDomainsGetResultItem { /** The domain suffix to match when resolving locally. */ suffix: string; /** A description of the fallback domain, displayed in the client UI. */ description?: string | null; /** A list of IP addresses to handle domain resolution. */ dnsServer?: DevicesPoliciesDefaultFallbackDomainsGetResultItemDnsServerList | null; } export const DevicesPoliciesDefaultFallbackDomainsGetResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ suffix: S.String, description: S.optional(S.NullOr(S.String)), dnsServer: S.optional( S.NullOr( DevicesPoliciesDefaultFallbackDomainsGetResultItemDnsServerList, ).pipe(T.Body("dns_server")), ), }), ).annotate({ identifier: "DevicesPoliciesDefaultFallbackDomainsGetResultItem", }) as any as S.Schema; export type DevicesPoliciesDefaultFallbackDomainsGetResultList = Array; export const DevicesPoliciesDefaultFallbackDomainsGetResultList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultFallbackDomainsGetResultItem, ) as any as S.Schema; export interface GetDevicePolicyDefaultFallbackDomainResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPoliciesDefaultFallbackDomainsGetResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const GetDevicePolicyDefaultFallbackDomainResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesPoliciesDefaultFallbackDomainsGetResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyDefaultFallbackDomainResponse", }) as any as S.Schema; export interface GetDevicePolicyDefaultIncludeRequest { accountId: string; } export const GetDevicePolicyDefaultIncludeRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/policy/include", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyDefaultIncludeRequest", }) as any as S.Schema; export type DevicesPoliciesDefaultIncludesGetResultItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export const DevicesPoliciesDefaultIncludesGetResultItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export type DevicesPoliciesDefaultIncludesGetResultItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesDefaultIncludesGetResultItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export type DevicesPoliciesDefaultIncludesGetResultItem = | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesDefaultIncludesGetResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesDefaultIncludesGetResultList = Array; export const DevicesPoliciesDefaultIncludesGetResultList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultIncludesGetResultItem, ) as any as S.Schema; export interface GetDevicePolicyDefaultIncludeResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPoliciesDefaultIncludesGetResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const GetDevicePolicyDefaultIncludeResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: DevicesPoliciesDefaultIncludesGetResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePolicyDefaultIncludeResponse", }) as any as S.Schema; export interface GetDevicePostureRequest { accountId: string; /** API UUID. */ ruleId: string; } export const GetDevicePostureRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ruleId: S.String.pipe(T.Label("rule_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/posture/{rule_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePostureRequest", }) as any as S.Schema; export type DevicesPostureGetResponseInputFileInputOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureGetResponseInputFileInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseInputFileInput { /** Operating system. */ operatingSystem: DevicesPostureGetResponseInputFileInputOperatingSystem; /** File path. */ path: string; /** Whether or not file exists. */ exists?: boolean | null; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureGetResponseInputFileInput = /*@__PURE__*/ S.suspend( () => S.Struct({ operatingSystem: DevicesPostureGetResponseInputFileInputOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, exists: S.optional(S.NullOr(S.Boolean)), sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureGetResponseInputFileInput", }) as any as S.Schema; export type DevicesPostureGetResponseInputUniqueClientIDInputOperatingSystem = | "android" | "ios" | "chromeos"; export const DevicesPostureGetResponseInputUniqueClientIDInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseInputUniqueClientIDInput { /** List ID. */ id: string; /** Operating System. */ operatingSystem: DevicesPostureGetResponseInputUniqueClientIDInputOperatingSystem; } export const DevicesPostureGetResponseInputUniqueClientIDInput = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, operatingSystem: DevicesPostureGetResponseInputUniqueClientIDInputOperatingSystem.pipe( T.Body("operating_system"), ), }), ).annotate({ identifier: "DevicesPostureGetResponseInputUniqueClientIDInput", }) as any as S.Schema; export type DevicesPostureGetResponseInputDomainJoinedInputOperatingSystem = "windows"; export const DevicesPostureGetResponseInputDomainJoinedInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseInputDomainJoinedInput { /** Operating System. */ operatingSystem: DevicesPostureGetResponseInputDomainJoinedInputOperatingSystem; /** Domain. */ domain?: string | null; } export const DevicesPostureGetResponseInputDomainJoinedInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureGetResponseInputDomainJoinedInputOperatingSystem.pipe( T.Body("operating_system"), ), domain: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureGetResponseInputDomainJoinedInput", }) as any as S.Schema; export type DevicesPostureGetResponseInputOSVersionInputOperatingSystem = "windows"; export const DevicesPostureGetResponseInputOSVersionInputOperatingSystem = /*@__PURE__*/ S.String; export type DevicesPostureGetResponseInputOSVersionInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureGetResponseInputOSVersionInputOperator = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseInputOSVersionInput { /** Operating System. */ operatingSystem: DevicesPostureGetResponseInputOSVersionInputOperatingSystem; /** Operator. */ operator: DevicesPostureGetResponseInputOSVersionInputOperator; /** Version of OS. */ version: string; /** Operating System Distribution Name (linux only). */ osDistroName?: string | null; /** Version of OS Distribution (linux only). */ osDistroRevision?: string | null; /** Additional operating system version details. For Windows, the UBR (Update Build Revision). For Mac or iOS, the Product Version Extra. For Linux, the distribution name and version. */ osVersionExtra?: string | null; } export const DevicesPostureGetResponseInputOSVersionInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureGetResponseInputOSVersionInputOperatingSystem.pipe( T.Body("operating_system"), ), operator: DevicesPostureGetResponseInputOSVersionInputOperator, version: S.String, osDistroName: S.optional( S.NullOr(S.String).pipe(T.Body("os_distro_name")), ), osDistroRevision: S.optional( S.NullOr(S.String).pipe(T.Body("os_distro_revision")), ), osVersionExtra: S.optional( S.NullOr(S.String).pipe(T.Body("os_version_extra")), ), }), ).annotate({ identifier: "DevicesPostureGetResponseInputOSVersionInput", }) as any as S.Schema; export type DevicesPostureGetResponseInputFirewallInputOperatingSystem = | "windows" | "mac"; export const DevicesPostureGetResponseInputFirewallInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseInputFirewallInput { /** Enabled. */ enabled: boolean; /** Operating System. */ operatingSystem: DevicesPostureGetResponseInputFirewallInputOperatingSystem; } export const DevicesPostureGetResponseInputFirewallInput = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, operatingSystem: DevicesPostureGetResponseInputFirewallInputOperatingSystem.pipe( T.Body("operating_system"), ), }), ).annotate({ identifier: "DevicesPostureGetResponseInputFirewallInput", }) as any as S.Schema; export type DevicesPostureGetResponseInputSentineloneInputOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureGetResponseInputSentineloneInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseInputSentineloneInput { /** Operating system. */ operatingSystem: DevicesPostureGetResponseInputSentineloneInputOperatingSystem; /** File path. */ path: string; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureGetResponseInputSentineloneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureGetResponseInputSentineloneInputOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureGetResponseInputSentineloneInput", }) as any as S.Schema; export type DevicesPostureGetResponseInputTeamsDevicesCarbonblackInputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureGetResponseInputTeamsDevicesCarbonblackInputRequestOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseInputTeamsDevicesCarbonblackInputRequest { /** Operating system. */ operatingSystem: DevicesPostureGetResponseInputTeamsDevicesCarbonblackInputRequestOperatingSystem; /** File path. */ path: string; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureGetResponseInputTeamsDevicesCarbonblackInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureGetResponseInputTeamsDevicesCarbonblackInputRequestOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureGetResponseInputTeamsDevicesCarbonblackInputRequest", }) as any as S.Schema; export type DevicesPostureGetResponseInputTeamsDevicesAccessSerialNumberListInputRequest = DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest; export const DevicesPostureGetResponseInputTeamsDevicesAccessSerialNumberListInputRequest = DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest; export type DevicesPostureGetResponseInputDiskEncryptionInputCheckDisksList = Array; export const DevicesPostureGetResponseInputDiskEncryptionInputCheckDisksList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export interface DevicesPostureGetResponseInputDiskEncryptionInput { /** List of volume names to be checked for encryption. */ checkDisks?: DevicesPostureGetResponseInputDiskEncryptionInputCheckDisksList | null; /** Whether to check all disks for encryption. */ requireAll?: boolean | null; } export const DevicesPostureGetResponseInputDiskEncryptionInput = /*@__PURE__*/ S.suspend(() => S.Struct({ checkDisks: S.optional( S.NullOr( DevicesPostureGetResponseInputDiskEncryptionInputCheckDisksList, ), ), requireAll: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "DevicesPostureGetResponseInputDiskEncryptionInput", }) as any as S.Schema; export type DevicesPostureGetResponseInputTeamsDevicesApplicationInputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureGetResponseInputTeamsDevicesApplicationInputRequestOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseInputTeamsDevicesApplicationInputRequest { /** Operating system. */ operatingSystem: DevicesPostureGetResponseInputTeamsDevicesApplicationInputRequestOperatingSystem; /** Path for the application. */ path: string; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureGetResponseInputTeamsDevicesApplicationInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureGetResponseInputTeamsDevicesApplicationInputRequestOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureGetResponseInputTeamsDevicesApplicationInputRequest", }) as any as S.Schema; export type DevicesPostureGetResponseInputClientCertificateInput = DevicesPostureCreateRequestInputClientCertificateInput; export const DevicesPostureGetResponseInputClientCertificateInput = DevicesPostureCreateRequestInputClientCertificateInput; export type DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem = /*@__PURE__*/ S.String; export type DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem = | "clientAuth" | "emailProtection"; export const DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem = /*@__PURE__*/ S.String; export type DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList = Array; export const DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList = /*@__PURE__*/ S.Array( DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem, ) as any as S.Schema; export type DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList = Array; export const DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem = | "system" | "user"; export const DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem = /*@__PURE__*/ S.String; export type DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList = Array; export const DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList = /*@__PURE__*/ S.Array( DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem, ) as any as S.Schema; export interface DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocations { /** List of paths to check for client certificate on linux. */ paths?: DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList | null; /** List of trust stores to check for client certificate. */ trustStores?: DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList | null; } export const DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocations = /*@__PURE__*/ S.suspend(() => S.Struct({ paths: S.optional( S.NullOr( DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList, ), ), trustStores: S.optional( S.NullOr( DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList, ).pipe(T.Body("trust_stores")), ), }), ).annotate({ identifier: "DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocations", }) as any as S.Schema; export type DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList = Array; export const DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequest { /** UUID of Cloudflare managed certificate. */ certificateId: string; /** Confirm the certificate was not imported from another device. We recommend keeping this enabled unless the certificate was deployed without a private key. */ checkPrivateKey: boolean; /** Operating system. */ operatingSystem: DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem; /** Certificate Common Name. This may include one or more variables in the ${ } notation. Only ${serial_number} and ${hostname} are valid variables. */ cn?: string | null; /** List of values indicating purposes for which the certificate public key can be used. */ extendedKeyUsage?: DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList | null; locations?: DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocations | null; /** List of certificate Subject Alternative Names. */ subjectAlternativeNames?: DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList | null; } export const DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ certificateId: S.String.pipe(T.Body("certificate_id")), checkPrivateKey: S.Boolean.pipe(T.Body("check_private_key")), operatingSystem: DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem.pipe( T.Body("operating_system"), ), cn: S.optional(S.NullOr(S.String)), extendedKeyUsage: S.optional( S.NullOr( DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList, ).pipe(T.Body("extended_key_usage")), ), locations: S.optional( S.NullOr( DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestLocations, ), ), subjectAlternativeNames: S.optional( S.NullOr( DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList, ).pipe(T.Body("subject_alternative_names")), ), }), ).annotate({ identifier: "DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequest", }) as any as S.Schema; export type DevicesPostureGetResponseInputTeamsDevicesAntivirusInputRequest = DevicesPostureCreateResponseInputTeamsDevicesAntivirusInputRequest; export const DevicesPostureGetResponseInputTeamsDevicesAntivirusInputRequest = DevicesPostureCreateResponseInputTeamsDevicesAntivirusInputRequest; export type DevicesPostureGetResponseInputWorkspaceOneInputComplianceStatus = | "compliant" | "noncompliant" | "unknown"; export const DevicesPostureGetResponseInputWorkspaceOneInputComplianceStatus = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseInputWorkspaceOneInput { /** Compliance Status. */ complianceStatus: DevicesPostureGetResponseInputWorkspaceOneInputComplianceStatus; /** Posture Integration ID. */ connectionId: string; } export const DevicesPostureGetResponseInputWorkspaceOneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ complianceStatus: DevicesPostureGetResponseInputWorkspaceOneInputComplianceStatus.pipe( T.Body("compliance_status"), ), connectionId: S.String.pipe(T.Body("connection_id")), }), ).annotate({ identifier: "DevicesPostureGetResponseInputWorkspaceOneInput", }) as any as S.Schema; export type DevicesPostureGetResponseInputCrowdstrikeInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureGetResponseInputCrowdstrikeInputOperator = /*@__PURE__*/ S.String; export type DevicesPostureGetResponseInputCrowdstrikeInputState = | "online" | "offline" | "unknown"; export const DevicesPostureGetResponseInputCrowdstrikeInputState = /*@__PURE__*/ S.String; export type DevicesPostureGetResponseInputCrowdstrikeInputVersionOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureGetResponseInputCrowdstrikeInputVersionOperator = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseInputCrowdstrikeInput { /** Posture Integration ID. */ connectionId: string; /** For more details on last seen, please refer to the Crowdstrike documentation. */ lastSeen?: string | null; /** Operator. */ operator?: DevicesPostureGetResponseInputCrowdstrikeInputOperator | null; /** Os Version. */ os?: string | null; /** Overall. */ overall?: string | null; /** SensorConfig. */ sensorConfig?: string | null; /** For more details on state, please refer to the Crowdstrike documentation. */ state?: DevicesPostureGetResponseInputCrowdstrikeInputState | null; /** Version. */ version?: string | null; /** Version Operator. */ versionOperator?: DevicesPostureGetResponseInputCrowdstrikeInputVersionOperator | null; } export const DevicesPostureGetResponseInputCrowdstrikeInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), lastSeen: S.optional(S.NullOr(S.String).pipe(T.Body("last_seen"))), operator: S.optional( S.NullOr(DevicesPostureGetResponseInputCrowdstrikeInputOperator), ), os: S.optional(S.NullOr(S.String)), overall: S.optional(S.NullOr(S.String)), sensorConfig: S.optional( S.NullOr(S.String).pipe(T.Body("sensor_config")), ), state: S.optional( S.NullOr(DevicesPostureGetResponseInputCrowdstrikeInputState), ), version: S.optional(S.NullOr(S.String)), versionOperator: S.optional( S.NullOr(DevicesPostureGetResponseInputCrowdstrikeInputVersionOperator), ), }), ).annotate({ identifier: "DevicesPostureGetResponseInputCrowdstrikeInput", }) as any as S.Schema; export type DevicesPostureGetResponseInputIntuneInputComplianceStatus = | "compliant" | "noncompliant" | "unknown" | "notapplicable" | "ingraceperiod" | "error"; export const DevicesPostureGetResponseInputIntuneInputComplianceStatus = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseInputIntuneInput { /** Compliance Status. */ complianceStatus: DevicesPostureGetResponseInputIntuneInputComplianceStatus; /** Posture Integration ID. */ connectionId: string; } export const DevicesPostureGetResponseInputIntuneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ complianceStatus: DevicesPostureGetResponseInputIntuneInputComplianceStatus.pipe( T.Body("compliance_status"), ), connectionId: S.String.pipe(T.Body("connection_id")), }), ).annotate({ identifier: "DevicesPostureGetResponseInputIntuneInput", }) as any as S.Schema; export type DevicesPostureGetResponseInputKolideInputAuthStateItem = | "Good" | "Notified" | "Will Block" | "Blocked"; export const DevicesPostureGetResponseInputKolideInputAuthStateItem = /*@__PURE__*/ S.String; export type DevicesPostureGetResponseInputKolideInputAuthStateList = Array; export const DevicesPostureGetResponseInputKolideInputAuthStateList = /*@__PURE__*/ S.Array( DevicesPostureGetResponseInputKolideInputAuthStateItem, ) as any as S.Schema; export type DevicesPostureGetResponseInputKolideInputCountOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureGetResponseInputKolideInputCountOperator = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseInputKolideInput { /** Posture Integration ID. */ connectionId: string; /** The set of Kolide device authentication states that pass the posture check. Device must match one of the specified states. */ authState?: DevicesPostureGetResponseInputKolideInputAuthStateList | null; /** Count Operator. */ countOperator?: DevicesPostureGetResponseInputKolideInputCountOperator | null; /** The Number of Issues. */ issueCount?: string | null; } export const DevicesPostureGetResponseInputKolideInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), authState: S.optional( S.NullOr(DevicesPostureGetResponseInputKolideInputAuthStateList).pipe( T.Body("auth_state"), ), ), countOperator: S.optional( S.NullOr(DevicesPostureGetResponseInputKolideInputCountOperator), ), issueCount: S.optional(S.NullOr(S.String).pipe(T.Body("issue_count"))), }), ).annotate({ identifier: "DevicesPostureGetResponseInputKolideInput", }) as any as S.Schema; export type DevicesPostureGetResponseInputTaniumInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureGetResponseInputTaniumInputOperator = /*@__PURE__*/ S.String; export type DevicesPostureGetResponseInputTaniumInputRiskLevel = | "low" | "medium" | "high" | "critical"; export const DevicesPostureGetResponseInputTaniumInputRiskLevel = /*@__PURE__*/ S.String; export type DevicesPostureGetResponseInputTaniumInputScoreOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureGetResponseInputTaniumInputScoreOperator = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseInputTaniumInput { /** Posture Integration ID. */ connectionId: string; /** For more details on eid last seen, refer to the Tanium documentation. */ eidLastSeen?: string | null; /** Operator to evaluate risk_level or eid_last_seen. */ operator?: DevicesPostureGetResponseInputTaniumInputOperator | null; /** For more details on risk level, refer to the Tanium documentation. */ riskLevel?: DevicesPostureGetResponseInputTaniumInputRiskLevel | null; /** Score Operator. */ scoreOperator?: DevicesPostureGetResponseInputTaniumInputScoreOperator | null; /** For more details on total score, refer to the Tanium documentation. */ totalScore?: number | null; } export const DevicesPostureGetResponseInputTaniumInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), eidLastSeen: S.optional(S.NullOr(S.String).pipe(T.Body("eid_last_seen"))), operator: S.optional( S.NullOr(DevicesPostureGetResponseInputTaniumInputOperator), ), riskLevel: S.optional( S.NullOr(DevicesPostureGetResponseInputTaniumInputRiskLevel).pipe( T.Body("risk_level"), ), ), scoreOperator: S.optional( S.NullOr(DevicesPostureGetResponseInputTaniumInputScoreOperator), ), totalScore: S.optional(S.NullOr(S.Number).pipe(T.Body("total_score"))), }), ).annotate({ identifier: "DevicesPostureGetResponseInputTaniumInput", }) as any as S.Schema; export type DevicesPostureGetResponseInputSentineloneS2sInputNetworkStatus = | "connected" | "disconnected" | "disconnecting" | "connecting"; export const DevicesPostureGetResponseInputSentineloneS2sInputNetworkStatus = /*@__PURE__*/ S.String; export type DevicesPostureGetResponseInputSentineloneS2sInputOperationalState = | "na" | "partially_disabled" | "auto_fully_disabled" | "fully_disabled" | "auto_partially_disabled" | "disabled_error" | "db_corruption"; export const DevicesPostureGetResponseInputSentineloneS2sInputOperationalState = /*@__PURE__*/ S.String; export type DevicesPostureGetResponseInputSentineloneS2sInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureGetResponseInputSentineloneS2sInputOperator = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseInputSentineloneS2sInput { /** Posture Integration ID. */ connectionId: string; /** The Number of active threats. */ activeThreats?: number | null; /** Whether device is infected. */ infected?: boolean | null; /** Whether device is active. */ isActive?: boolean | null; /** Network status of device. */ networkStatus?: DevicesPostureGetResponseInputSentineloneS2sInputNetworkStatus | null; /** Agent operational state. */ operationalState?: DevicesPostureGetResponseInputSentineloneS2sInputOperationalState | null; /** Operator. */ operator?: DevicesPostureGetResponseInputSentineloneS2sInputOperator | null; } export const DevicesPostureGetResponseInputSentineloneS2sInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), activeThreats: S.optional( S.NullOr(S.Number).pipe(T.Body("active_threats")), ), infected: S.optional(S.NullOr(S.Boolean)), isActive: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_active"))), networkStatus: S.optional( S.NullOr( DevicesPostureGetResponseInputSentineloneS2sInputNetworkStatus, ).pipe(T.Body("network_status")), ), operationalState: S.optional( S.NullOr( DevicesPostureGetResponseInputSentineloneS2sInputOperationalState, ).pipe(T.Body("operational_state")), ), operator: S.optional( S.NullOr(DevicesPostureGetResponseInputSentineloneS2sInputOperator), ), }), ).annotate({ identifier: "DevicesPostureGetResponseInputSentineloneS2sInput", }) as any as S.Schema; export type DevicesPostureGetResponseInputTeamsDevicesCustomS2sInputRequestOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureGetResponseInputTeamsDevicesCustomS2sInputRequestOperator = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseInputTeamsDevicesCustomS2sInputRequest { /** Posture Integration ID. */ connectionId: string; /** Operator. */ operator: DevicesPostureGetResponseInputTeamsDevicesCustomS2sInputRequestOperator; /** A value between 0-100 assigned to devices set by the 3rd party posture provider. */ score: number; } export const DevicesPostureGetResponseInputTeamsDevicesCustomS2sInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), operator: DevicesPostureGetResponseInputTeamsDevicesCustomS2sInputRequestOperator, score: S.Number, }), ).annotate({ identifier: "DevicesPostureGetResponseInputTeamsDevicesCustomS2sInputRequest", }) as any as S.Schema; export type DevicesPostureGetResponseInput = | DevicesPostureGetResponseInputFileInput | DevicesPostureGetResponseInputUniqueClientIDInput | DevicesPostureGetResponseInputDomainJoinedInput | DevicesPostureGetResponseInputOSVersionInput | DevicesPostureGetResponseInputFirewallInput | DevicesPostureGetResponseInputSentineloneInput | DevicesPostureGetResponseInputTeamsDevicesCarbonblackInputRequest | DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest | DevicesPostureGetResponseInputDiskEncryptionInput | DevicesPostureGetResponseInputTeamsDevicesApplicationInputRequest | DevicesPostureCreateRequestInputClientCertificateInput | DevicesPostureGetResponseInputTeamsDevicesClientCertificateV2InputRequest | DevicesPostureCreateResponseInputTeamsDevicesAntivirusInputRequest | DevicesPostureGetResponseInputWorkspaceOneInput | DevicesPostureGetResponseInputCrowdstrikeInput | DevicesPostureGetResponseInputIntuneInput | DevicesPostureGetResponseInputKolideInput | DevicesPostureGetResponseInputTaniumInput | DevicesPostureGetResponseInputSentineloneS2sInput | DevicesPostureGetResponseInputTeamsDevicesCustomS2sInputRequest; export const DevicesPostureGetResponseInput = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["operatingSystem", "path", "exists", "sha256", "thumbprint"], ["id", "operatingSystem"], ["operatingSystem", "domain"], [ "operatingSystem", "operator", "version", "osDistroName", "osDistroRevision", "osVersionExtra", ], ["enabled", "operatingSystem"], ["operatingSystem", "path", "sha256", "thumbprint"], ["operatingSystem", "path", "sha256", "thumbprint"], ["id"], ["checkDisks", "requireAll"], ["operatingSystem", "path", "sha256", "thumbprint"], ["certificateId", "cn"], [ "certificateId", "checkPrivateKey", "operatingSystem", "cn", "extendedKeyUsage", "locations", "subjectAlternativeNames", ], ["updateWindowDays"], ["complianceStatus", "connectionId"], [ "connectionId", "lastSeen", "operator", "os", "overall", "sensorConfig", "state", "version", "versionOperator", ], ["complianceStatus", "connectionId"], ["connectionId", "authState", "countOperator", "issueCount"], [ "connectionId", "eidLastSeen", "operator", "riskLevel", "scoreOperator", "totalScore", ], [ "connectionId", "activeThreats", "infected", "isActive", "networkStatus", "operationalState", "operator", ], ["connectionId", "operator", "score"], ]), ); export type DevicesPostureGetResponseMatchItemPlatform = | "windows" | "mac" | "linux" | "android" | "ios" | "chromeos"; export const DevicesPostureGetResponseMatchItemPlatform = /*@__PURE__*/ S.String; export interface DevicesPostureGetResponseMatchItem { platform?: DevicesPostureGetResponseMatchItemPlatform | null; } export const DevicesPostureGetResponseMatchItem = /*@__PURE__*/ S.suspend(() => S.Struct({ platform: S.optional(S.NullOr(DevicesPostureGetResponseMatchItemPlatform)), }), ).annotate({ identifier: "DevicesPostureGetResponseMatchItem", }) as any as S.Schema; export type DevicesPostureGetResponseMatchList = Array; export const DevicesPostureGetResponseMatchList = /*@__PURE__*/ S.Array( DevicesPostureGetResponseMatchItem, ) as any as S.Schema; export type DevicesPostureGetResponseType = | "file" | "application" | "tanium" | "gateway" | "warp" | "disk_encryption" | "serial_number" | "sentinelone" | "carbonblack" | "firewall" | "os_version" | "domain_joined" | "client_certificate" | "client_certificate_v2" | "antivirus" | "unique_client_id" | "kolide" | "tanium_s2s" | "crowdstrike_s2s" | "intune" | "workspace_one" | "sentinelone_s2s" | "custom_s2s"; export const DevicesPostureGetResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDevicePostureResponse { /** API UUID. */ id?: string | null; /** The description of the device posture rule. */ description?: string | null; /** Sets the expiration time for a posture check result. If empty, the result remains valid until it is overwritten by new data from the WARP client. */ expiration?: string | null; /** The value to be checked against. */ input?: DevicesPostureGetResponseInput | null; /** The conditions that the client must match to run the rule. */ match?: DevicesPostureGetResponseMatchList | null; /** The name of the device posture rule. */ name?: string | null; /** Polling frequency for the WARP client posture check. Default: `5m` (poll every five minutes). Minimum: `1m`. */ schedule?: string | null; /** The type of device posture rule. */ type?: DevicesPostureGetResponseType | null; } export const GetDevicePostureResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), description: S.optional(S.NullOr(S.String)), expiration: S.optional(S.NullOr(S.String)), input: S.optional(S.NullOr(DevicesPostureGetResponseInput)), match: S.optional(S.NullOr(DevicesPostureGetResponseMatchList)), name: S.optional(S.NullOr(S.String)), schedule: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(DevicesPostureGetResponseType)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePostureResponse", }) as any as S.Schema; export interface GetDevicePostureIntegrationRequest { accountId: string; /** API UUID. */ integrationId: string; } export const GetDevicePostureIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), integrationId: S.String.pipe(T.Label("integration_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/posture/integration/{integration_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePostureIntegrationRequest", }) as any as S.Schema; export type DevicesPostureIntegrationsGetResponseConfig = DevicesPostureIntegrationsCreateResponseConfig; export const DevicesPostureIntegrationsGetResponseConfig = DevicesPostureIntegrationsCreateResponseConfig; export type DevicesPostureIntegrationsGetResponseType = | "workspace_one" | "crowdstrike_s2s" | "uptycs" | "intune" | "kolide" | "tanium_s2s" | "sentinelone_s2s" | "custom_s2s"; export const DevicesPostureIntegrationsGetResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDevicePostureIntegrationResponse { /** API UUID. */ id?: string | null; /** The configuration object containing third-party integration information. */ config?: DevicesPostureIntegrationsCreateResponseConfig | null; /** The interval between each posture check with the third-party API. Use `m` for minutes (e.g. `5m`) and `h` for hours (e.g. `12h`). */ interval?: string | null; /** The name of the device posture integration. */ name?: string | null; /** The type of device posture integration. */ type?: DevicesPostureIntegrationsGetResponseType | null; } export const GetDevicePostureIntegrationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), config: S.optional( S.NullOr(DevicesPostureIntegrationsCreateResponseConfig), ), interval: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(DevicesPostureIntegrationsGetResponseType)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDevicePostureIntegrationResponse", }) as any as S.Schema; export interface GetDeviceRegistrationRequest { accountId: string; registrationId: string; /** Comma-separated list of additional information that should be included in the registration response. Supported values are: "policy". */ include?: string; } export const GetDeviceRegistrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), registrationId: S.String.pipe(T.Label("registration_id")), include: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/registrations/{registration_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceRegistrationRequest", }) as any as S.Schema; export interface DevicesRegistrationsGetResponseDevice { /** The ID of the device. */ id: string; /** The name of the device. */ name: string; /** Version of the WARP client. */ clientVersion?: string | null; } export const DevicesRegistrationsGetResponseDevice = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, name: S.String, clientVersion: S.optional( S.NullOr(S.String).pipe(T.Body("client_version")), ), }), ).annotate({ identifier: "DevicesRegistrationsGetResponseDevice", }) as any as S.Schema; export type DevicesRegistrationsGetResponsePolicy = DevicesDevicesGetResponseLastSeenRegistrationPolicy; export const DevicesRegistrationsGetResponsePolicy = DevicesDevicesGetResponseLastSeenRegistrationPolicy; export type DevicesRegistrationsGetResponseUser = DevicesGetResponseUser; export const DevicesRegistrationsGetResponseUser = DevicesGetResponseUser; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDeviceRegistrationResponse { /** The ID of the registration. */ id: string; /** The RFC3339 timestamp when the registration was created. */ createdAt: string; /** Device details embedded inside of a registration. */ device: DevicesRegistrationsGetResponseDevice; /** The public key used to connect to the Cloudflare network. */ key: string; /** The RFC3339 timestamp when the registration was last seen. */ lastSeenAt: string; /** The RFC3339 timestamp when the registration was last updated. */ updatedAt: string; /** The RFC3339 timestamp when the registration was deleted. */ deletedAt?: string | null; /** The type of encryption key used by the WARP client for the active key. Currently 'curve25519' for WireGuard and 'secp256r1' for MASQUE. */ keyType?: string | null; /** The device settings profile assigned to this registration. */ policy?: DevicesDevicesGetResponseLastSeenRegistrationPolicy | null; /** The RFC3339 timestamp when the registration was revoked. */ revokedAt?: string | null; /** Type of the tunnel - wireguard or masque. */ tunnelType?: string | null; user?: DevicesGetResponseUser | null; /** The virtual IPv4 address assigned to the network interface of the tunnel for this registration. */ virtualIpv4?: string | null; /** The virtual IPv6 address assigned to the network interface of the tunnel for this registration. */ virtualIpv6?: string | null; } export const GetDeviceRegistrationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), device: DevicesRegistrationsGetResponseDevice, key: S.String, lastSeenAt: S.String.pipe(T.Body("last_seen_at")), updatedAt: S.String.pipe(T.Body("updated_at")), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), keyType: S.optional(S.NullOr(S.String).pipe(T.Body("key_type"))), policy: S.optional( S.NullOr(DevicesDevicesGetResponseLastSeenRegistrationPolicy), ), revokedAt: S.optional(S.NullOr(S.String).pipe(T.Body("revoked_at"))), tunnelType: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_type"))), user: S.optional(S.NullOr(DevicesGetResponseUser)), virtualIpv4: S.optional(S.NullOr(S.String).pipe(T.Body("virtual_ipv4"))), virtualIpv6: S.optional(S.NullOr(S.String).pipe(T.Body("virtual_ipv6"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceRegistrationResponse", }) as any as S.Schema; export interface GetDeviceResilienceGlobalWarpOverrideRequest { accountId: string; } export const GetDeviceResilienceGlobalWarpOverrideRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/resilience/disconnect", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceResilienceGlobalWarpOverrideRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDeviceResilienceGlobalWarpOverrideResponse { /** Disconnects all devices on the account using Global WARP override. */ disconnect?: boolean | null; /** When the Global WARP override state was updated. */ timestamp?: string | null; } export const GetDeviceResilienceGlobalWarpOverrideResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ disconnect: S.optional(S.NullOr(S.Boolean)), timestamp: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceResilienceGlobalWarpOverrideResponse", }) as any as S.Schema; export interface GetDeviceSettingRequest { accountId: string; } export const GetDeviceSettingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceSettingRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDeviceSettingResponse { /** Sets the time limit, in seconds, that a user can use an override code to bypass WARP. */ disableForTime?: number | null; /** Controls whether the external emergency disconnect feature is enabled. */ externalEmergencySignalEnabled?: boolean | null; /** The SHA256 fingerprint (64 hexadecimal characters) of the HTTPS server certificate for the external_emergency_signal_url. If provided, the WARP client will use this value to verify the server's identity. The device will ignore any response if the server's certificate fingerprint does not exactly match this value. */ externalEmergencySignalFingerprint?: string | null; /** The interval at which the WARP client fetches the emergency disconnect signal, formatted as a duration string (e.g., "5m", "2m30s", "1h"). Minimum 30 seconds. */ externalEmergencySignalInterval?: string | null; /** The HTTPS URL from which to fetch the emergency disconnect signal. Must use HTTPS and have an IPv4 or IPv6 address as the host. */ externalEmergencySignalUrl?: string | null; /** Enable gateway proxy filtering on TCP. */ gatewayProxyEnabled?: boolean | null; /** Enable gateway proxy filtering on UDP. */ gatewayUdpProxyEnabled?: boolean | null; /** Enable installation of cloudflare managed root certificate. */ rootCertificateInstallationEnabled?: boolean | null; /** Enable using CGNAT virtual IPv4. */ useZtVirtualIp?: boolean | null; } export const GetDeviceSettingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ disableForTime: S.optional( S.NullOr(S.Number).pipe(T.Body("disable_for_time")), ), externalEmergencySignalEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("external_emergency_signal_enabled")), ), externalEmergencySignalFingerprint: S.optional( S.NullOr(S.String).pipe(T.Body("external_emergency_signal_fingerprint")), ), externalEmergencySignalInterval: S.optional( S.NullOr(S.String).pipe(T.Body("external_emergency_signal_interval")), ), externalEmergencySignalUrl: S.optional( S.NullOr(S.String).pipe(T.Body("external_emergency_signal_url")), ), gatewayProxyEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("gateway_proxy_enabled")), ), gatewayUdpProxyEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("gateway_udp_proxy_enabled")), ), rootCertificateInstallationEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("root_certificate_installation_enabled")), ), useZtVirtualIp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("use_zt_virtual_ip")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDeviceSettingResponse", }) as any as S.Schema; export interface GetDexCommandDownloadRequest { /** Unique identifier linked to an account. */ accountId: string; /** Unique identifier for a command */ commandId: string; filename: string; } export const GetDexCommandDownloadRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), commandId: S.String.pipe(T.Label("command_id")), filename: S.String.pipe(T.Label()), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/commands/{command_id}/downloads/{filename}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDexCommandDownloadRequest", }) as any as S.Schema; export interface GetDexCommandDownloadResponse {} export const GetDexCommandDownloadResponse = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDexCommandDownloadResponse", }) as any as S.Schema; export interface GetDexCommandQuotaRequest { /** Unique identifier linked to an account. */ accountId: string; } export const GetDexCommandQuotaRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/commands/quota", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDexCommandQuotaRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDexCommandQuotaResponse { /** The total number of commands that can be initiated for an account. */ quota: number; /** The number of commands that have been initiated for an account. */ quotaUsage: number; /** The time when the quota resets. */ resetTime: string; } export const GetDexCommandQuotaResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ quota: S.Number, quotaUsage: S.Number.pipe(T.Body("quota_usage")), resetTime: S.String.pipe(T.Body("reset_time")), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDexCommandQuotaResponse", }) as any as S.Schema; export type DexHttpTestsGetRequestInterval = "minute" | "hour"; export const DexHttpTestsGetRequestInterval = /*@__PURE__*/ S.String; export type DexHttpTestsGetRequestDeviceIdList = Array; export const DexHttpTestsGetRequestDeviceIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface GetDexHttpTestRequest { /** Unique identifier linked to an account. */ accountId: string; /** API Resource UUID tag. */ testId: string; /** Start time for aggregate metrics in ISO ms. */ from: string; /** Time interval for aggregate time slots. */ interval: DexHttpTestsGetRequestInterval | (string & {}); /** End time for aggregate metrics in ISO ms. */ to: string; /** Optionally filter result stats to a Cloudflare colo. Cannot be used in combination with deviceId param. */ colo?: string; /** Optionally filter result stats to a specific device(s). Cannot be used in combination with colo param. */ deviceId?: DexHttpTestsGetRequestDeviceIdList; } export const GetDexHttpTestRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), testId: S.String.pipe(T.Label("test_id")), from: S.String.pipe(T.Query()), interval: DexHttpTestsGetRequestInterval.pipe(T.Query()), to: S.String.pipe(T.Query()), colo: S.optional(S.String.pipe(T.Query())), deviceId: S.optional(DexHttpTestsGetRequestDeviceIdList.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/http-tests/{test_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDexHttpTestRequest", }) as any as S.Schema; export interface DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem { timestamp: string; value: number; } export const DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ timestamp: S.String, value: S.Number, }), ).annotate({ identifier: "DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem", }) as any as S.Schema; export type DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsList = Array; export const DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsList = /*@__PURE__*/ S.Array( DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem, ) as any as S.Schema; export interface DexHttpTestsGetResponseHttpStatsAvailabilityPct { slots: DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsList; /** average observed in the time period. */ avg?: number | null; /** highest observed in the time period. */ max?: number | null; /** lowest observed in the time period. */ min?: number | null; } export const DexHttpTestsGetResponseHttpStatsAvailabilityPct = /*@__PURE__*/ S.suspend(() => S.Struct({ slots: DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsList, avg: S.optional(S.NullOr(S.Number)), max: S.optional(S.NullOr(S.Number)), min: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexHttpTestsGetResponseHttpStatsAvailabilityPct", }) as any as S.Schema; export type DexHttpTestsGetResponseHttpStatsDnsResponseTimeMsSlotsItem = DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem; export const DexHttpTestsGetResponseHttpStatsDnsResponseTimeMsSlotsItem = DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem; export type DexHttpTestsGetResponseHttpStatsDnsResponseTimeMsSlotsList = Array; export const DexHttpTestsGetResponseHttpStatsDnsResponseTimeMsSlotsList = /*@__PURE__*/ S.Array( DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem, ) as any as S.Schema; export interface DexHttpTestsGetResponseHttpStatsDnsResponseTimeMs { slots: DexHttpTestsGetResponseHttpStatsDnsResponseTimeMsSlotsList; /** average observed in the time period. */ avg?: number | null; /** highest observed in the time period. */ max?: number | null; /** lowest observed in the time period. */ min?: number | null; } export const DexHttpTestsGetResponseHttpStatsDnsResponseTimeMs = /*@__PURE__*/ S.suspend(() => S.Struct({ slots: DexHttpTestsGetResponseHttpStatsDnsResponseTimeMsSlotsList, avg: S.optional(S.NullOr(S.Number)), max: S.optional(S.NullOr(S.Number)), min: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexHttpTestsGetResponseHttpStatsDnsResponseTimeMs", }) as any as S.Schema; export interface DexHttpTestsGetResponseHttpStatsHttpStatusCodeItem { status200: number; status300: number; status400: number; status500: number; timestamp: string; } export const DexHttpTestsGetResponseHttpStatsHttpStatusCodeItem = /*@__PURE__*/ S.suspend(() => S.Struct({ status200: S.Number, status300: S.Number, status400: S.Number, status500: S.Number, timestamp: S.String, }), ).annotate({ identifier: "DexHttpTestsGetResponseHttpStatsHttpStatusCodeItem", }) as any as S.Schema; export type DexHttpTestsGetResponseHttpStatsHttpStatusCodeList = Array; export const DexHttpTestsGetResponseHttpStatsHttpStatusCodeList = /*@__PURE__*/ S.Array( DexHttpTestsGetResponseHttpStatsHttpStatusCodeItem, ) as any as S.Schema; export interface DexHttpTestsGetResponseHttpStats { availabilityPct: DexHttpTestsGetResponseHttpStatsAvailabilityPct; dnsResponseTimeMs: DexHttpTestsGetResponseHttpStatsDnsResponseTimeMs; httpStatusCode: DexHttpTestsGetResponseHttpStatsHttpStatusCodeList; resourceFetchTimeMs: DexHttpTestsGetResponseHttpStatsDnsResponseTimeMs; serverResponseTimeMs: DexHttpTestsGetResponseHttpStatsDnsResponseTimeMs; /** Count of unique devices that have run this test in the given time period. */ uniqueDevicesTotal: number; } export const DexHttpTestsGetResponseHttpStats = /*@__PURE__*/ S.suspend(() => S.Struct({ availabilityPct: DexHttpTestsGetResponseHttpStatsAvailabilityPct, dnsResponseTimeMs: DexHttpTestsGetResponseHttpStatsDnsResponseTimeMs, httpStatusCode: DexHttpTestsGetResponseHttpStatsHttpStatusCodeList, resourceFetchTimeMs: DexHttpTestsGetResponseHttpStatsDnsResponseTimeMs, serverResponseTimeMs: DexHttpTestsGetResponseHttpStatsDnsResponseTimeMs, uniqueDevicesTotal: S.Number, }), ).annotate({ identifier: "DexHttpTestsGetResponseHttpStats", }) as any as S.Schema; export type DexHttpTestsGetResponseHttpStatsByColoItemAvailabilityPctSlotsItem = DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem; export const DexHttpTestsGetResponseHttpStatsByColoItemAvailabilityPctSlotsItem = DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem; export type DexHttpTestsGetResponseHttpStatsByColoItemAvailabilityPctSlotsList = Array; export const DexHttpTestsGetResponseHttpStatsByColoItemAvailabilityPctSlotsList = /*@__PURE__*/ S.Array( DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem, ) as any as S.Schema; export interface DexHttpTestsGetResponseHttpStatsByColoItemAvailabilityPct { slots: DexHttpTestsGetResponseHttpStatsByColoItemAvailabilityPctSlotsList; /** average observed in the time period. */ avg?: number | null; /** highest observed in the time period. */ max?: number | null; /** lowest observed in the time period. */ min?: number | null; } export const DexHttpTestsGetResponseHttpStatsByColoItemAvailabilityPct = /*@__PURE__*/ S.suspend(() => S.Struct({ slots: DexHttpTestsGetResponseHttpStatsByColoItemAvailabilityPctSlotsList, avg: S.optional(S.NullOr(S.Number)), max: S.optional(S.NullOr(S.Number)), min: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexHttpTestsGetResponseHttpStatsByColoItemAvailabilityPct", }) as any as S.Schema; export type DexHttpTestsGetResponseHttpStatsByColoItemHttpStatusCodeItem = DexHttpTestsGetResponseHttpStatsHttpStatusCodeItem; export const DexHttpTestsGetResponseHttpStatsByColoItemHttpStatusCodeItem = DexHttpTestsGetResponseHttpStatsHttpStatusCodeItem; export type DexHttpTestsGetResponseHttpStatsByColoItemHttpStatusCodeList = Array; export const DexHttpTestsGetResponseHttpStatsByColoItemHttpStatusCodeList = /*@__PURE__*/ S.Array( DexHttpTestsGetResponseHttpStatsHttpStatusCodeItem, ) as any as S.Schema; export interface DexHttpTestsGetResponseHttpStatsByColoItem { availabilityPct: DexHttpTestsGetResponseHttpStatsByColoItemAvailabilityPct; colo: string; dnsResponseTimeMs: DexHttpTestsGetResponseHttpStatsDnsResponseTimeMs; httpStatusCode: DexHttpTestsGetResponseHttpStatsByColoItemHttpStatusCodeList; resourceFetchTimeMs: DexHttpTestsGetResponseHttpStatsDnsResponseTimeMs; serverResponseTimeMs: DexHttpTestsGetResponseHttpStatsDnsResponseTimeMs; /** Count of unique devices that have run this test in the given time period. */ uniqueDevicesTotal: number; } export const DexHttpTestsGetResponseHttpStatsByColoItem = /*@__PURE__*/ S.suspend(() => S.Struct({ availabilityPct: DexHttpTestsGetResponseHttpStatsByColoItemAvailabilityPct, colo: S.String, dnsResponseTimeMs: DexHttpTestsGetResponseHttpStatsDnsResponseTimeMs, httpStatusCode: DexHttpTestsGetResponseHttpStatsByColoItemHttpStatusCodeList, resourceFetchTimeMs: DexHttpTestsGetResponseHttpStatsDnsResponseTimeMs, serverResponseTimeMs: DexHttpTestsGetResponseHttpStatsDnsResponseTimeMs, uniqueDevicesTotal: S.Number, }), ).annotate({ identifier: "DexHttpTestsGetResponseHttpStatsByColoItem", }) as any as S.Schema; export type DexHttpTestsGetResponseHttpStatsByColoList = Array; export const DexHttpTestsGetResponseHttpStatsByColoList = /*@__PURE__*/ S.Array( DexHttpTestsGetResponseHttpStatsByColoItem, ) as any as S.Schema; export type DexHttpTestsGetResponseKind = "http"; export const DexHttpTestsGetResponseKind = /*@__PURE__*/ S.String; export interface DexHttpTestsGetResponseTargetPoliciesItem { /** API Resource UUID tag. */ id: string; /** Whether the policy is the default for the account. */ default: boolean; name: string; } export const DexHttpTestsGetResponseTargetPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, default: S.Boolean, name: S.String, }), ).annotate({ identifier: "DexHttpTestsGetResponseTargetPoliciesItem", }) as any as S.Schema; export type DexHttpTestsGetResponseTargetPoliciesList = Array; export const DexHttpTestsGetResponseTargetPoliciesList = /*@__PURE__*/ S.Array( DexHttpTestsGetResponseTargetPoliciesItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDexHttpTestResponse { /** The url of the HTTP synthetic application test. */ host?: string | null; httpStats?: DexHttpTestsGetResponseHttpStats | null; httpStatsByColo?: DexHttpTestsGetResponseHttpStatsByColoList | null; /** The interval at which the HTTP synthetic application test is set to run. */ interval?: string | null; kind?: DexHttpTestsGetResponseKind | null; /** The HTTP method to use when running the test. */ method?: string | null; /** The name of the HTTP synthetic application test. */ name?: string | null; targetPolicies?: DexHttpTestsGetResponseTargetPoliciesList | null; targeted?: boolean | null; } export const GetDexHttpTestResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.optional(S.NullOr(S.String)), httpStats: S.optional(S.NullOr(DexHttpTestsGetResponseHttpStats)), httpStatsByColo: S.optional( S.NullOr(DexHttpTestsGetResponseHttpStatsByColoList), ), interval: S.optional(S.NullOr(S.String)), kind: S.optional(S.NullOr(DexHttpTestsGetResponseKind)), method: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), targetPolicies: S.optional( S.NullOr(DexHttpTestsGetResponseTargetPoliciesList).pipe( T.Body("target_policies"), ), ), targeted: S.optional(S.NullOr(S.Boolean)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDexHttpTestResponse", }) as any as S.Schema; export type DexHttpTestsPercentilesGetRequestDeviceIdList = Array; export const DexHttpTestsPercentilesGetRequestDeviceIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface GetDexHttpTestPercentileRequest { /** Unique identifier linked to an account. */ accountId: string; /** API Resource UUID tag. */ testId: string; /** Start time for the query in ISO (RFC3339 - ISO 8601) format. */ from: string; /** End time for the query in ISO (RFC3339 - ISO 8601) format. */ to: string; /** Optionally filter result stats to a Cloudflare colo. Cannot be used in combination with deviceId param. */ colo?: string; /** Optionally filter result stats to a specific device(s). Cannot be used in combination with colo param. */ deviceId?: DexHttpTestsPercentilesGetRequestDeviceIdList; } export const GetDexHttpTestPercentileRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), testId: S.String.pipe(T.Label("test_id")), from: S.String.pipe(T.Query()), to: S.String.pipe(T.Query()), colo: S.optional(S.String.pipe(T.Query())), deviceId: S.optional( DexHttpTestsPercentilesGetRequestDeviceIdList.pipe(T.Query()), ), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/http-tests/{test_id}/percentiles", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDexHttpTestPercentileRequest", }) as any as S.Schema; export interface DexHttpTestsPercentilesGetResponseDnsResponseTimeMs { /** p50 observed in the time period. */ p50?: number | null; /** p90 observed in the time period. */ p90?: number | null; /** p95 observed in the time period. */ p95?: number | null; /** p99 observed in the time period. */ p99?: number | null; } export const DexHttpTestsPercentilesGetResponseDnsResponseTimeMs = /*@__PURE__*/ S.suspend(() => S.Struct({ p50: S.optional(S.NullOr(S.Number)), p90: S.optional(S.NullOr(S.Number)), p95: S.optional(S.NullOr(S.Number)), p99: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexHttpTestsPercentilesGetResponseDnsResponseTimeMs", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDexHttpTestPercentileResponse { dnsResponseTimeMs?: DexHttpTestsPercentilesGetResponseDnsResponseTimeMs | null; resourceFetchTimeMs?: DexHttpTestsPercentilesGetResponseDnsResponseTimeMs | null; serverResponseTimeMs?: DexHttpTestsPercentilesGetResponseDnsResponseTimeMs | null; } export const GetDexHttpTestPercentileResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ dnsResponseTimeMs: S.optional( S.NullOr(DexHttpTestsPercentilesGetResponseDnsResponseTimeMs), ), resourceFetchTimeMs: S.optional( S.NullOr(DexHttpTestsPercentilesGetResponseDnsResponseTimeMs), ), serverResponseTimeMs: S.optional( S.NullOr(DexHttpTestsPercentilesGetResponseDnsResponseTimeMs), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDexHttpTestPercentileResponse", }) as any as S.Schema; export interface GetDexRuleRequest { /** Unique identifier linked to an account. */ accountId: string; /** API Resource UUID tag. */ ruleId: string; } export const GetDexRuleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ruleId: S.String.pipe(T.Label("rule_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/rules/{rule_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDexRuleRequest", }) as any as S.Schema; export type DexRulesGetResponseTargetedTestsItemDataKind = | "http" | "traceroute"; export const DexRulesGetResponseTargetedTestsItemDataKind = /*@__PURE__*/ S.String; export type DexRulesGetResponseTargetedTestsItemDataMethod = "GET"; export const DexRulesGetResponseTargetedTestsItemDataMethod = /*@__PURE__*/ S.String; export interface DexRulesGetResponseTargetedTestsItemData { /** The desired endpoint to test. */ host: string; /** The type of test. */ kind: DexRulesGetResponseTargetedTestsItemDataKind; /** The HTTP request method type. */ method?: DexRulesGetResponseTargetedTestsItemDataMethod | null; } export const DexRulesGetResponseTargetedTestsItemData = /*@__PURE__*/ S.suspend( () => S.Struct({ host: S.String, kind: DexRulesGetResponseTargetedTestsItemDataKind, method: S.optional( S.NullOr(DexRulesGetResponseTargetedTestsItemDataMethod), ), }), ).annotate({ identifier: "DexRulesGetResponseTargetedTestsItemData", }) as any as S.Schema; export interface DexRulesGetResponseTargetedTestsItem { /** The configuration object which contains the details for the WARP client to conduct the test. */ data: DexRulesGetResponseTargetedTestsItemData; enabled: boolean; name: string; testId: string; } export const DexRulesGetResponseTargetedTestsItem = /*@__PURE__*/ S.suspend( () => S.Struct({ data: DexRulesGetResponseTargetedTestsItemData, enabled: S.Boolean, name: S.String, testId: S.String.pipe(T.Body("test_id")), }), ).annotate({ identifier: "DexRulesGetResponseTargetedTestsItem", }) as any as S.Schema; export type DexRulesGetResponseTargetedTestsList = Array; export const DexRulesGetResponseTargetedTestsList = /*@__PURE__*/ S.Array( DexRulesGetResponseTargetedTestsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDexRuleResponse { /** API Resource UUID tag. */ id: string; createdAt: string; match: string; name: string; description?: string | null; targetedTests?: DexRulesGetResponseTargetedTestsList | null; updatedAt?: string | null; } export const GetDexRuleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), match: S.String, name: S.String, description: S.optional(S.NullOr(S.String)), targetedTests: S.optional( S.NullOr(DexRulesGetResponseTargetedTestsList).pipe( T.Body("targeted_tests"), ), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDexRuleResponse", }) as any as S.Schema; export type DexTracerouteTestsGetRequestInterval = "minute" | "hour"; export const DexTracerouteTestsGetRequestInterval = /*@__PURE__*/ S.String; export type DexTracerouteTestsGetRequestDeviceIdList = Array; export const DexTracerouteTestsGetRequestDeviceIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface GetDexTracerouteTestRequest { /** Unique identifier linked to an account. */ accountId: string; /** API Resource UUID tag. */ testId: string; /** Start time for aggregate metrics in ISO ms. */ from: string; /** Time interval for aggregate time slots. */ interval: DexTracerouteTestsGetRequestInterval | (string & {}); /** End time for aggregate metrics in ISO ms. */ to: string; /** Optionally filter result stats to a Cloudflare colo. Cannot be used in combination with deviceId param. */ colo?: string; /** Optionally filter result stats to a specific device(s). Cannot be used in combination with colo param. */ deviceId?: DexTracerouteTestsGetRequestDeviceIdList; } export const GetDexTracerouteTestRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), testId: S.String.pipe(T.Label("test_id")), from: S.String.pipe(T.Query()), interval: DexTracerouteTestsGetRequestInterval.pipe(T.Query()), to: S.String.pipe(T.Query()), colo: S.optional(S.String.pipe(T.Query())), deviceId: S.optional( DexTracerouteTestsGetRequestDeviceIdList.pipe(T.Query()), ), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/traceroute-tests/{test_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDexTracerouteTestRequest", }) as any as S.Schema; export type DexTracerouteTestsGetResponseKind = "traceroute"; export const DexTracerouteTestsGetResponseKind = /*@__PURE__*/ S.String; export type DexTracerouteTestsGetResponseTargetPoliciesItem = DexHttpTestsGetResponseTargetPoliciesItem; export const DexTracerouteTestsGetResponseTargetPoliciesItem = DexHttpTestsGetResponseTargetPoliciesItem; export type DexTracerouteTestsGetResponseTargetPoliciesList = Array; export const DexTracerouteTestsGetResponseTargetPoliciesList = /*@__PURE__*/ S.Array( DexHttpTestsGetResponseTargetPoliciesItem, ) as any as S.Schema; export type DexTracerouteTestsGetResponseTracerouteStatsAvailabilityPctSlotsItem = DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem; export const DexTracerouteTestsGetResponseTracerouteStatsAvailabilityPctSlotsItem = DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem; export type DexTracerouteTestsGetResponseTracerouteStatsAvailabilityPctSlotsList = Array; export const DexTracerouteTestsGetResponseTracerouteStatsAvailabilityPctSlotsList = /*@__PURE__*/ S.Array( DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem, ) as any as S.Schema; export interface DexTracerouteTestsGetResponseTracerouteStatsAvailabilityPct { slots: DexTracerouteTestsGetResponseTracerouteStatsAvailabilityPctSlotsList; /** average observed in the time period. */ avg?: number | null; /** highest observed in the time period. */ max?: number | null; /** lowest observed in the time period. */ min?: number | null; } export const DexTracerouteTestsGetResponseTracerouteStatsAvailabilityPct = /*@__PURE__*/ S.suspend(() => S.Struct({ slots: DexTracerouteTestsGetResponseTracerouteStatsAvailabilityPctSlotsList, avg: S.optional(S.NullOr(S.Number)), max: S.optional(S.NullOr(S.Number)), min: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexTracerouteTestsGetResponseTracerouteStatsAvailabilityPct", }) as any as S.Schema; export type DexTracerouteTestsGetResponseTracerouteStatsHopsCountSlotsItem = DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem; export const DexTracerouteTestsGetResponseTracerouteStatsHopsCountSlotsItem = DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem; export type DexTracerouteTestsGetResponseTracerouteStatsHopsCountSlotsList = Array; export const DexTracerouteTestsGetResponseTracerouteStatsHopsCountSlotsList = /*@__PURE__*/ S.Array( DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem, ) as any as S.Schema; export interface DexTracerouteTestsGetResponseTracerouteStatsHopsCount { slots: DexTracerouteTestsGetResponseTracerouteStatsHopsCountSlotsList; /** average observed in the time period. */ avg?: number | null; /** highest observed in the time period. */ max?: number | null; /** lowest observed in the time period. */ min?: number | null; } export const DexTracerouteTestsGetResponseTracerouteStatsHopsCount = /*@__PURE__*/ S.suspend(() => S.Struct({ slots: DexTracerouteTestsGetResponseTracerouteStatsHopsCountSlotsList, avg: S.optional(S.NullOr(S.Number)), max: S.optional(S.NullOr(S.Number)), min: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexTracerouteTestsGetResponseTracerouteStatsHopsCount", }) as any as S.Schema; export type DexTracerouteTestsGetResponseTracerouteStatsPacketLossPctSlotsItem = DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem; export const DexTracerouteTestsGetResponseTracerouteStatsPacketLossPctSlotsItem = DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem; export type DexTracerouteTestsGetResponseTracerouteStatsPacketLossPctSlotsList = Array; export const DexTracerouteTestsGetResponseTracerouteStatsPacketLossPctSlotsList = /*@__PURE__*/ S.Array( DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem, ) as any as S.Schema; export interface DexTracerouteTestsGetResponseTracerouteStatsPacketLossPct { slots: DexTracerouteTestsGetResponseTracerouteStatsPacketLossPctSlotsList; /** average observed in the time period. */ avg?: number | null; /** highest observed in the time period. */ max?: number | null; /** lowest observed in the time period. */ min?: number | null; } export const DexTracerouteTestsGetResponseTracerouteStatsPacketLossPct = /*@__PURE__*/ S.suspend(() => S.Struct({ slots: DexTracerouteTestsGetResponseTracerouteStatsPacketLossPctSlotsList, avg: S.optional(S.NullOr(S.Number)), max: S.optional(S.NullOr(S.Number)), min: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexTracerouteTestsGetResponseTracerouteStatsPacketLossPct", }) as any as S.Schema; export interface DexTracerouteTestsGetResponseTracerouteStats { availabilityPct: DexTracerouteTestsGetResponseTracerouteStatsAvailabilityPct; hopsCount: DexTracerouteTestsGetResponseTracerouteStatsHopsCount; packetLossPct: DexTracerouteTestsGetResponseTracerouteStatsPacketLossPct; roundTripTimeMs: DexTracerouteTestsGetResponseTracerouteStatsHopsCount; /** Count of unique devices that have run this test in the given time period. */ uniqueDevicesTotal: number; } export const DexTracerouteTestsGetResponseTracerouteStats = /*@__PURE__*/ S.suspend(() => S.Struct({ availabilityPct: DexTracerouteTestsGetResponseTracerouteStatsAvailabilityPct, hopsCount: DexTracerouteTestsGetResponseTracerouteStatsHopsCount, packetLossPct: DexTracerouteTestsGetResponseTracerouteStatsPacketLossPct, roundTripTimeMs: DexTracerouteTestsGetResponseTracerouteStatsHopsCount, uniqueDevicesTotal: S.Number, }), ).annotate({ identifier: "DexTracerouteTestsGetResponseTracerouteStats", }) as any as S.Schema; export type DexTracerouteTestsGetResponseTracerouteStatsByColoItemAvailabilityPctSlotsItem = DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem; export const DexTracerouteTestsGetResponseTracerouteStatsByColoItemAvailabilityPctSlotsItem = DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem; export type DexTracerouteTestsGetResponseTracerouteStatsByColoItemAvailabilityPctSlotsList = Array; export const DexTracerouteTestsGetResponseTracerouteStatsByColoItemAvailabilityPctSlotsList = /*@__PURE__*/ S.Array( DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem, ) as any as S.Schema; export interface DexTracerouteTestsGetResponseTracerouteStatsByColoItemAvailabilityPct { slots: DexTracerouteTestsGetResponseTracerouteStatsByColoItemAvailabilityPctSlotsList; /** average observed in the time period. */ avg?: number | null; /** highest observed in the time period. */ max?: number | null; /** lowest observed in the time period. */ min?: number | null; } export const DexTracerouteTestsGetResponseTracerouteStatsByColoItemAvailabilityPct = /*@__PURE__*/ S.suspend(() => S.Struct({ slots: DexTracerouteTestsGetResponseTracerouteStatsByColoItemAvailabilityPctSlotsList, avg: S.optional(S.NullOr(S.Number)), max: S.optional(S.NullOr(S.Number)), min: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexTracerouteTestsGetResponseTracerouteStatsByColoItemAvailabilityPct", }) as any as S.Schema; export type DexTracerouteTestsGetResponseTracerouteStatsByColoItemPacketLossPctSlotsItem = DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem; export const DexTracerouteTestsGetResponseTracerouteStatsByColoItemPacketLossPctSlotsItem = DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem; export type DexTracerouteTestsGetResponseTracerouteStatsByColoItemPacketLossPctSlotsList = Array; export const DexTracerouteTestsGetResponseTracerouteStatsByColoItemPacketLossPctSlotsList = /*@__PURE__*/ S.Array( DexHttpTestsGetResponseHttpStatsAvailabilityPctSlotsItem, ) as any as S.Schema; export interface DexTracerouteTestsGetResponseTracerouteStatsByColoItemPacketLossPct { slots: DexTracerouteTestsGetResponseTracerouteStatsByColoItemPacketLossPctSlotsList; /** average observed in the time period. */ avg?: number | null; /** highest observed in the time period. */ max?: number | null; /** lowest observed in the time period. */ min?: number | null; } export const DexTracerouteTestsGetResponseTracerouteStatsByColoItemPacketLossPct = /*@__PURE__*/ S.suspend(() => S.Struct({ slots: DexTracerouteTestsGetResponseTracerouteStatsByColoItemPacketLossPctSlotsList, avg: S.optional(S.NullOr(S.Number)), max: S.optional(S.NullOr(S.Number)), min: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexTracerouteTestsGetResponseTracerouteStatsByColoItemPacketLossPct", }) as any as S.Schema; export interface DexTracerouteTestsGetResponseTracerouteStatsByColoItem { availabilityPct: DexTracerouteTestsGetResponseTracerouteStatsByColoItemAvailabilityPct; colo: string; hopsCount: DexTracerouteTestsGetResponseTracerouteStatsHopsCount; packetLossPct: DexTracerouteTestsGetResponseTracerouteStatsByColoItemPacketLossPct; roundTripTimeMs: DexTracerouteTestsGetResponseTracerouteStatsHopsCount; /** Count of unique devices that have run this test in the given time period. */ uniqueDevicesTotal: number; } export const DexTracerouteTestsGetResponseTracerouteStatsByColoItem = /*@__PURE__*/ S.suspend(() => S.Struct({ availabilityPct: DexTracerouteTestsGetResponseTracerouteStatsByColoItemAvailabilityPct, colo: S.String, hopsCount: DexTracerouteTestsGetResponseTracerouteStatsHopsCount, packetLossPct: DexTracerouteTestsGetResponseTracerouteStatsByColoItemPacketLossPct, roundTripTimeMs: DexTracerouteTestsGetResponseTracerouteStatsHopsCount, uniqueDevicesTotal: S.Number, }), ).annotate({ identifier: "DexTracerouteTestsGetResponseTracerouteStatsByColoItem", }) as any as S.Schema; export type DexTracerouteTestsGetResponseTracerouteStatsByColoList = Array; export const DexTracerouteTestsGetResponseTracerouteStatsByColoList = /*@__PURE__*/ S.Array( DexTracerouteTestsGetResponseTracerouteStatsByColoItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDexTracerouteTestResponse { /** The host of the Traceroute synthetic application test. */ host: string; /** The interval at which the Traceroute synthetic application test is set to run. */ interval: string; kind: DexTracerouteTestsGetResponseKind; /** The name of the Traceroute synthetic application test. */ name: string; targetPolicies?: DexTracerouteTestsGetResponseTargetPoliciesList | null; targeted?: boolean | null; tracerouteStats?: DexTracerouteTestsGetResponseTracerouteStats | null; tracerouteStatsByColo?: DexTracerouteTestsGetResponseTracerouteStatsByColoList | null; } export const GetDexTracerouteTestResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.String, interval: S.String, kind: DexTracerouteTestsGetResponseKind, name: S.String, targetPolicies: S.optional( S.NullOr(DexTracerouteTestsGetResponseTargetPoliciesList).pipe( T.Body("target_policies"), ), ), targeted: S.optional(S.NullOr(S.Boolean)), tracerouteStats: S.optional( S.NullOr(DexTracerouteTestsGetResponseTracerouteStats), ), tracerouteStatsByColo: S.optional( S.NullOr(DexTracerouteTestsGetResponseTracerouteStatsByColoList), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDexTracerouteTestResponse", }) as any as S.Schema; export interface GetDexTracerouteTestResultNetworkPathRequest { /** Unique identifier linked to an account. */ accountId: string; /** API Resource UUID tag. */ testResultId: string; } export const GetDexTracerouteTestResultNetworkPathRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), testResultId: S.String.pipe(T.Label("test_result_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/traceroute-test-results/{test_result_id}/network-path", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDexTracerouteTestResultNetworkPathRequest", }) as any as S.Schema; export interface DexTracerouteTestResultsNetworkPathGetResponseHopsItemLocation { city?: string | null; state?: string | null; zip?: string | null; } export const DexTracerouteTestResultsNetworkPathGetResponseHopsItemLocation = /*@__PURE__*/ S.suspend(() => S.Struct({ city: S.optional(S.NullOr(S.String)), state: S.optional(S.NullOr(S.String)), zip: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DexTracerouteTestResultsNetworkPathGetResponseHopsItemLocation", }) as any as S.Schema; export type DexTracerouteTestResultsNetworkPathGetResponseHopsItemMile = | "client-to-app" | "client-to-cf-egress" | "client-to-cf-ingress" | "client-to-isp"; export const DexTracerouteTestResultsNetworkPathGetResponseHopsItemMile = /*@__PURE__*/ S.String; export interface DexTracerouteTestResultsNetworkPathGetResponseHopsItem { ttl: number; asn?: number | null; aso?: string | null; ipAddress?: string | null; location?: DexTracerouteTestResultsNetworkPathGetResponseHopsItemLocation | null; mile?: DexTracerouteTestResultsNetworkPathGetResponseHopsItemMile | null; name?: string | null; packetLossPct?: number | null; rttMs?: number | null; } export const DexTracerouteTestResultsNetworkPathGetResponseHopsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ ttl: S.Number, asn: S.optional(S.NullOr(S.Number)), aso: S.optional(S.NullOr(S.String)), ipAddress: S.optional(S.NullOr(S.String)), location: S.optional( S.NullOr( DexTracerouteTestResultsNetworkPathGetResponseHopsItemLocation, ), ), mile: S.optional( S.NullOr(DexTracerouteTestResultsNetworkPathGetResponseHopsItemMile), ), name: S.optional(S.NullOr(S.String)), packetLossPct: S.optional(S.NullOr(S.Number)), rttMs: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexTracerouteTestResultsNetworkPathGetResponseHopsItem", }) as any as S.Schema; export type DexTracerouteTestResultsNetworkPathGetResponseHopsList = Array; export const DexTracerouteTestResultsNetworkPathGetResponseHopsList = /*@__PURE__*/ S.Array( DexTracerouteTestResultsNetworkPathGetResponseHopsItem, ) as any as S.Schema; export type DexTracerouteTestResultsNetworkPathGetResponseExecutionContext = | "EXECUTION_CONTEXT_INVALID" | "OUT_OF_TUNNEL" | "IN_TUNNEL"; export const DexTracerouteTestResultsNetworkPathGetResponseExecutionContext = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDexTracerouteTestResultNetworkPathResponse { /** An array of the hops taken by the device to reach the end destination. */ hops: DexTracerouteTestResultsNetworkPathGetResponseHopsList; /** API Resource UUID tag. */ resultId: string; /** Cloudflare colo airport code. */ colo?: string | null; /** Name of the device associated with this network path response. */ deviceName?: string | null; /** Whether the test was run inside or outside of the WARP tunnel. */ executionContext?: DexTracerouteTestResultsNetworkPathGetResponseExecutionContext | null; /** API Resource UUID tag. */ testId?: string | null; /** Name of the traceroute test. */ testName?: string | null; /** Timestamp indicating when the traceroute test execution began. */ timeStart?: string | null; tunnelType?: string | null; } export const GetDexTracerouteTestResultNetworkPathResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ hops: DexTracerouteTestResultsNetworkPathGetResponseHopsList, resultId: S.String, colo: S.optional(S.NullOr(S.String)), deviceName: S.optional(S.NullOr(S.String)), executionContext: S.optional( S.NullOr( DexTracerouteTestResultsNetworkPathGetResponseExecutionContext, ).pipe(T.Body("execution_context")), ), testId: S.optional(S.NullOr(S.String)), testName: S.optional(S.NullOr(S.String)), timeStart: S.optional(S.NullOr(S.String).pipe(T.Body("time_start"))), tunnelType: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_type"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDexTracerouteTestResultNetworkPathResponse", }) as any as S.Schema; export type DexWarpChangeEventsGetRequestSortOrder = "ASC" | "DESC"; export const DexWarpChangeEventsGetRequestSortOrder = /*@__PURE__*/ S.String; export type DexWarpChangeEventsGetRequestToggle = "on" | "off"; export const DexWarpChangeEventsGetRequestToggle = /*@__PURE__*/ S.String; export type DexWarpChangeEventsGetRequestType = "config" | "toggle"; export const DexWarpChangeEventsGetRequestType = /*@__PURE__*/ S.String; export interface GetDexWarpChangeEventRequest { /** Unique identifier linked to an account. */ accountId: string; /** Start time for the query in ISO (RFC3339 - ISO 8601) format. */ from: string; /** Page number of paginated results. */ page: number; /** Number of results per page. */ perPage: number; /** End time for the query in ISO (RFC3339 - ISO 8601) format. */ to: string; /** Filter events by account name. */ accountName?: string; /** Filter events by WARP configuration name changed from or to. Applicable to type='config' events only. */ configName?: string; /** Sort response by event timestamp. */ sortOrder?: DexWarpChangeEventsGetRequestSortOrder | (string & {}); /** Filter events by type toggle value. Applicable to type='toggle' events only. */ toggle?: DexWarpChangeEventsGetRequestToggle | (string & {}); /** Filter events by type 'config' or 'toggle'. */ type?: DexWarpChangeEventsGetRequestType | (string & {}); } export const GetDexWarpChangeEventRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), from: S.String.pipe(T.Query()), page: S.Number.pipe(T.Query()), perPage: S.Number.pipe(T.Query("per_page")), to: S.String.pipe(T.Query()), accountName: S.optional(S.String.pipe(T.Query("account_name"))), configName: S.optional(S.String.pipe(T.Query("config_name"))), sortOrder: S.optional( DexWarpChangeEventsGetRequestSortOrder.pipe(T.Query("sort_order")), ), toggle: S.optional(DexWarpChangeEventsGetRequestToggle.pipe(T.Query())), type: S.optional(DexWarpChangeEventsGetRequestType.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/warp-change-events", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDexWarpChangeEventRequest", }) as any as S.Schema; export type DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPToggleChangeEventToggle = | "on" | "off"; export const DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPToggleChangeEventToggle = /*@__PURE__*/ S.String; export interface DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPToggleChangeEvent { /** The account name. */ accountName?: string | null; /** The public account identifier. */ accountTag?: string | null; /** The device ID. */ deviceId?: string | null; /** Deprecated: use registration_id. The device registration ID. */ deviceRegistration?: string | null; /** The hostname of the machine the event is from. */ hostname?: string | null; /** The device registration ID. */ registrationId?: string | null; /** The serial number of the machine the event is from. */ serialNumber?: string | null; /** The event time. */ timestamp?: string | null; /** The state of the WARP toggle. */ toggle?: DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPToggleChangeEventToggle | null; /** Email tied to the device. */ userEmail?: string | null; } export const DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPToggleChangeEvent = /*@__PURE__*/ S.suspend(() => S.Struct({ accountName: S.optional(S.NullOr(S.String).pipe(T.Body("account_name"))), accountTag: S.optional(S.NullOr(S.String).pipe(T.Body("account_tag"))), deviceId: S.optional(S.NullOr(S.String).pipe(T.Body("device_id"))), deviceRegistration: S.optional( S.NullOr(S.String).pipe(T.Body("device_registration")), ), hostname: S.optional(S.NullOr(S.String)), registrationId: S.optional( S.NullOr(S.String).pipe(T.Body("registration_id")), ), serialNumber: S.optional( S.NullOr(S.String).pipe(T.Body("serial_number")), ), timestamp: S.optional(S.NullOr(S.String)), toggle: S.optional( S.NullOr( DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPToggleChangeEventToggle, ), ), userEmail: S.optional(S.NullOr(S.String).pipe(T.Body("user_email"))), }), ).annotate({ identifier: "DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPToggleChangeEvent", }) as any as S.Schema; export interface DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPConfigChangeEventFrom { /** The account name. */ accountName?: string | null; /** The public account identifier. */ accountTag?: string | null; /** The name of the WARP configuration. */ configName?: string | null; } export const DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPConfigChangeEventFrom = /*@__PURE__*/ S.suspend(() => S.Struct({ accountName: S.optional(S.NullOr(S.String).pipe(T.Body("account_name"))), accountTag: S.optional(S.NullOr(S.String).pipe(T.Body("account_tag"))), configName: S.optional(S.NullOr(S.String).pipe(T.Body("config_name"))), }), ).annotate({ identifier: "DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPConfigChangeEventFrom", }) as any as S.Schema; export type DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPConfigChangeEventTo = DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPConfigChangeEventFrom; export const DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPConfigChangeEventTo = DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPConfigChangeEventFrom; export interface DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPConfigChangeEvent { /** The device ID. */ deviceId?: string | null; /** Deprecated: use registration_id. The device registration ID. */ deviceRegistration?: string | null; /** The details for the WARP configuration that was switched from. */ from?: DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPConfigChangeEventFrom | null; /** The hostname of the machine the event is from. */ hostname?: string | null; /** The device registration ID. */ registrationId?: string | null; /** The serial number of the machine the event is from. */ serialNumber?: string | null; /** The event time. */ timestamp?: string | null; /** The details for the WARP configuration that was switched to. */ to?: DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPConfigChangeEventFrom | null; /** Email tied to the device. */ userEmail?: string | null; } export const DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPConfigChangeEvent = /*@__PURE__*/ S.suspend(() => S.Struct({ deviceId: S.optional(S.NullOr(S.String).pipe(T.Body("device_id"))), deviceRegistration: S.optional( S.NullOr(S.String).pipe(T.Body("device_registration")), ), from: S.optional( S.NullOr( DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPConfigChangeEventFrom, ), ), hostname: S.optional(S.NullOr(S.String)), registrationId: S.optional( S.NullOr(S.String).pipe(T.Body("registration_id")), ), serialNumber: S.optional( S.NullOr(S.String).pipe(T.Body("serial_number")), ), timestamp: S.optional(S.NullOr(S.String)), to: S.optional( S.NullOr( DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPConfigChangeEventFrom, ), ), userEmail: S.optional(S.NullOr(S.String).pipe(T.Body("user_email"))), }), ).annotate({ identifier: "DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPConfigChangeEvent", }) as any as S.Schema; export type DexWarpChangeEventsGetResultItem = | DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPToggleChangeEvent | DexWarpChangeEventsGetResultItemDigitalExperienceMonitoringWARPConfigChangeEvent; export const DexWarpChangeEventsGetResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "accountName", "accountTag", "deviceId", "deviceRegistration", "hostname", "registrationId", "serialNumber", "timestamp", "toggle", "userEmail", ], [ "deviceId", "deviceRegistration", "from", "hostname", "registrationId", "serialNumber", "timestamp", "to", "userEmail", ], ]), ); export type DexWarpChangeEventsGetResultList = Array; export const DexWarpChangeEventsGetResultList = /*@__PURE__*/ S.Array( DexWarpChangeEventsGetResultItem, ) as any as S.Schema; export type GetDexWarpChangeEventResponse = DexWarpChangeEventsGetResultList; export const GetDexWarpChangeEventResponse = /*@__PURE__*/ S.suspend(() => DexWarpChangeEventsGetResultList.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "GetDexWarpChangeEventResponse", }) as any as S.Schema; export interface GetDlpCustomEntryRequest { accountId: string; entryId: string; } export const GetDlpCustomEntryRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), entryId: S.String.pipe(T.Label("entry_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/entries/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpCustomEntryRequest", }) as any as S.Schema; export type GetDlpCustomEntryResultCase0PatternValidation = "luhn"; export const GetDlpCustomEntryResultCase0PatternValidation = /*@__PURE__*/ S.String; export interface GetDlpCustomEntryResultCase0Pattern { regex: string; validation?: GetDlpCustomEntryResultCase0PatternValidation | null; } export const GetDlpCustomEntryResultCase0Pattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( S.NullOr(GetDlpCustomEntryResultCase0PatternValidation), ), }), ).annotate({ identifier: "GetDlpCustomEntryResultCase0Pattern", }) as any as S.Schema; export type GetDlpCustomEntryResultCase0Type = "custom"; export const GetDlpCustomEntryResultCase0Type = /*@__PURE__*/ S.String; export interface GetDlpCustomEntryResultCase0ProfilesItem { id: string; name: string; } export const GetDlpCustomEntryResultCase0ProfilesItem = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, name: S.String, }), ).annotate({ identifier: "GetDlpCustomEntryResultCase0ProfilesItem", }) as any as S.Schema; export type GetDlpCustomEntryResultCase0ProfilesList = Array; export const GetDlpCustomEntryResultCase0ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpCustomEntryResultCase0UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpCustomEntryResultCase0UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpCustomEntryResultCase0 { id: string; createdAt: string; enabled: boolean; name: string; pattern: GetDlpCustomEntryResultCase0Pattern; type: GetDlpCustomEntryResultCase0Type; updatedAt: string; description?: string | null; profileId?: string | null; profiles?: GetDlpCustomEntryResultCase0ProfilesList | null; uploadStatus?: GetDlpCustomEntryResultCase0UploadStatus | null; } export const GetDlpCustomEntryResultCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: GetDlpCustomEntryResultCase0Pattern, type: GetDlpCustomEntryResultCase0Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional(S.NullOr(GetDlpCustomEntryResultCase0ProfilesList)), uploadStatus: S.optional( S.NullOr(GetDlpCustomEntryResultCase0UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpCustomEntryResultCase0", }) as any as S.Schema; export type GetDlpCustomEntryResultCase1Type = "custom_prompt_topic"; export const GetDlpCustomEntryResultCase1Type = /*@__PURE__*/ S.String; export type GetDlpCustomEntryResultCase1ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpCustomEntryResultCase1ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpCustomEntryResultCase1ProfilesList = Array; export const GetDlpCustomEntryResultCase1ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpCustomEntryResultCase1UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpCustomEntryResultCase1UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpCustomEntryResultCase1 { id: string; createdAt: string; enabled: boolean; name: string; type: GetDlpCustomEntryResultCase1Type; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; profiles?: GetDlpCustomEntryResultCase1ProfilesList | null; uploadStatus?: GetDlpCustomEntryResultCase1UploadStatus | null; } export const GetDlpCustomEntryResultCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: GetDlpCustomEntryResultCase1Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profiles: S.optional(S.NullOr(GetDlpCustomEntryResultCase1ProfilesList)), uploadStatus: S.optional( S.NullOr(GetDlpCustomEntryResultCase1UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpCustomEntryResultCase1", }) as any as S.Schema; export type GetDlpCustomEntryResultCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export const GetDlpCustomEntryResultCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export type GetDlpCustomEntryResultCase2Type = "predefined"; export const GetDlpCustomEntryResultCase2Type = /*@__PURE__*/ S.String; export type GetDlpCustomEntryResultCase2ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpCustomEntryResultCase2ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpCustomEntryResultCase2ProfilesList = Array; export const GetDlpCustomEntryResultCase2ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpCustomEntryResultCase2UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpCustomEntryResultCase2UploadStatus = /*@__PURE__*/ S.String; export type GetDlpCustomEntryResultCase2VariantCase0TopicType = | "Intent" | "Content"; export const GetDlpCustomEntryResultCase2VariantCase0TopicType = /*@__PURE__*/ S.String; export type GetDlpCustomEntryResultCase2VariantCase0Type = "PromptTopic"; export const GetDlpCustomEntryResultCase2VariantCase0Type = /*@__PURE__*/ S.String; export interface GetDlpCustomEntryResultCase2VariantCase0 { topicType: GetDlpCustomEntryResultCase2VariantCase0TopicType; type: GetDlpCustomEntryResultCase2VariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const GetDlpCustomEntryResultCase2VariantCase0 = /*@__PURE__*/ S.suspend( () => S.Struct({ topicType: GetDlpCustomEntryResultCase2VariantCase0TopicType.pipe( T.Body("topic_type"), ), type: GetDlpCustomEntryResultCase2VariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "GetDlpCustomEntryResultCase2VariantCase0", }) as any as S.Schema; export type GetDlpCustomEntryResultCase2VariantCase1Type = "General"; export const GetDlpCustomEntryResultCase2VariantCase1Type = /*@__PURE__*/ S.String; export interface GetDlpCustomEntryResultCase2VariantCase1 { type: GetDlpCustomEntryResultCase2VariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const GetDlpCustomEntryResultCase2VariantCase1 = /*@__PURE__*/ S.suspend( () => S.Struct({ type: GetDlpCustomEntryResultCase2VariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "GetDlpCustomEntryResultCase2VariantCase1", }) as any as S.Schema; export type GetDlpCustomEntryResultCase2Variant = | GetDlpCustomEntryResultCase2VariantCase0 | GetDlpCustomEntryResultCase2VariantCase1; export const GetDlpCustomEntryResultCase2Variant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface GetDlpCustomEntryResultCase2 { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: GetDlpCustomEntryResultCase2Type; profileId?: string | null; profiles?: GetDlpCustomEntryResultCase2ProfilesList | null; uploadStatus?: GetDlpCustomEntryResultCase2UploadStatus | null; /** A Predefined AI prompt classification topic entry. */ variant?: GetDlpCustomEntryResultCase2Variant | null; } export const GetDlpCustomEntryResultCase2 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: GetDlpCustomEntryResultCase2Type, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional(S.NullOr(GetDlpCustomEntryResultCase2ProfilesList)), uploadStatus: S.optional( S.NullOr(GetDlpCustomEntryResultCase2UploadStatus).pipe( T.Body("upload_status"), ), ), variant: S.optional(S.NullOr(GetDlpCustomEntryResultCase2Variant)), }), ).annotate({ identifier: "GetDlpCustomEntryResultCase2", }) as any as S.Schema; export type GetDlpCustomEntryResultCase3Type = "integration"; export const GetDlpCustomEntryResultCase3Type = /*@__PURE__*/ S.String; export type GetDlpCustomEntryResultCase3ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpCustomEntryResultCase3ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpCustomEntryResultCase3ProfilesList = Array; export const GetDlpCustomEntryResultCase3ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpCustomEntryResultCase3UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpCustomEntryResultCase3UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpCustomEntryResultCase3 { id: string; createdAt: string; enabled: boolean; name: string; type: GetDlpCustomEntryResultCase3Type; updatedAt: string; profileId?: string | null; profiles?: GetDlpCustomEntryResultCase3ProfilesList | null; uploadStatus?: GetDlpCustomEntryResultCase3UploadStatus | null; } export const GetDlpCustomEntryResultCase3 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: GetDlpCustomEntryResultCase3Type, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional(S.NullOr(GetDlpCustomEntryResultCase3ProfilesList)), uploadStatus: S.optional( S.NullOr(GetDlpCustomEntryResultCase3UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpCustomEntryResultCase3", }) as any as S.Schema; export type GetDlpCustomEntryResultCase4Type = "exact_data"; export const GetDlpCustomEntryResultCase4Type = /*@__PURE__*/ S.String; export type GetDlpCustomEntryResultCase4ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpCustomEntryResultCase4ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpCustomEntryResultCase4ProfilesList = Array; export const GetDlpCustomEntryResultCase4ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpCustomEntryResultCase4UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpCustomEntryResultCase4UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpCustomEntryResultCase4 { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: GetDlpCustomEntryResultCase4Type; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; profiles?: GetDlpCustomEntryResultCase4ProfilesList | null; uploadStatus?: GetDlpCustomEntryResultCase4UploadStatus | null; } export const GetDlpCustomEntryResultCase4 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: GetDlpCustomEntryResultCase4Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profiles: S.optional(S.NullOr(GetDlpCustomEntryResultCase4ProfilesList)), uploadStatus: S.optional( S.NullOr(GetDlpCustomEntryResultCase4UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpCustomEntryResultCase4", }) as any as S.Schema; export type GetDlpCustomEntryResultCase5Type = "document_fingerprint"; export const GetDlpCustomEntryResultCase5Type = /*@__PURE__*/ S.String; export type GetDlpCustomEntryResultCase5ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpCustomEntryResultCase5ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpCustomEntryResultCase5ProfilesList = Array; export const GetDlpCustomEntryResultCase5ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpCustomEntryResultCase5UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpCustomEntryResultCase5UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpCustomEntryResultCase5 { id: string; createdAt: string; enabled: boolean; name: string; type: GetDlpCustomEntryResultCase5Type; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; profiles?: GetDlpCustomEntryResultCase5ProfilesList | null; uploadStatus?: GetDlpCustomEntryResultCase5UploadStatus | null; } export const GetDlpCustomEntryResultCase5 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: GetDlpCustomEntryResultCase5Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profiles: S.optional(S.NullOr(GetDlpCustomEntryResultCase5ProfilesList)), uploadStatus: S.optional( S.NullOr(GetDlpCustomEntryResultCase5UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpCustomEntryResultCase5", }) as any as S.Schema; export type GetDlpCustomEntryResultCase6Type = "word_list"; export const GetDlpCustomEntryResultCase6Type = /*@__PURE__*/ S.String; export type GetDlpCustomEntryResultCase6ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpCustomEntryResultCase6ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpCustomEntryResultCase6ProfilesList = Array; export const GetDlpCustomEntryResultCase6ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpCustomEntryResultCase6UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpCustomEntryResultCase6UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpCustomEntryResultCase6 { id: string; createdAt: string; enabled: boolean; name: string; type: GetDlpCustomEntryResultCase6Type; updatedAt: string; wordList: unknown; profileId?: string | null; profiles?: GetDlpCustomEntryResultCase6ProfilesList | null; uploadStatus?: GetDlpCustomEntryResultCase6UploadStatus | null; } export const GetDlpCustomEntryResultCase6 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: GetDlpCustomEntryResultCase6Type, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional(S.NullOr(GetDlpCustomEntryResultCase6ProfilesList)), uploadStatus: S.optional( S.NullOr(GetDlpCustomEntryResultCase6UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpCustomEntryResultCase6", }) as any as S.Schema; export type GetDlpCustomEntryResult = | GetDlpCustomEntryResultCase0 | GetDlpCustomEntryResultCase1 | GetDlpCustomEntryResultCase2 | GetDlpCustomEntryResultCase3 | GetDlpCustomEntryResultCase4 | GetDlpCustomEntryResultCase5 | GetDlpCustomEntryResultCase6; export const GetDlpCustomEntryResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", "profiles", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "profiles", "uploadStatus", ], [ "id", "confidence", "enabled", "name", "type", "profileId", "profiles", "uploadStatus", "variant", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId", "profiles", "uploadStatus", ], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", "profiles", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "profiles", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", "profiles", "uploadStatus", ], ]), ); export type GetDlpCustomEntryResponse = GetDlpCustomEntryResult; export const GetDlpCustomEntryResponse = /*@__PURE__*/ S.suspend(() => GetDlpCustomEntryResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "GetDlpCustomEntryResponse", }) as any as S.Schema; export interface GetDlpCustomPromptTopicRequest { accountId: string; entryId: string; } export const GetDlpCustomPromptTopicRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), entryId: S.String.pipe(T.Label("entry_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/custom_prompt_topics/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpCustomPromptTopicRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDlpCustomPromptTopicResponse { id: string; createdAt: string; enabled: boolean; name: string; topic: string; updatedAt: string; description?: string | null; profileId?: string | null; } export const GetDlpCustomPromptTopicResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, topic: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpCustomPromptTopicResponse", }) as any as S.Schema; export interface GetDlpDataClassRequest { accountId: string; dataClassId: string; } export const GetDlpDataClassRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), dataClassId: S.String.pipe(T.Label("data_class_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/data_classes/{data_class_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpDataClassRequest", }) as any as S.Schema; export type DlpDataClassesGetResponseDataTagsList = Array; export const DlpDataClassesGetResponseDataTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpDataClassesGetResponseSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export const DlpDataClassesGetResponseSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export type DlpDataClassesGetResponseSensitivityLevelsList = Array; export const DlpDataClassesGetResponseSensitivityLevelsList = /*@__PURE__*/ S.Array( DlpDataClassesCreateRequestSensitivityLevelsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDlpDataClassResponse { id: string; createdAt: string; dataTags: DlpDataClassesGetResponseDataTagsList; expression: string; name: string; sensitivityLevels: DlpDataClassesGetResponseSensitivityLevelsList; updatedAt: string; description?: string | null; } export const GetDlpDataClassResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), dataTags: DlpDataClassesGetResponseDataTagsList.pipe(T.Body("data_tags")), expression: S.String, name: S.String, sensitivityLevels: DlpDataClassesGetResponseSensitivityLevelsList.pipe( T.Body("sensitivity_levels"), ), updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpDataClassResponse", }) as any as S.Schema; export interface GetDlpDatasetRequest { accountId: string; datasetId: string; } export const GetDlpDatasetRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), datasetId: S.String.pipe(T.Label("dataset_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/datasets/{dataset_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpDatasetRequest", }) as any as S.Schema; export type DlpDatasetsGetResponseColumnsItemUploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsGetResponseColumnsItemUploadStatus = /*@__PURE__*/ S.String; export interface DlpDatasetsGetResponseColumnsItem { entryId: string; headerName: string; numCells: number; uploadStatus: DlpDatasetsGetResponseColumnsItemUploadStatus; } export const DlpDatasetsGetResponseColumnsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ entryId: S.String.pipe(T.Body("entry_id")), headerName: S.String.pipe(T.Body("header_name")), numCells: S.Number.pipe(T.Body("num_cells")), uploadStatus: DlpDatasetsGetResponseColumnsItemUploadStatus.pipe( T.Body("upload_status"), ), }), ).annotate({ identifier: "DlpDatasetsGetResponseColumnsItem", }) as any as S.Schema; export type DlpDatasetsGetResponseColumnsList = Array; export const DlpDatasetsGetResponseColumnsList = /*@__PURE__*/ S.Array( DlpDatasetsGetResponseColumnsItem, ) as any as S.Schema; export type DlpDatasetsGetResponseStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsGetResponseStatus = /*@__PURE__*/ S.String; export type DlpDatasetsGetResponseUploadsItemStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsGetResponseUploadsItemStatus = /*@__PURE__*/ S.String; export interface DlpDatasetsGetResponseUploadsItem { numCells: number; status: DlpDatasetsGetResponseUploadsItemStatus; version: number; } export const DlpDatasetsGetResponseUploadsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ numCells: S.Number.pipe(T.Body("num_cells")), status: DlpDatasetsGetResponseUploadsItemStatus, version: S.Number, }), ).annotate({ identifier: "DlpDatasetsGetResponseUploadsItem", }) as any as S.Schema; export type DlpDatasetsGetResponseUploadsList = Array; export const DlpDatasetsGetResponseUploadsList = /*@__PURE__*/ S.Array( DlpDatasetsGetResponseUploadsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDlpDatasetResponse { id: string; columns: DlpDatasetsGetResponseColumnsList; createdAt: string; encodingVersion: number; name: string; numCells: number; secret: boolean; status: DlpDatasetsGetResponseStatus; /** Stores when the dataset was last updated. */ updatedAt: string; uploads: DlpDatasetsGetResponseUploadsList; caseSensitive?: boolean | null; /** The description of the dataset. */ description?: string | null; } export const GetDlpDatasetResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, columns: DlpDatasetsGetResponseColumnsList, createdAt: S.String.pipe(T.Body("created_at")), encodingVersion: S.Number.pipe(T.Body("encoding_version")), name: S.String, numCells: S.Number.pipe(T.Body("num_cells")), secret: S.Boolean, status: DlpDatasetsGetResponseStatus, updatedAt: S.String.pipe(T.Body("updated_at")), uploads: DlpDatasetsGetResponseUploadsList, caseSensitive: S.optional( S.NullOr(S.Boolean).pipe(T.Body("case_sensitive")), ), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpDatasetResponse", }) as any as S.Schema; export interface GetDlpDataTagCategoryRequest { accountId: string; categoryId: string; } export const GetDlpDataTagCategoryRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), categoryId: S.String.pipe(T.Label("category_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/data_tag_categories/{category_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpDataTagCategoryRequest", }) as any as S.Schema; export type DlpDataTagCategoriesGetResponseTagsItem = DlpDataTagCategoriesCreateResponseTagsItem; export const DlpDataTagCategoriesGetResponseTagsItem = DlpDataTagCategoriesCreateResponseTagsItem; export type DlpDataTagCategoriesGetResponseTagsList = Array; export const DlpDataTagCategoriesGetResponseTagsList = /*@__PURE__*/ S.Array( DlpDataTagCategoriesCreateResponseTagsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDlpDataTagCategoryResponse { id: string; createdAt: string; name: string; tags: DlpDataTagCategoriesGetResponseTagsList; updatedAt: string; description?: string | null; templateId?: string | null; } export const GetDlpDataTagCategoryResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), name: S.String, tags: DlpDataTagCategoriesGetResponseTagsList, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), templateId: S.optional(S.NullOr(S.String).pipe(T.Body("template_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpDataTagCategoryResponse", }) as any as S.Schema; export interface GetDlpDataTagCategoryDataTagRequest { accountId: string; categoryId: string; tagId: string; } export const GetDlpDataTagCategoryDataTagRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), categoryId: S.String.pipe(T.Label("category_id")), tagId: S.String.pipe(T.Label("tag_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/data_tag_categories/{category_id}/data_tags/{tag_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpDataTagCategoryDataTagRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDlpDataTagCategoryDataTagResponse { id: string; createdAt: string; name: string; updatedAt: string; description?: string | null; } export const GetDlpDataTagCategoryDataTagResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpDataTagCategoryDataTagResponse", }) as any as S.Schema; export interface GetDlpEmailAccountMappingRequest { accountId: string; } export const GetDlpEmailAccountMappingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/email/account_mapping", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpEmailAccountMappingRequest", }) as any as S.Schema; export type DlpEmailAccountMappingGetResponseAuthRequirementsCase0AllowedMicrosoftOrganizationsList = Array; export const DlpEmailAccountMappingGetResponseAuthRequirementsCase0AllowedMicrosoftOrganizationsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpEmailAccountMappingGetResponseAuthRequirementsCase0Type = "Org"; export const DlpEmailAccountMappingGetResponseAuthRequirementsCase0Type = /*@__PURE__*/ S.String; export interface DlpEmailAccountMappingGetResponseAuthRequirementsCase0 { allowedMicrosoftOrganizations: DlpEmailAccountMappingGetResponseAuthRequirementsCase0AllowedMicrosoftOrganizationsList; type: DlpEmailAccountMappingGetResponseAuthRequirementsCase0Type; } export const DlpEmailAccountMappingGetResponseAuthRequirementsCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedMicrosoftOrganizations: DlpEmailAccountMappingGetResponseAuthRequirementsCase0AllowedMicrosoftOrganizationsList.pipe( T.Body("allowed_microsoft_organizations"), ), type: DlpEmailAccountMappingGetResponseAuthRequirementsCase0Type, }), ).annotate({ identifier: "DlpEmailAccountMappingGetResponseAuthRequirementsCase0", }) as any as S.Schema; export type DlpEmailAccountMappingGetResponseAuthRequirementsTypeType = "NoAuth"; export const DlpEmailAccountMappingGetResponseAuthRequirementsTypeType = /*@__PURE__*/ S.String; export interface DlpEmailAccountMappingGetResponseAuthRequirementsType { type: DlpEmailAccountMappingGetResponseAuthRequirementsTypeType; } export const DlpEmailAccountMappingGetResponseAuthRequirementsType = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpEmailAccountMappingGetResponseAuthRequirementsTypeType, }), ).annotate({ identifier: "DlpEmailAccountMappingGetResponseAuthRequirementsType", }) as any as S.Schema; export type DlpEmailAccountMappingGetResponseAuthRequirements = | DlpEmailAccountMappingGetResponseAuthRequirementsCase0 | DlpEmailAccountMappingGetResponseAuthRequirementsType; export const DlpEmailAccountMappingGetResponseAuthRequirements = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([["allowedMicrosoftOrganizations", "type"], ["type"]]), ); /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDlpEmailAccountMappingResponse { addinIdentifierToken: string; authRequirements: DlpEmailAccountMappingGetResponseAuthRequirements; } export const GetDlpEmailAccountMappingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ addinIdentifierToken: S.String.pipe(T.Body("addin_identifier_token")), authRequirements: DlpEmailAccountMappingGetResponseAuthRequirements.pipe( T.Body("auth_requirements"), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpEmailAccountMappingResponse", }) as any as S.Schema; export interface GetDlpEmailRuleRequest { accountId: string; ruleId: string; } export const GetDlpEmailRuleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ruleId: S.String.pipe(T.Label("rule_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/email/rules/{rule_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpEmailRuleRequest", }) as any as S.Schema; export type DlpEmailRulesGetResponseActionAction = "Block"; export const DlpEmailRulesGetResponseActionAction = /*@__PURE__*/ S.String; export interface DlpEmailRulesGetResponseAction { action: DlpEmailRulesGetResponseActionAction; message?: string | null; } export const DlpEmailRulesGetResponseAction = /*@__PURE__*/ S.suspend(() => S.Struct({ action: DlpEmailRulesGetResponseActionAction, message: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEmailRulesGetResponseAction", }) as any as S.Schema; export type DlpEmailRulesGetResponseConditionsItemOperator = | "InList" | "NotInList" | "MatchRegex" | "NotMatchRegex"; export const DlpEmailRulesGetResponseConditionsItemOperator = /*@__PURE__*/ S.String; export type DlpEmailRulesGetResponseConditionsItemSelector = | "Recipients" | "Sender" | "DLPProfiles"; export const DlpEmailRulesGetResponseConditionsItemSelector = /*@__PURE__*/ S.String; export type DlpEmailRulesGetResponseConditionsItemValueCase0List = Array; export const DlpEmailRulesGetResponseConditionsItemValueCase0List = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpEmailRulesGetResponseConditionsItemValue = | string | DlpEmailRulesGetResponseConditionsItemValueCase0List; export const DlpEmailRulesGetResponseConditionsItemValue = /*@__PURE__*/ S.Unknown.pipe(T.UnionCases([[], []])); export interface DlpEmailRulesGetResponseConditionsItem { operator: DlpEmailRulesGetResponseConditionsItemOperator; selector: DlpEmailRulesGetResponseConditionsItemSelector; value: DlpEmailRulesGetResponseConditionsItemValue; } export const DlpEmailRulesGetResponseConditionsItem = /*@__PURE__*/ S.suspend( () => S.Struct({ operator: DlpEmailRulesGetResponseConditionsItemOperator, selector: DlpEmailRulesGetResponseConditionsItemSelector, value: DlpEmailRulesGetResponseConditionsItemValue, }), ).annotate({ identifier: "DlpEmailRulesGetResponseConditionsItem", }) as any as S.Schema; export type DlpEmailRulesGetResponseConditionsList = Array; export const DlpEmailRulesGetResponseConditionsList = /*@__PURE__*/ S.Array( DlpEmailRulesGetResponseConditionsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDlpEmailRuleResponse { action: DlpEmailRulesGetResponseAction; /** Triggered if all conditions match. */ conditions: DlpEmailRulesGetResponseConditionsList; createdAt: string; enabled: boolean; name: string; priority: number; ruleId: string; updatedAt: string; description?: string | null; } export const GetDlpEmailRuleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ action: DlpEmailRulesGetResponseAction, conditions: DlpEmailRulesGetResponseConditionsList, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, priority: S.Number, ruleId: S.String.pipe(T.Body("rule_id")), updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpEmailRuleResponse", }) as any as S.Schema; export interface GetDlpEntriesIntegrationRequest { accountId: string; entryId: string; } export const GetDlpEntriesIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), entryId: S.String.pipe(T.Label("entry_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/entries/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpEntriesIntegrationRequest", }) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase0PatternValidation = "luhn"; export const GetDlpEntriesIntegrationResultCase0PatternValidation = /*@__PURE__*/ S.String; export interface GetDlpEntriesIntegrationResultCase0Pattern { regex: string; validation?: GetDlpEntriesIntegrationResultCase0PatternValidation | null; } export const GetDlpEntriesIntegrationResultCase0Pattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( S.NullOr(GetDlpEntriesIntegrationResultCase0PatternValidation), ), }), ).annotate({ identifier: "GetDlpEntriesIntegrationResultCase0Pattern", }) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase0Type = "custom"; export const GetDlpEntriesIntegrationResultCase0Type = /*@__PURE__*/ S.String; export type GetDlpEntriesIntegrationResultCase0ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpEntriesIntegrationResultCase0ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpEntriesIntegrationResultCase0ProfilesList = Array; export const GetDlpEntriesIntegrationResultCase0ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase0UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpEntriesIntegrationResultCase0UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpEntriesIntegrationResultCase0 { id: string; createdAt: string; enabled: boolean; name: string; pattern: GetDlpEntriesIntegrationResultCase0Pattern; type: GetDlpEntriesIntegrationResultCase0Type; updatedAt: string; description?: string | null; profileId?: string | null; profiles?: GetDlpEntriesIntegrationResultCase0ProfilesList | null; uploadStatus?: GetDlpEntriesIntegrationResultCase0UploadStatus | null; } export const GetDlpEntriesIntegrationResultCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: GetDlpEntriesIntegrationResultCase0Pattern, type: GetDlpEntriesIntegrationResultCase0Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional( S.NullOr(GetDlpEntriesIntegrationResultCase0ProfilesList), ), uploadStatus: S.optional( S.NullOr(GetDlpEntriesIntegrationResultCase0UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpEntriesIntegrationResultCase0", }) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase1Type = "custom_prompt_topic"; export const GetDlpEntriesIntegrationResultCase1Type = /*@__PURE__*/ S.String; export type GetDlpEntriesIntegrationResultCase1ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpEntriesIntegrationResultCase1ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpEntriesIntegrationResultCase1ProfilesList = Array; export const GetDlpEntriesIntegrationResultCase1ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase1UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpEntriesIntegrationResultCase1UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpEntriesIntegrationResultCase1 { id: string; createdAt: string; enabled: boolean; name: string; type: GetDlpEntriesIntegrationResultCase1Type; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; profiles?: GetDlpEntriesIntegrationResultCase1ProfilesList | null; uploadStatus?: GetDlpEntriesIntegrationResultCase1UploadStatus | null; } export const GetDlpEntriesIntegrationResultCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: GetDlpEntriesIntegrationResultCase1Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profiles: S.optional( S.NullOr(GetDlpEntriesIntegrationResultCase1ProfilesList), ), uploadStatus: S.optional( S.NullOr(GetDlpEntriesIntegrationResultCase1UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpEntriesIntegrationResultCase1", }) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export const GetDlpEntriesIntegrationResultCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export type GetDlpEntriesIntegrationResultCase2Type = "predefined"; export const GetDlpEntriesIntegrationResultCase2Type = /*@__PURE__*/ S.String; export type GetDlpEntriesIntegrationResultCase2ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpEntriesIntegrationResultCase2ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpEntriesIntegrationResultCase2ProfilesList = Array; export const GetDlpEntriesIntegrationResultCase2ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase2UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpEntriesIntegrationResultCase2UploadStatus = /*@__PURE__*/ S.String; export type GetDlpEntriesIntegrationResultCase2VariantCase0TopicType = | "Intent" | "Content"; export const GetDlpEntriesIntegrationResultCase2VariantCase0TopicType = /*@__PURE__*/ S.String; export type GetDlpEntriesIntegrationResultCase2VariantCase0Type = "PromptTopic"; export const GetDlpEntriesIntegrationResultCase2VariantCase0Type = /*@__PURE__*/ S.String; export interface GetDlpEntriesIntegrationResultCase2VariantCase0 { topicType: GetDlpEntriesIntegrationResultCase2VariantCase0TopicType; type: GetDlpEntriesIntegrationResultCase2VariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const GetDlpEntriesIntegrationResultCase2VariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: GetDlpEntriesIntegrationResultCase2VariantCase0TopicType.pipe( T.Body("topic_type"), ), type: GetDlpEntriesIntegrationResultCase2VariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "GetDlpEntriesIntegrationResultCase2VariantCase0", }) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase2VariantCase1Type = "General"; export const GetDlpEntriesIntegrationResultCase2VariantCase1Type = /*@__PURE__*/ S.String; export interface GetDlpEntriesIntegrationResultCase2VariantCase1 { type: GetDlpEntriesIntegrationResultCase2VariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const GetDlpEntriesIntegrationResultCase2VariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: GetDlpEntriesIntegrationResultCase2VariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "GetDlpEntriesIntegrationResultCase2VariantCase1", }) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase2Variant = | GetDlpEntriesIntegrationResultCase2VariantCase0 | GetDlpEntriesIntegrationResultCase2VariantCase1; export const GetDlpEntriesIntegrationResultCase2Variant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface GetDlpEntriesIntegrationResultCase2 { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: GetDlpEntriesIntegrationResultCase2Type; profileId?: string | null; profiles?: GetDlpEntriesIntegrationResultCase2ProfilesList | null; uploadStatus?: GetDlpEntriesIntegrationResultCase2UploadStatus | null; /** A Predefined AI prompt classification topic entry. */ variant?: GetDlpEntriesIntegrationResultCase2Variant | null; } export const GetDlpEntriesIntegrationResultCase2 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: GetDlpEntriesIntegrationResultCase2Type, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional( S.NullOr(GetDlpEntriesIntegrationResultCase2ProfilesList), ), uploadStatus: S.optional( S.NullOr(GetDlpEntriesIntegrationResultCase2UploadStatus).pipe( T.Body("upload_status"), ), ), variant: S.optional(S.NullOr(GetDlpEntriesIntegrationResultCase2Variant)), }), ).annotate({ identifier: "GetDlpEntriesIntegrationResultCase2", }) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase3Type = "integration"; export const GetDlpEntriesIntegrationResultCase3Type = /*@__PURE__*/ S.String; export type GetDlpEntriesIntegrationResultCase3ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpEntriesIntegrationResultCase3ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpEntriesIntegrationResultCase3ProfilesList = Array; export const GetDlpEntriesIntegrationResultCase3ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase3UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpEntriesIntegrationResultCase3UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpEntriesIntegrationResultCase3 { id: string; createdAt: string; enabled: boolean; name: string; type: GetDlpEntriesIntegrationResultCase3Type; updatedAt: string; profileId?: string | null; profiles?: GetDlpEntriesIntegrationResultCase3ProfilesList | null; uploadStatus?: GetDlpEntriesIntegrationResultCase3UploadStatus | null; } export const GetDlpEntriesIntegrationResultCase3 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: GetDlpEntriesIntegrationResultCase3Type, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional( S.NullOr(GetDlpEntriesIntegrationResultCase3ProfilesList), ), uploadStatus: S.optional( S.NullOr(GetDlpEntriesIntegrationResultCase3UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpEntriesIntegrationResultCase3", }) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase4Type = "exact_data"; export const GetDlpEntriesIntegrationResultCase4Type = /*@__PURE__*/ S.String; export type GetDlpEntriesIntegrationResultCase4ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpEntriesIntegrationResultCase4ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpEntriesIntegrationResultCase4ProfilesList = Array; export const GetDlpEntriesIntegrationResultCase4ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase4UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpEntriesIntegrationResultCase4UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpEntriesIntegrationResultCase4 { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: GetDlpEntriesIntegrationResultCase4Type; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; profiles?: GetDlpEntriesIntegrationResultCase4ProfilesList | null; uploadStatus?: GetDlpEntriesIntegrationResultCase4UploadStatus | null; } export const GetDlpEntriesIntegrationResultCase4 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: GetDlpEntriesIntegrationResultCase4Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profiles: S.optional( S.NullOr(GetDlpEntriesIntegrationResultCase4ProfilesList), ), uploadStatus: S.optional( S.NullOr(GetDlpEntriesIntegrationResultCase4UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpEntriesIntegrationResultCase4", }) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase5Type = "document_fingerprint"; export const GetDlpEntriesIntegrationResultCase5Type = /*@__PURE__*/ S.String; export type GetDlpEntriesIntegrationResultCase5ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpEntriesIntegrationResultCase5ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpEntriesIntegrationResultCase5ProfilesList = Array; export const GetDlpEntriesIntegrationResultCase5ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase5UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpEntriesIntegrationResultCase5UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpEntriesIntegrationResultCase5 { id: string; createdAt: string; enabled: boolean; name: string; type: GetDlpEntriesIntegrationResultCase5Type; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; profiles?: GetDlpEntriesIntegrationResultCase5ProfilesList | null; uploadStatus?: GetDlpEntriesIntegrationResultCase5UploadStatus | null; } export const GetDlpEntriesIntegrationResultCase5 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: GetDlpEntriesIntegrationResultCase5Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profiles: S.optional( S.NullOr(GetDlpEntriesIntegrationResultCase5ProfilesList), ), uploadStatus: S.optional( S.NullOr(GetDlpEntriesIntegrationResultCase5UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpEntriesIntegrationResultCase5", }) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase6Type = "word_list"; export const GetDlpEntriesIntegrationResultCase6Type = /*@__PURE__*/ S.String; export type GetDlpEntriesIntegrationResultCase6ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpEntriesIntegrationResultCase6ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpEntriesIntegrationResultCase6ProfilesList = Array; export const GetDlpEntriesIntegrationResultCase6ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpEntriesIntegrationResultCase6UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpEntriesIntegrationResultCase6UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpEntriesIntegrationResultCase6 { id: string; createdAt: string; enabled: boolean; name: string; type: GetDlpEntriesIntegrationResultCase6Type; updatedAt: string; wordList: unknown; profileId?: string | null; profiles?: GetDlpEntriesIntegrationResultCase6ProfilesList | null; uploadStatus?: GetDlpEntriesIntegrationResultCase6UploadStatus | null; } export const GetDlpEntriesIntegrationResultCase6 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: GetDlpEntriesIntegrationResultCase6Type, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional( S.NullOr(GetDlpEntriesIntegrationResultCase6ProfilesList), ), uploadStatus: S.optional( S.NullOr(GetDlpEntriesIntegrationResultCase6UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpEntriesIntegrationResultCase6", }) as any as S.Schema; export type GetDlpEntriesIntegrationResult = | GetDlpEntriesIntegrationResultCase0 | GetDlpEntriesIntegrationResultCase1 | GetDlpEntriesIntegrationResultCase2 | GetDlpEntriesIntegrationResultCase3 | GetDlpEntriesIntegrationResultCase4 | GetDlpEntriesIntegrationResultCase5 | GetDlpEntriesIntegrationResultCase6; export const GetDlpEntriesIntegrationResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", "profiles", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "profiles", "uploadStatus", ], [ "id", "confidence", "enabled", "name", "type", "profileId", "profiles", "uploadStatus", "variant", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId", "profiles", "uploadStatus", ], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", "profiles", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "profiles", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", "profiles", "uploadStatus", ], ]), ); export type GetDlpEntriesIntegrationResponse = GetDlpEntriesIntegrationResult; export const GetDlpEntriesIntegrationResponse = /*@__PURE__*/ S.suspend(() => GetDlpEntriesIntegrationResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "GetDlpEntriesIntegrationResponse", }) as any as S.Schema; export interface GetDlpEntriesPredefinedRequest { accountId: string; entryId: string; } export const GetDlpEntriesPredefinedRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), entryId: S.String.pipe(T.Label("entry_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/entries/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpEntriesPredefinedRequest", }) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase0PatternValidation = "luhn"; export const GetDlpEntriesPredefinedResultCase0PatternValidation = /*@__PURE__*/ S.String; export interface GetDlpEntriesPredefinedResultCase0Pattern { regex: string; validation?: GetDlpEntriesPredefinedResultCase0PatternValidation | null; } export const GetDlpEntriesPredefinedResultCase0Pattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( S.NullOr(GetDlpEntriesPredefinedResultCase0PatternValidation), ), }), ).annotate({ identifier: "GetDlpEntriesPredefinedResultCase0Pattern", }) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase0Type = "custom"; export const GetDlpEntriesPredefinedResultCase0Type = /*@__PURE__*/ S.String; export type GetDlpEntriesPredefinedResultCase0ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpEntriesPredefinedResultCase0ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpEntriesPredefinedResultCase0ProfilesList = Array; export const GetDlpEntriesPredefinedResultCase0ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase0UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpEntriesPredefinedResultCase0UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpEntriesPredefinedResultCase0 { id: string; createdAt: string; enabled: boolean; name: string; pattern: GetDlpEntriesPredefinedResultCase0Pattern; type: GetDlpEntriesPredefinedResultCase0Type; updatedAt: string; description?: string | null; profileId?: string | null; profiles?: GetDlpEntriesPredefinedResultCase0ProfilesList | null; uploadStatus?: GetDlpEntriesPredefinedResultCase0UploadStatus | null; } export const GetDlpEntriesPredefinedResultCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: GetDlpEntriesPredefinedResultCase0Pattern, type: GetDlpEntriesPredefinedResultCase0Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional( S.NullOr(GetDlpEntriesPredefinedResultCase0ProfilesList), ), uploadStatus: S.optional( S.NullOr(GetDlpEntriesPredefinedResultCase0UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpEntriesPredefinedResultCase0", }) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase1Type = "custom_prompt_topic"; export const GetDlpEntriesPredefinedResultCase1Type = /*@__PURE__*/ S.String; export type GetDlpEntriesPredefinedResultCase1ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpEntriesPredefinedResultCase1ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpEntriesPredefinedResultCase1ProfilesList = Array; export const GetDlpEntriesPredefinedResultCase1ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase1UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpEntriesPredefinedResultCase1UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpEntriesPredefinedResultCase1 { id: string; createdAt: string; enabled: boolean; name: string; type: GetDlpEntriesPredefinedResultCase1Type; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; profiles?: GetDlpEntriesPredefinedResultCase1ProfilesList | null; uploadStatus?: GetDlpEntriesPredefinedResultCase1UploadStatus | null; } export const GetDlpEntriesPredefinedResultCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: GetDlpEntriesPredefinedResultCase1Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profiles: S.optional( S.NullOr(GetDlpEntriesPredefinedResultCase1ProfilesList), ), uploadStatus: S.optional( S.NullOr(GetDlpEntriesPredefinedResultCase1UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpEntriesPredefinedResultCase1", }) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export const GetDlpEntriesPredefinedResultCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export type GetDlpEntriesPredefinedResultCase2Type = "predefined"; export const GetDlpEntriesPredefinedResultCase2Type = /*@__PURE__*/ S.String; export type GetDlpEntriesPredefinedResultCase2ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpEntriesPredefinedResultCase2ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpEntriesPredefinedResultCase2ProfilesList = Array; export const GetDlpEntriesPredefinedResultCase2ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase2UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpEntriesPredefinedResultCase2UploadStatus = /*@__PURE__*/ S.String; export type GetDlpEntriesPredefinedResultCase2VariantCase0TopicType = | "Intent" | "Content"; export const GetDlpEntriesPredefinedResultCase2VariantCase0TopicType = /*@__PURE__*/ S.String; export type GetDlpEntriesPredefinedResultCase2VariantCase0Type = "PromptTopic"; export const GetDlpEntriesPredefinedResultCase2VariantCase0Type = /*@__PURE__*/ S.String; export interface GetDlpEntriesPredefinedResultCase2VariantCase0 { topicType: GetDlpEntriesPredefinedResultCase2VariantCase0TopicType; type: GetDlpEntriesPredefinedResultCase2VariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const GetDlpEntriesPredefinedResultCase2VariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: GetDlpEntriesPredefinedResultCase2VariantCase0TopicType.pipe( T.Body("topic_type"), ), type: GetDlpEntriesPredefinedResultCase2VariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "GetDlpEntriesPredefinedResultCase2VariantCase0", }) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase2VariantCase1Type = "General"; export const GetDlpEntriesPredefinedResultCase2VariantCase1Type = /*@__PURE__*/ S.String; export interface GetDlpEntriesPredefinedResultCase2VariantCase1 { type: GetDlpEntriesPredefinedResultCase2VariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const GetDlpEntriesPredefinedResultCase2VariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: GetDlpEntriesPredefinedResultCase2VariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "GetDlpEntriesPredefinedResultCase2VariantCase1", }) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase2Variant = | GetDlpEntriesPredefinedResultCase2VariantCase0 | GetDlpEntriesPredefinedResultCase2VariantCase1; export const GetDlpEntriesPredefinedResultCase2Variant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface GetDlpEntriesPredefinedResultCase2 { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: GetDlpEntriesPredefinedResultCase2Type; profileId?: string | null; profiles?: GetDlpEntriesPredefinedResultCase2ProfilesList | null; uploadStatus?: GetDlpEntriesPredefinedResultCase2UploadStatus | null; /** A Predefined AI prompt classification topic entry. */ variant?: GetDlpEntriesPredefinedResultCase2Variant | null; } export const GetDlpEntriesPredefinedResultCase2 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: GetDlpEntriesPredefinedResultCase2Type, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional( S.NullOr(GetDlpEntriesPredefinedResultCase2ProfilesList), ), uploadStatus: S.optional( S.NullOr(GetDlpEntriesPredefinedResultCase2UploadStatus).pipe( T.Body("upload_status"), ), ), variant: S.optional(S.NullOr(GetDlpEntriesPredefinedResultCase2Variant)), }), ).annotate({ identifier: "GetDlpEntriesPredefinedResultCase2", }) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase3Type = "integration"; export const GetDlpEntriesPredefinedResultCase3Type = /*@__PURE__*/ S.String; export type GetDlpEntriesPredefinedResultCase3ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpEntriesPredefinedResultCase3ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpEntriesPredefinedResultCase3ProfilesList = Array; export const GetDlpEntriesPredefinedResultCase3ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase3UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpEntriesPredefinedResultCase3UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpEntriesPredefinedResultCase3 { id: string; createdAt: string; enabled: boolean; name: string; type: GetDlpEntriesPredefinedResultCase3Type; updatedAt: string; profileId?: string | null; profiles?: GetDlpEntriesPredefinedResultCase3ProfilesList | null; uploadStatus?: GetDlpEntriesPredefinedResultCase3UploadStatus | null; } export const GetDlpEntriesPredefinedResultCase3 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: GetDlpEntriesPredefinedResultCase3Type, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional( S.NullOr(GetDlpEntriesPredefinedResultCase3ProfilesList), ), uploadStatus: S.optional( S.NullOr(GetDlpEntriesPredefinedResultCase3UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpEntriesPredefinedResultCase3", }) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase4Type = "exact_data"; export const GetDlpEntriesPredefinedResultCase4Type = /*@__PURE__*/ S.String; export type GetDlpEntriesPredefinedResultCase4ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpEntriesPredefinedResultCase4ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpEntriesPredefinedResultCase4ProfilesList = Array; export const GetDlpEntriesPredefinedResultCase4ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase4UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpEntriesPredefinedResultCase4UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpEntriesPredefinedResultCase4 { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: GetDlpEntriesPredefinedResultCase4Type; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; profiles?: GetDlpEntriesPredefinedResultCase4ProfilesList | null; uploadStatus?: GetDlpEntriesPredefinedResultCase4UploadStatus | null; } export const GetDlpEntriesPredefinedResultCase4 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: GetDlpEntriesPredefinedResultCase4Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profiles: S.optional( S.NullOr(GetDlpEntriesPredefinedResultCase4ProfilesList), ), uploadStatus: S.optional( S.NullOr(GetDlpEntriesPredefinedResultCase4UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpEntriesPredefinedResultCase4", }) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase5Type = "document_fingerprint"; export const GetDlpEntriesPredefinedResultCase5Type = /*@__PURE__*/ S.String; export type GetDlpEntriesPredefinedResultCase5ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpEntriesPredefinedResultCase5ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpEntriesPredefinedResultCase5ProfilesList = Array; export const GetDlpEntriesPredefinedResultCase5ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase5UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpEntriesPredefinedResultCase5UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpEntriesPredefinedResultCase5 { id: string; createdAt: string; enabled: boolean; name: string; type: GetDlpEntriesPredefinedResultCase5Type; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; profiles?: GetDlpEntriesPredefinedResultCase5ProfilesList | null; uploadStatus?: GetDlpEntriesPredefinedResultCase5UploadStatus | null; } export const GetDlpEntriesPredefinedResultCase5 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: GetDlpEntriesPredefinedResultCase5Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profiles: S.optional( S.NullOr(GetDlpEntriesPredefinedResultCase5ProfilesList), ), uploadStatus: S.optional( S.NullOr(GetDlpEntriesPredefinedResultCase5UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpEntriesPredefinedResultCase5", }) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase6Type = "word_list"; export const GetDlpEntriesPredefinedResultCase6Type = /*@__PURE__*/ S.String; export type GetDlpEntriesPredefinedResultCase6ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const GetDlpEntriesPredefinedResultCase6ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type GetDlpEntriesPredefinedResultCase6ProfilesList = Array; export const GetDlpEntriesPredefinedResultCase6ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type GetDlpEntriesPredefinedResultCase6UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const GetDlpEntriesPredefinedResultCase6UploadStatus = /*@__PURE__*/ S.String; export interface GetDlpEntriesPredefinedResultCase6 { id: string; createdAt: string; enabled: boolean; name: string; type: GetDlpEntriesPredefinedResultCase6Type; updatedAt: string; wordList: unknown; profileId?: string | null; profiles?: GetDlpEntriesPredefinedResultCase6ProfilesList | null; uploadStatus?: GetDlpEntriesPredefinedResultCase6UploadStatus | null; } export const GetDlpEntriesPredefinedResultCase6 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: GetDlpEntriesPredefinedResultCase6Type, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional( S.NullOr(GetDlpEntriesPredefinedResultCase6ProfilesList), ), uploadStatus: S.optional( S.NullOr(GetDlpEntriesPredefinedResultCase6UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "GetDlpEntriesPredefinedResultCase6", }) as any as S.Schema; export type GetDlpEntriesPredefinedResult = | GetDlpEntriesPredefinedResultCase0 | GetDlpEntriesPredefinedResultCase1 | GetDlpEntriesPredefinedResultCase2 | GetDlpEntriesPredefinedResultCase3 | GetDlpEntriesPredefinedResultCase4 | GetDlpEntriesPredefinedResultCase5 | GetDlpEntriesPredefinedResultCase6; export const GetDlpEntriesPredefinedResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", "profiles", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "profiles", "uploadStatus", ], [ "id", "confidence", "enabled", "name", "type", "profileId", "profiles", "uploadStatus", "variant", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId", "profiles", "uploadStatus", ], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", "profiles", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "profiles", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", "profiles", "uploadStatus", ], ]), ); export type GetDlpEntriesPredefinedResponse = GetDlpEntriesPredefinedResult; export const GetDlpEntriesPredefinedResponse = /*@__PURE__*/ S.suspend(() => GetDlpEntriesPredefinedResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "GetDlpEntriesPredefinedResponse", }) as any as S.Schema; export interface GetDlpEntryRequest { accountId: string; entryId: string; } export const GetDlpEntryRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), entryId: S.String.pipe(T.Label("entry_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/entries/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpEntryRequest", }) as any as S.Schema; export type DlpEntriesGetResultCase0PatternValidation = "luhn"; export const DlpEntriesGetResultCase0PatternValidation = /*@__PURE__*/ S.String; export interface DlpEntriesGetResultCase0Pattern { regex: string; validation?: DlpEntriesGetResultCase0PatternValidation | null; } export const DlpEntriesGetResultCase0Pattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional(S.NullOr(DlpEntriesGetResultCase0PatternValidation)), }), ).annotate({ identifier: "DlpEntriesGetResultCase0Pattern", }) as any as S.Schema; export type DlpEntriesGetResultCase0Type = "custom"; export const DlpEntriesGetResultCase0Type = /*@__PURE__*/ S.String; export type DlpEntriesGetResultCase0ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const DlpEntriesGetResultCase0ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type DlpEntriesGetResultCase0ProfilesList = Array; export const DlpEntriesGetResultCase0ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type DlpEntriesGetResultCase0UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpEntriesGetResultCase0UploadStatus = /*@__PURE__*/ S.String; export interface DlpEntriesGetResultCase0 { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpEntriesGetResultCase0Pattern; type: DlpEntriesGetResultCase0Type; updatedAt: string; description?: string | null; profileId?: string | null; profiles?: DlpEntriesGetResultCase0ProfilesList | null; uploadStatus?: DlpEntriesGetResultCase0UploadStatus | null; } export const DlpEntriesGetResultCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpEntriesGetResultCase0Pattern, type: DlpEntriesGetResultCase0Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional(S.NullOr(DlpEntriesGetResultCase0ProfilesList)), uploadStatus: S.optional( S.NullOr(DlpEntriesGetResultCase0UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "DlpEntriesGetResultCase0", }) as any as S.Schema; export type DlpEntriesGetResultCase1Type = "custom_prompt_topic"; export const DlpEntriesGetResultCase1Type = /*@__PURE__*/ S.String; export type DlpEntriesGetResultCase1ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const DlpEntriesGetResultCase1ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type DlpEntriesGetResultCase1ProfilesList = Array; export const DlpEntriesGetResultCase1ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type DlpEntriesGetResultCase1UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpEntriesGetResultCase1UploadStatus = /*@__PURE__*/ S.String; export interface DlpEntriesGetResultCase1 { id: string; createdAt: string; enabled: boolean; name: string; type: DlpEntriesGetResultCase1Type; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; profiles?: DlpEntriesGetResultCase1ProfilesList | null; uploadStatus?: DlpEntriesGetResultCase1UploadStatus | null; } export const DlpEntriesGetResultCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpEntriesGetResultCase1Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profiles: S.optional(S.NullOr(DlpEntriesGetResultCase1ProfilesList)), uploadStatus: S.optional( S.NullOr(DlpEntriesGetResultCase1UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "DlpEntriesGetResultCase1", }) as any as S.Schema; export type DlpEntriesGetResultCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpEntriesGetResultCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpEntriesGetResultCase2Type = "predefined"; export const DlpEntriesGetResultCase2Type = /*@__PURE__*/ S.String; export type DlpEntriesGetResultCase2ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const DlpEntriesGetResultCase2ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type DlpEntriesGetResultCase2ProfilesList = Array; export const DlpEntriesGetResultCase2ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type DlpEntriesGetResultCase2UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpEntriesGetResultCase2UploadStatus = /*@__PURE__*/ S.String; export type DlpEntriesGetResultCase2VariantCase0TopicType = | "Intent" | "Content"; export const DlpEntriesGetResultCase2VariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpEntriesGetResultCase2VariantCase0Type = "PromptTopic"; export const DlpEntriesGetResultCase2VariantCase0Type = /*@__PURE__*/ S.String; export interface DlpEntriesGetResultCase2VariantCase0 { topicType: DlpEntriesGetResultCase2VariantCase0TopicType; type: DlpEntriesGetResultCase2VariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpEntriesGetResultCase2VariantCase0 = /*@__PURE__*/ S.suspend( () => S.Struct({ topicType: DlpEntriesGetResultCase2VariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpEntriesGetResultCase2VariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEntriesGetResultCase2VariantCase0", }) as any as S.Schema; export type DlpEntriesGetResultCase2VariantCase1Type = "General"; export const DlpEntriesGetResultCase2VariantCase1Type = /*@__PURE__*/ S.String; export interface DlpEntriesGetResultCase2VariantCase1 { type: DlpEntriesGetResultCase2VariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpEntriesGetResultCase2VariantCase1 = /*@__PURE__*/ S.suspend( () => S.Struct({ type: DlpEntriesGetResultCase2VariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEntriesGetResultCase2VariantCase1", }) as any as S.Schema; export type DlpEntriesGetResultCase2Variant = | DlpEntriesGetResultCase2VariantCase0 | DlpEntriesGetResultCase2VariantCase1; export const DlpEntriesGetResultCase2Variant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpEntriesGetResultCase2 { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpEntriesGetResultCase2Type; profileId?: string | null; profiles?: DlpEntriesGetResultCase2ProfilesList | null; uploadStatus?: DlpEntriesGetResultCase2UploadStatus | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpEntriesGetResultCase2Variant | null; } export const DlpEntriesGetResultCase2 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpEntriesGetResultCase2Type, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional(S.NullOr(DlpEntriesGetResultCase2ProfilesList)), uploadStatus: S.optional( S.NullOr(DlpEntriesGetResultCase2UploadStatus).pipe( T.Body("upload_status"), ), ), variant: S.optional(S.NullOr(DlpEntriesGetResultCase2Variant)), }), ).annotate({ identifier: "DlpEntriesGetResultCase2", }) as any as S.Schema; export type DlpEntriesGetResultCase3Type = "integration"; export const DlpEntriesGetResultCase3Type = /*@__PURE__*/ S.String; export type DlpEntriesGetResultCase3ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const DlpEntriesGetResultCase3ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type DlpEntriesGetResultCase3ProfilesList = Array; export const DlpEntriesGetResultCase3ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type DlpEntriesGetResultCase3UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpEntriesGetResultCase3UploadStatus = /*@__PURE__*/ S.String; export interface DlpEntriesGetResultCase3 { id: string; createdAt: string; enabled: boolean; name: string; type: DlpEntriesGetResultCase3Type; updatedAt: string; profileId?: string | null; profiles?: DlpEntriesGetResultCase3ProfilesList | null; uploadStatus?: DlpEntriesGetResultCase3UploadStatus | null; } export const DlpEntriesGetResultCase3 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpEntriesGetResultCase3Type, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional(S.NullOr(DlpEntriesGetResultCase3ProfilesList)), uploadStatus: S.optional( S.NullOr(DlpEntriesGetResultCase3UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "DlpEntriesGetResultCase3", }) as any as S.Schema; export type DlpEntriesGetResultCase4Type = "exact_data"; export const DlpEntriesGetResultCase4Type = /*@__PURE__*/ S.String; export type DlpEntriesGetResultCase4ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const DlpEntriesGetResultCase4ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type DlpEntriesGetResultCase4ProfilesList = Array; export const DlpEntriesGetResultCase4ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type DlpEntriesGetResultCase4UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpEntriesGetResultCase4UploadStatus = /*@__PURE__*/ S.String; export interface DlpEntriesGetResultCase4 { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpEntriesGetResultCase4Type; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; profiles?: DlpEntriesGetResultCase4ProfilesList | null; uploadStatus?: DlpEntriesGetResultCase4UploadStatus | null; } export const DlpEntriesGetResultCase4 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpEntriesGetResultCase4Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profiles: S.optional(S.NullOr(DlpEntriesGetResultCase4ProfilesList)), uploadStatus: S.optional( S.NullOr(DlpEntriesGetResultCase4UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "DlpEntriesGetResultCase4", }) as any as S.Schema; export type DlpEntriesGetResultCase5Type = "document_fingerprint"; export const DlpEntriesGetResultCase5Type = /*@__PURE__*/ S.String; export type DlpEntriesGetResultCase5ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const DlpEntriesGetResultCase5ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type DlpEntriesGetResultCase5ProfilesList = Array; export const DlpEntriesGetResultCase5ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type DlpEntriesGetResultCase5UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpEntriesGetResultCase5UploadStatus = /*@__PURE__*/ S.String; export interface DlpEntriesGetResultCase5 { id: string; createdAt: string; enabled: boolean; name: string; type: DlpEntriesGetResultCase5Type; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; profiles?: DlpEntriesGetResultCase5ProfilesList | null; uploadStatus?: DlpEntriesGetResultCase5UploadStatus | null; } export const DlpEntriesGetResultCase5 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpEntriesGetResultCase5Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profiles: S.optional(S.NullOr(DlpEntriesGetResultCase5ProfilesList)), uploadStatus: S.optional( S.NullOr(DlpEntriesGetResultCase5UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "DlpEntriesGetResultCase5", }) as any as S.Schema; export type DlpEntriesGetResultCase6Type = "word_list"; export const DlpEntriesGetResultCase6Type = /*@__PURE__*/ S.String; export type DlpEntriesGetResultCase6ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export const DlpEntriesGetResultCase6ProfilesItem = GetDlpCustomEntryResultCase0ProfilesItem; export type DlpEntriesGetResultCase6ProfilesList = Array; export const DlpEntriesGetResultCase6ProfilesList = /*@__PURE__*/ S.Array( GetDlpCustomEntryResultCase0ProfilesItem, ) as any as S.Schema; export type DlpEntriesGetResultCase6UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpEntriesGetResultCase6UploadStatus = /*@__PURE__*/ S.String; export interface DlpEntriesGetResultCase6 { id: string; createdAt: string; enabled: boolean; name: string; type: DlpEntriesGetResultCase6Type; updatedAt: string; wordList: unknown; profileId?: string | null; profiles?: DlpEntriesGetResultCase6ProfilesList | null; uploadStatus?: DlpEntriesGetResultCase6UploadStatus | null; } export const DlpEntriesGetResultCase6 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpEntriesGetResultCase6Type, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), profiles: S.optional(S.NullOr(DlpEntriesGetResultCase6ProfilesList)), uploadStatus: S.optional( S.NullOr(DlpEntriesGetResultCase6UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "DlpEntriesGetResultCase6", }) as any as S.Schema; export type DlpEntriesGetResult = | DlpEntriesGetResultCase0 | DlpEntriesGetResultCase1 | DlpEntriesGetResultCase2 | DlpEntriesGetResultCase3 | DlpEntriesGetResultCase4 | DlpEntriesGetResultCase5 | DlpEntriesGetResultCase6; export const DlpEntriesGetResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", "profiles", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "profiles", "uploadStatus", ], [ "id", "confidence", "enabled", "name", "type", "profileId", "profiles", "uploadStatus", "variant", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId", "profiles", "uploadStatus", ], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", "profiles", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "profiles", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", "profiles", "uploadStatus", ], ]), ); export type GetDlpEntryResponse = DlpEntriesGetResult; export const GetDlpEntryResponse = /*@__PURE__*/ S.suspend(() => DlpEntriesGetResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "GetDlpEntryResponse", }) as any as S.Schema; export interface GetDlpPayloadLogRequest { accountId: string; } export const GetDlpPayloadLogRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/payload_log", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpPayloadLogRequest", }) as any as S.Schema; export type DlpPayloadLogsGetResponseMaskingLevel = | "full" | "partial" | "clear" | "default"; export const DlpPayloadLogsGetResponseMaskingLevel = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDlpPayloadLogResponse { updatedAt: string; /** Masking level for payload logs. */ maskingLevel?: DlpPayloadLogsGetResponseMaskingLevel | null; /** Base64-encoded public key for encrypting payload logs. Null when payload logging is disabled. */ publicKey?: string | null; } export const GetDlpPayloadLogResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ updatedAt: S.String.pipe(T.Body("updated_at")), maskingLevel: S.optional( S.NullOr(DlpPayloadLogsGetResponseMaskingLevel).pipe( T.Body("masking_level"), ), ), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpPayloadLogResponse", }) as any as S.Schema; export interface GetDlpProfileRequest { accountId: string; profileId: string; } export const GetDlpProfileRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), profileId: S.String.pipe(T.Label("profile_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/profiles/{profile_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpProfileRequest", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileType = "custom"; export const DlpProfilesGetResultCustomProfileType = /*@__PURE__*/ S.String; export type DlpProfilesGetResultCustomProfileConfidenceThreshold = | "low" | "medium" | "high" | "very_high"; export const DlpProfilesGetResultCustomProfileConfidenceThreshold = /*@__PURE__*/ S.String; export type DlpProfilesGetResultCustomProfileContextAwarenessSkip = DlpProfilesCustomCreateRequestContextAwarenessSkip; export const DlpProfilesGetResultCustomProfileContextAwarenessSkip = DlpProfilesCustomCreateRequestContextAwarenessSkip; export type DlpProfilesGetResultCustomProfileContextAwareness = DlpProfilesCustomCreateRequestContextAwareness; export const DlpProfilesGetResultCustomProfileContextAwareness = DlpProfilesCustomCreateRequestContextAwareness; export type DlpProfilesGetResultCustomProfileDataClassesList = Array; export const DlpProfilesGetResultCustomProfileDataClassesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesGetResultCustomProfileDataTagsList = Array; export const DlpProfilesGetResultCustomProfileDataTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPatternValidation = "luhn"; export const DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPatternValidation = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPattern { regex: string; validation?: DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPatternValidation | null; } export const DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( S.NullOr( DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPatternValidation, ), ), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPattern", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileEntriesItemCustomEntryType = "custom"; export const DlpProfilesGetResultCustomProfileEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesGetResultCustomProfileEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesGetResultCustomProfileEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesGetResultCustomProfileEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesGetResultCustomProfileEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultCustomProfileEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesGetResultCustomProfileEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultCustomProfileEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariant = | DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0 | DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesGetResultCustomProfileEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultCustomProfileEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesGetResultCustomProfileEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultCustomProfileEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesGetResultCustomProfileEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesGetResultCustomProfileEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesGetResultCustomProfileEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesGetResultCustomProfileEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesGetResultCustomProfileEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultCustomProfileEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesGetResultCustomProfileEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultCustomProfileEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileEntriesItemWordListEntryType = "word_list"; export const DlpProfilesGetResultCustomProfileEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultCustomProfileEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesGetResultCustomProfileEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultCustomProfileEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileEntriesItem = | DlpProfilesGetResultCustomProfileEntriesItemCustomEntry | DlpProfilesGetResultCustomProfileEntriesItemCustomPromptTopicEntry | DlpProfilesGetResultCustomProfileEntriesItemPredefinedEntry | DlpProfilesGetResultCustomProfileEntriesItemIntegrationEntry | DlpProfilesGetResultCustomProfileEntriesItemExactDataEntry | DlpProfilesGetResultCustomProfileEntriesItemDocumentFingerprintEntry | DlpProfilesGetResultCustomProfileEntriesItemWordListEntry; export const DlpProfilesGetResultCustomProfileEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesGetResultCustomProfileEntriesList = Array; export const DlpProfilesGetResultCustomProfileEntriesList = /*@__PURE__*/ S.Array( DlpProfilesGetResultCustomProfileEntriesItem, ) as any as S.Schema; export type DlpProfilesGetResultCustomProfileSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export const DlpProfilesGetResultCustomProfileSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export type DlpProfilesGetResultCustomProfileSensitivityLevelsList = Array; export const DlpProfilesGetResultCustomProfileSensitivityLevelsList = /*@__PURE__*/ S.Array( DlpDataClassesCreateRequestSensitivityLevelsItem, ) as any as S.Schema; export type DlpProfilesGetResultCustomProfileSharedEntriesItemCustomEntryType = "custom"; export const DlpProfilesGetResultCustomProfileSharedEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileSharedEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesGetResultCustomProfileSharedEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesGetResultCustomProfileSharedEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesGetResultCustomProfileSharedEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileSharedEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariant = | DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0 | DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileSharedEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesGetResultCustomProfileSharedEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileSharedEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultCustomProfileSharedEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesGetResultCustomProfileSharedEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultCustomProfileSharedEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileSharedEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileSharedEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesGetResultCustomProfileSharedEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileSharedEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesGetResultCustomProfileSharedEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesGetResultCustomProfileSharedEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesGetResultCustomProfileSharedEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileSharedEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileSharedEntriesItemWordListEntryType = "word_list"; export const DlpProfilesGetResultCustomProfileSharedEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultCustomProfileSharedEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultCustomProfileSharedEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesGetResultCustomProfileSharedEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultCustomProfileSharedEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfileSharedEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesGetResultCustomProfileSharedEntriesItem = | DlpProfilesGetResultCustomProfileSharedEntriesItemCustomEntry | DlpProfilesGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntry | DlpProfilesGetResultCustomProfileSharedEntriesItemPredefinedEntry | DlpProfilesGetResultCustomProfileSharedEntriesItemIntegrationEntry | DlpProfilesGetResultCustomProfileSharedEntriesItemExactDataEntry | DlpProfilesGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntry | DlpProfilesGetResultCustomProfileSharedEntriesItemWordListEntry; export const DlpProfilesGetResultCustomProfileSharedEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesGetResultCustomProfileSharedEntriesList = Array; export const DlpProfilesGetResultCustomProfileSharedEntriesList = /*@__PURE__*/ S.Array( DlpProfilesGetResultCustomProfileSharedEntriesItem, ) as any as S.Schema; export interface DlpProfilesGetResultCustomProfile { /** The id of the profile (uuid). */ id: string; /** Related DLP policies will trigger when the match count exceeds the number set. */ allowedMatchCount: number; /** When the profile was created. */ createdAt: string; /** The name of the profile. */ name: string; ocrEnabled: boolean; type: DlpProfilesGetResultCustomProfileType; /** When the profile was lasted updated. */ updatedAt: string; aiContextEnabled?: boolean | null; confidenceThreshold?: DlpProfilesGetResultCustomProfileConfidenceThreshold | null; /** Scan the context of predefined entries to only return matches surrounded by keywords. */ contextAwareness?: DlpProfilesCustomCreateRequestContextAwareness | null; /** Data classes associated with this profile. */ dataClasses?: DlpProfilesGetResultCustomProfileDataClassesList | null; /** Data tags associated with this profile. */ dataTags?: DlpProfilesGetResultCustomProfileDataTagsList | null; /** The description of the profile. */ description?: string | null; entries?: DlpProfilesGetResultCustomProfileEntriesList | null; /** Sensitivity levels associated with this profile. */ sensitivityLevels?: DlpProfilesGetResultCustomProfileSensitivityLevelsList | null; sharedEntries?: DlpProfilesGetResultCustomProfileSharedEntriesList | null; } export const DlpProfilesGetResultCustomProfile = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, allowedMatchCount: S.Number.pipe(T.Body("allowed_match_count")), createdAt: S.String.pipe(T.Body("created_at")), name: S.String, ocrEnabled: S.Boolean.pipe(T.Body("ocr_enabled")), type: DlpProfilesGetResultCustomProfileType, updatedAt: S.String.pipe(T.Body("updated_at")), aiContextEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ai_context_enabled")), ), confidenceThreshold: S.optional( S.NullOr(DlpProfilesGetResultCustomProfileConfidenceThreshold).pipe( T.Body("confidence_threshold"), ), ), contextAwareness: S.optional( S.NullOr(DlpProfilesCustomCreateRequestContextAwareness).pipe( T.Body("context_awareness"), ), ), dataClasses: S.optional( S.NullOr(DlpProfilesGetResultCustomProfileDataClassesList).pipe( T.Body("data_classes"), ), ), dataTags: S.optional( S.NullOr(DlpProfilesGetResultCustomProfileDataTagsList).pipe( T.Body("data_tags"), ), ), description: S.optional(S.NullOr(S.String)), entries: S.optional(S.NullOr(DlpProfilesGetResultCustomProfileEntriesList)), sensitivityLevels: S.optional( S.NullOr(DlpProfilesGetResultCustomProfileSensitivityLevelsList).pipe( T.Body("sensitivity_levels"), ), ), sharedEntries: S.optional( S.NullOr(DlpProfilesGetResultCustomProfileSharedEntriesList).pipe( T.Body("shared_entries"), ), ), }), ).annotate({ identifier: "DlpProfilesGetResultCustomProfile", }) as any as S.Schema; export type DlpProfilesGetResultPredefinedProfileEntriesItemCustomEntryType = "custom"; export const DlpProfilesGetResultPredefinedProfileEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultPredefinedProfileEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesGetResultPredefinedProfileEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesGetResultPredefinedProfileEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesGetResultPredefinedProfileEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesGetResultPredefinedProfileEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesGetResultPredefinedProfileEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesGetResultPredefinedProfileEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultPredefinedProfileEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultPredefinedProfileEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesGetResultPredefinedProfileEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultPredefinedProfileEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultPredefinedProfileEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariant = | DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0 | DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesGetResultPredefinedProfileEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesGetResultPredefinedProfileEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultPredefinedProfileEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultPredefinedProfileEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesGetResultPredefinedProfileEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultPredefinedProfileEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesGetResultPredefinedProfileEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesGetResultPredefinedProfileEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesGetResultPredefinedProfileEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultPredefinedProfileEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesGetResultPredefinedProfileEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesGetResultPredefinedProfileEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesGetResultPredefinedProfileEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultPredefinedProfileEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesGetResultPredefinedProfileEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesGetResultPredefinedProfileEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultPredefinedProfileEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultPredefinedProfileEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesGetResultPredefinedProfileEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultPredefinedProfileEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultPredefinedProfileEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesGetResultPredefinedProfileEntriesItemWordListEntryType = "word_list"; export const DlpProfilesGetResultPredefinedProfileEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultPredefinedProfileEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultPredefinedProfileEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesGetResultPredefinedProfileEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultPredefinedProfileEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesGetResultPredefinedProfileEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesGetResultPredefinedProfileEntriesItem = | DlpProfilesGetResultPredefinedProfileEntriesItemCustomEntry | DlpProfilesGetResultPredefinedProfileEntriesItemCustomPromptTopicEntry | DlpProfilesGetResultPredefinedProfileEntriesItemPredefinedEntry | DlpProfilesGetResultPredefinedProfileEntriesItemIntegrationEntry | DlpProfilesGetResultPredefinedProfileEntriesItemExactDataEntry | DlpProfilesGetResultPredefinedProfileEntriesItemDocumentFingerprintEntry | DlpProfilesGetResultPredefinedProfileEntriesItemWordListEntry; export const DlpProfilesGetResultPredefinedProfileEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesGetResultPredefinedProfileEntriesList = Array; export const DlpProfilesGetResultPredefinedProfileEntriesList = /*@__PURE__*/ S.Array( DlpProfilesGetResultPredefinedProfileEntriesItem, ) as any as S.Schema; export type DlpProfilesGetResultPredefinedProfileType = "predefined"; export const DlpProfilesGetResultPredefinedProfileType = /*@__PURE__*/ S.String; export type DlpProfilesGetResultPredefinedProfileConfidenceThreshold = | "low" | "medium" | "high" | "very_high"; export const DlpProfilesGetResultPredefinedProfileConfidenceThreshold = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultPredefinedProfile { /** The id of the predefined profile (uuid). */ id: string; allowedMatchCount: number; entries: DlpProfilesGetResultPredefinedProfileEntriesList; /** The name of the predefined profile. */ name: string; type: DlpProfilesGetResultPredefinedProfileType; aiContextEnabled?: boolean | null; confidenceThreshold?: DlpProfilesGetResultPredefinedProfileConfidenceThreshold | null; /** Scan the context of predefined entries to only return matches surrounded by keywords. */ contextAwareness?: DlpProfilesCustomCreateRequestContextAwareness | null; ocrEnabled?: boolean | null; /** Whether this profile can be accessed by anyone. */ openAccess?: boolean | null; } export const DlpProfilesGetResultPredefinedProfile = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, allowedMatchCount: S.Number.pipe(T.Body("allowed_match_count")), entries: DlpProfilesGetResultPredefinedProfileEntriesList, name: S.String, type: DlpProfilesGetResultPredefinedProfileType, aiContextEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ai_context_enabled")), ), confidenceThreshold: S.optional( S.NullOr(DlpProfilesGetResultPredefinedProfileConfidenceThreshold).pipe( T.Body("confidence_threshold"), ), ), contextAwareness: S.optional( S.NullOr(DlpProfilesCustomCreateRequestContextAwareness).pipe( T.Body("context_awareness"), ), ), ocrEnabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("ocr_enabled"))), openAccess: S.optional(S.NullOr(S.Boolean).pipe(T.Body("open_access"))), }), ).annotate({ identifier: "DlpProfilesGetResultPredefinedProfile", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileEntriesItemCustomEntryType = "custom"; export const DlpProfilesGetResultIntegrationProfileEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesGetResultIntegrationProfileEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesGetResultIntegrationProfileEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesGetResultIntegrationProfileEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesGetResultIntegrationProfileEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultIntegrationProfileEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesGetResultIntegrationProfileEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultIntegrationProfileEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariant = | DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0 | DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesGetResultIntegrationProfileEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultIntegrationProfileEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesGetResultIntegrationProfileEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultIntegrationProfileEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesGetResultIntegrationProfileEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesGetResultIntegrationProfileEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesGetResultIntegrationProfileEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesGetResultIntegrationProfileEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesGetResultIntegrationProfileEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultIntegrationProfileEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesGetResultIntegrationProfileEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultIntegrationProfileEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileEntriesItemWordListEntryType = "word_list"; export const DlpProfilesGetResultIntegrationProfileEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultIntegrationProfileEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesGetResultIntegrationProfileEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultIntegrationProfileEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileEntriesItem = | DlpProfilesGetResultIntegrationProfileEntriesItemCustomEntry | DlpProfilesGetResultIntegrationProfileEntriesItemCustomPromptTopicEntry | DlpProfilesGetResultIntegrationProfileEntriesItemPredefinedEntry | DlpProfilesGetResultIntegrationProfileEntriesItemIntegrationEntry | DlpProfilesGetResultIntegrationProfileEntriesItemExactDataEntry | DlpProfilesGetResultIntegrationProfileEntriesItemDocumentFingerprintEntry | DlpProfilesGetResultIntegrationProfileEntriesItemWordListEntry; export const DlpProfilesGetResultIntegrationProfileEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesGetResultIntegrationProfileEntriesList = Array; export const DlpProfilesGetResultIntegrationProfileEntriesList = /*@__PURE__*/ S.Array( DlpProfilesGetResultIntegrationProfileEntriesItem, ) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomEntryType = "custom"; export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesGetResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant = | DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0 | DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileSharedEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileSharedEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileSharedEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileSharedEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileSharedEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileSharedEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileSharedEntriesItemWordListEntryType = "word_list"; export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfileSharedEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesGetResultIntegrationProfileSharedEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesGetResultIntegrationProfileSharedEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfileSharedEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileSharedEntriesItem = | DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomEntry | DlpProfilesGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry | DlpProfilesGetResultIntegrationProfileSharedEntriesItemPredefinedEntry | DlpProfilesGetResultIntegrationProfileSharedEntriesItemIntegrationEntry | DlpProfilesGetResultIntegrationProfileSharedEntriesItemExactDataEntry | DlpProfilesGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry | DlpProfilesGetResultIntegrationProfileSharedEntriesItemWordListEntry; export const DlpProfilesGetResultIntegrationProfileSharedEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesGetResultIntegrationProfileSharedEntriesList = Array; export const DlpProfilesGetResultIntegrationProfileSharedEntriesList = /*@__PURE__*/ S.Array( DlpProfilesGetResultIntegrationProfileSharedEntriesItem, ) as any as S.Schema; export type DlpProfilesGetResultIntegrationProfileType = "integration"; export const DlpProfilesGetResultIntegrationProfileType = /*@__PURE__*/ S.String; export interface DlpProfilesGetResultIntegrationProfile { id: string; createdAt: string; entries: DlpProfilesGetResultIntegrationProfileEntriesList; name: string; sharedEntries: DlpProfilesGetResultIntegrationProfileSharedEntriesList; type: DlpProfilesGetResultIntegrationProfileType; updatedAt: string; /** The description of the profile. */ description?: string | null; } export const DlpProfilesGetResultIntegrationProfile = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), entries: DlpProfilesGetResultIntegrationProfileEntriesList, name: S.String, sharedEntries: DlpProfilesGetResultIntegrationProfileSharedEntriesList.pipe( T.Body("shared_entries"), ), type: DlpProfilesGetResultIntegrationProfileType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesGetResultIntegrationProfile", }) as any as S.Schema; export type DlpProfilesGetResult = | DlpProfilesGetResultCustomProfile | DlpProfilesGetResultPredefinedProfile | DlpProfilesGetResultIntegrationProfile; export const DlpProfilesGetResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "allowedMatchCount", "createdAt", "name", "ocrEnabled", "type", "updatedAt", "aiContextEnabled", "confidenceThreshold", "contextAwareness", "dataClasses", "dataTags", "description", "entries", "sensitivityLevels", "sharedEntries", ], [ "id", "allowedMatchCount", "entries", "name", "type", "aiContextEnabled", "confidenceThreshold", "contextAwareness", "ocrEnabled", "openAccess", ], [ "id", "createdAt", "entries", "name", "sharedEntries", "type", "updatedAt", "description", ], ]), ); export type GetDlpProfileResponse = DlpProfilesGetResult; export const GetDlpProfileResponse = /*@__PURE__*/ S.suspend(() => DlpProfilesGetResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "GetDlpProfileResponse", }) as any as S.Schema; export interface GetDlpProfileCustomRequest { accountId: string; profileId: string; } export const GetDlpProfileCustomRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), profileId: S.String.pipe(T.Label("profile_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/profiles/custom/{profile_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpProfileCustomRequest", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileType = "custom"; export const DlpProfilesCustomGetResultCustomProfileType = /*@__PURE__*/ S.String; export type DlpProfilesCustomGetResultCustomProfileConfidenceThreshold = | "low" | "medium" | "high" | "very_high"; export const DlpProfilesCustomGetResultCustomProfileConfidenceThreshold = /*@__PURE__*/ S.String; export type DlpProfilesCustomGetResultCustomProfileContextAwarenessSkip = DlpProfilesCustomCreateRequestContextAwarenessSkip; export const DlpProfilesCustomGetResultCustomProfileContextAwarenessSkip = DlpProfilesCustomCreateRequestContextAwarenessSkip; export type DlpProfilesCustomGetResultCustomProfileContextAwareness = DlpProfilesCustomCreateRequestContextAwareness; export const DlpProfilesCustomGetResultCustomProfileContextAwareness = DlpProfilesCustomCreateRequestContextAwareness; export type DlpProfilesCustomGetResultCustomProfileDataClassesList = Array; export const DlpProfilesCustomGetResultCustomProfileDataClassesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileDataTagsList = Array; export const DlpProfilesCustomGetResultCustomProfileDataTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPatternValidation = "luhn"; export const DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPatternValidation = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPattern { regex: string; validation?: DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPatternValidation | null; } export const DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( S.NullOr( DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPatternValidation, ), ), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPattern", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryType = "custom"; export const DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesCustomGetResultCustomProfileEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultCustomProfileEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesCustomGetResultCustomProfileEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultCustomProfileEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariant = | DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase0 | DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesCustomGetResultCustomProfileEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultCustomProfileEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesCustomGetResultCustomProfileEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultCustomProfileEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesCustomGetResultCustomProfileEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesCustomGetResultCustomProfileEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesCustomGetResultCustomProfileEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesCustomGetResultCustomProfileEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesCustomGetResultCustomProfileEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultCustomProfileEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesCustomGetResultCustomProfileEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultCustomProfileEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileEntriesItemWordListEntryType = "word_list"; export const DlpProfilesCustomGetResultCustomProfileEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultCustomProfileEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesCustomGetResultCustomProfileEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultCustomProfileEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileEntriesItem = | DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntry | DlpProfilesCustomGetResultCustomProfileEntriesItemCustomPromptTopicEntry | DlpProfilesCustomGetResultCustomProfileEntriesItemPredefinedEntry | DlpProfilesCustomGetResultCustomProfileEntriesItemIntegrationEntry | DlpProfilesCustomGetResultCustomProfileEntriesItemExactDataEntry | DlpProfilesCustomGetResultCustomProfileEntriesItemDocumentFingerprintEntry | DlpProfilesCustomGetResultCustomProfileEntriesItemWordListEntry; export const DlpProfilesCustomGetResultCustomProfileEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesCustomGetResultCustomProfileEntriesList = Array; export const DlpProfilesCustomGetResultCustomProfileEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomGetResultCustomProfileEntriesItem, ) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export const DlpProfilesCustomGetResultCustomProfileSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export type DlpProfilesCustomGetResultCustomProfileSensitivityLevelsList = Array; export const DlpProfilesCustomGetResultCustomProfileSensitivityLevelsList = /*@__PURE__*/ S.Array( DlpDataClassesCreateRequestSensitivityLevelsItem, ) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomEntryType = "custom"; export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariant = | DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0 | DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileSharedEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileSharedEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileSharedEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileSharedEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileSharedEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileSharedEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileSharedEntriesItemWordListEntryType = "word_list"; export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultCustomProfileSharedEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultCustomProfileSharedEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfileSharedEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultCustomProfileSharedEntriesItem = | DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomEntry | DlpProfilesCustomGetResultCustomProfileSharedEntriesItemCustomPromptTopicEntry | DlpProfilesCustomGetResultCustomProfileSharedEntriesItemPredefinedEntry | DlpProfilesCustomGetResultCustomProfileSharedEntriesItemIntegrationEntry | DlpProfilesCustomGetResultCustomProfileSharedEntriesItemExactDataEntry | DlpProfilesCustomGetResultCustomProfileSharedEntriesItemDocumentFingerprintEntry | DlpProfilesCustomGetResultCustomProfileSharedEntriesItemWordListEntry; export const DlpProfilesCustomGetResultCustomProfileSharedEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesCustomGetResultCustomProfileSharedEntriesList = Array; export const DlpProfilesCustomGetResultCustomProfileSharedEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomGetResultCustomProfileSharedEntriesItem, ) as any as S.Schema; export interface DlpProfilesCustomGetResultCustomProfile { /** The id of the profile (uuid). */ id: string; /** Related DLP policies will trigger when the match count exceeds the number set. */ allowedMatchCount: number; /** When the profile was created. */ createdAt: string; /** The name of the profile. */ name: string; ocrEnabled: boolean; type: DlpProfilesCustomGetResultCustomProfileType; /** When the profile was lasted updated. */ updatedAt: string; aiContextEnabled?: boolean | null; confidenceThreshold?: DlpProfilesCustomGetResultCustomProfileConfidenceThreshold | null; /** Scan the context of predefined entries to only return matches surrounded by keywords. */ contextAwareness?: DlpProfilesCustomCreateRequestContextAwareness | null; /** Data classes associated with this profile. */ dataClasses?: DlpProfilesCustomGetResultCustomProfileDataClassesList | null; /** Data tags associated with this profile. */ dataTags?: DlpProfilesCustomGetResultCustomProfileDataTagsList | null; /** The description of the profile. */ description?: string | null; entries?: DlpProfilesCustomGetResultCustomProfileEntriesList | null; /** Sensitivity levels associated with this profile. */ sensitivityLevels?: DlpProfilesCustomGetResultCustomProfileSensitivityLevelsList | null; sharedEntries?: DlpProfilesCustomGetResultCustomProfileSharedEntriesList | null; } export const DlpProfilesCustomGetResultCustomProfile = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, allowedMatchCount: S.Number.pipe(T.Body("allowed_match_count")), createdAt: S.String.pipe(T.Body("created_at")), name: S.String, ocrEnabled: S.Boolean.pipe(T.Body("ocr_enabled")), type: DlpProfilesCustomGetResultCustomProfileType, updatedAt: S.String.pipe(T.Body("updated_at")), aiContextEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ai_context_enabled")), ), confidenceThreshold: S.optional( S.NullOr( DlpProfilesCustomGetResultCustomProfileConfidenceThreshold, ).pipe(T.Body("confidence_threshold")), ), contextAwareness: S.optional( S.NullOr(DlpProfilesCustomCreateRequestContextAwareness).pipe( T.Body("context_awareness"), ), ), dataClasses: S.optional( S.NullOr(DlpProfilesCustomGetResultCustomProfileDataClassesList).pipe( T.Body("data_classes"), ), ), dataTags: S.optional( S.NullOr(DlpProfilesCustomGetResultCustomProfileDataTagsList).pipe( T.Body("data_tags"), ), ), description: S.optional(S.NullOr(S.String)), entries: S.optional( S.NullOr(DlpProfilesCustomGetResultCustomProfileEntriesList), ), sensitivityLevels: S.optional( S.NullOr( DlpProfilesCustomGetResultCustomProfileSensitivityLevelsList, ).pipe(T.Body("sensitivity_levels")), ), sharedEntries: S.optional( S.NullOr(DlpProfilesCustomGetResultCustomProfileSharedEntriesList).pipe( T.Body("shared_entries"), ), ), }), ).annotate({ identifier: "DlpProfilesCustomGetResultCustomProfile", }) as any as S.Schema; export type DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomEntryType = "custom"; export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariant = | DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0 | DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultPredefinedProfileEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultPredefinedProfileEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultPredefinedProfileEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultPredefinedProfileEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultPredefinedProfileEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultPredefinedProfileEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultPredefinedProfileEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultPredefinedProfileEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultPredefinedProfileEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultPredefinedProfileEntriesItemWordListEntryType = "word_list"; export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultPredefinedProfileEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesCustomGetResultPredefinedProfileEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultPredefinedProfileEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultPredefinedProfileEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultPredefinedProfileEntriesItem = | DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomEntry | DlpProfilesCustomGetResultPredefinedProfileEntriesItemCustomPromptTopicEntry | DlpProfilesCustomGetResultPredefinedProfileEntriesItemPredefinedEntry | DlpProfilesCustomGetResultPredefinedProfileEntriesItemIntegrationEntry | DlpProfilesCustomGetResultPredefinedProfileEntriesItemExactDataEntry | DlpProfilesCustomGetResultPredefinedProfileEntriesItemDocumentFingerprintEntry | DlpProfilesCustomGetResultPredefinedProfileEntriesItemWordListEntry; export const DlpProfilesCustomGetResultPredefinedProfileEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesCustomGetResultPredefinedProfileEntriesList = Array; export const DlpProfilesCustomGetResultPredefinedProfileEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomGetResultPredefinedProfileEntriesItem, ) as any as S.Schema; export type DlpProfilesCustomGetResultPredefinedProfileType = "predefined"; export const DlpProfilesCustomGetResultPredefinedProfileType = /*@__PURE__*/ S.String; export type DlpProfilesCustomGetResultPredefinedProfileConfidenceThreshold = | "low" | "medium" | "high" | "very_high"; export const DlpProfilesCustomGetResultPredefinedProfileConfidenceThreshold = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultPredefinedProfile { /** The id of the predefined profile (uuid). */ id: string; allowedMatchCount: number; entries: DlpProfilesCustomGetResultPredefinedProfileEntriesList; /** The name of the predefined profile. */ name: string; type: DlpProfilesCustomGetResultPredefinedProfileType; aiContextEnabled?: boolean | null; confidenceThreshold?: DlpProfilesCustomGetResultPredefinedProfileConfidenceThreshold | null; /** Scan the context of predefined entries to only return matches surrounded by keywords. */ contextAwareness?: DlpProfilesCustomCreateRequestContextAwareness | null; ocrEnabled?: boolean | null; /** Whether this profile can be accessed by anyone. */ openAccess?: boolean | null; } export const DlpProfilesCustomGetResultPredefinedProfile = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, allowedMatchCount: S.Number.pipe(T.Body("allowed_match_count")), entries: DlpProfilesCustomGetResultPredefinedProfileEntriesList, name: S.String, type: DlpProfilesCustomGetResultPredefinedProfileType, aiContextEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ai_context_enabled")), ), confidenceThreshold: S.optional( S.NullOr( DlpProfilesCustomGetResultPredefinedProfileConfidenceThreshold, ).pipe(T.Body("confidence_threshold")), ), contextAwareness: S.optional( S.NullOr(DlpProfilesCustomCreateRequestContextAwareness).pipe( T.Body("context_awareness"), ), ), ocrEnabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("ocr_enabled"))), openAccess: S.optional(S.NullOr(S.Boolean).pipe(T.Body("open_access"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultPredefinedProfile", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomEntryType = "custom"; export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariant = | DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0 | DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileEntriesItemWordListEntryType = "word_list"; export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultIntegrationProfileEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileEntriesItem = | DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomEntry | DlpProfilesCustomGetResultIntegrationProfileEntriesItemCustomPromptTopicEntry | DlpProfilesCustomGetResultIntegrationProfileEntriesItemPredefinedEntry | DlpProfilesCustomGetResultIntegrationProfileEntriesItemIntegrationEntry | DlpProfilesCustomGetResultIntegrationProfileEntriesItemExactDataEntry | DlpProfilesCustomGetResultIntegrationProfileEntriesItemDocumentFingerprintEntry | DlpProfilesCustomGetResultIntegrationProfileEntriesItemWordListEntry; export const DlpProfilesCustomGetResultIntegrationProfileEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesCustomGetResultIntegrationProfileEntriesList = Array; export const DlpProfilesCustomGetResultIntegrationProfileEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomGetResultIntegrationProfileEntriesItem, ) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomEntryType = "custom"; export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomGetResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant = | DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0 | DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemWordListEntryType = "word_list"; export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItem = | DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomEntry | DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry | DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemPredefinedEntry | DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemIntegrationEntry | DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemExactDataEntry | DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry | DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItemWordListEntry; export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesCustomGetResultIntegrationProfileSharedEntriesList = Array; export const DlpProfilesCustomGetResultIntegrationProfileSharedEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomGetResultIntegrationProfileSharedEntriesItem, ) as any as S.Schema; export type DlpProfilesCustomGetResultIntegrationProfileType = "integration"; export const DlpProfilesCustomGetResultIntegrationProfileType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomGetResultIntegrationProfile { id: string; createdAt: string; entries: DlpProfilesCustomGetResultIntegrationProfileEntriesList; name: string; sharedEntries: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesList; type: DlpProfilesCustomGetResultIntegrationProfileType; updatedAt: string; /** The description of the profile. */ description?: string | null; } export const DlpProfilesCustomGetResultIntegrationProfile = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), entries: DlpProfilesCustomGetResultIntegrationProfileEntriesList, name: S.String, sharedEntries: DlpProfilesCustomGetResultIntegrationProfileSharedEntriesList.pipe( T.Body("shared_entries"), ), type: DlpProfilesCustomGetResultIntegrationProfileType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomGetResultIntegrationProfile", }) as any as S.Schema; export type DlpProfilesCustomGetResult = | DlpProfilesCustomGetResultCustomProfile | DlpProfilesCustomGetResultPredefinedProfile | DlpProfilesCustomGetResultIntegrationProfile; export const DlpProfilesCustomGetResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "allowedMatchCount", "createdAt", "name", "ocrEnabled", "type", "updatedAt", "aiContextEnabled", "confidenceThreshold", "contextAwareness", "dataClasses", "dataTags", "description", "entries", "sensitivityLevels", "sharedEntries", ], [ "id", "allowedMatchCount", "entries", "name", "type", "aiContextEnabled", "confidenceThreshold", "contextAwareness", "ocrEnabled", "openAccess", ], [ "id", "createdAt", "entries", "name", "sharedEntries", "type", "updatedAt", "description", ], ]), ); export type GetDlpProfileCustomResponse = DlpProfilesCustomGetResult; export const GetDlpProfileCustomResponse = /*@__PURE__*/ S.suspend(() => DlpProfilesCustomGetResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "GetDlpProfileCustomResponse", }) as any as S.Schema; export interface GetDlpProfilePredefinedRequest { accountId: string; profileId: string; } export const GetDlpProfilePredefinedRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), profileId: S.String.pipe(T.Label("profile_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/profiles/predefined/{profile_id}/config", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpProfilePredefinedRequest", }) as any as S.Schema; export type DlpProfilesPredefinedGetResponseEnabledEntriesList = Array; export const DlpProfilesPredefinedGetResponseEnabledEntriesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesPredefinedGetResponseEntriesItemCustomEntryPatternValidation = "luhn"; export const DlpProfilesPredefinedGetResponseEntriesItemCustomEntryPatternValidation = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedGetResponseEntriesItemCustomEntryPattern { regex: string; validation?: DlpProfilesPredefinedGetResponseEntriesItemCustomEntryPatternValidation | null; } export const DlpProfilesPredefinedGetResponseEntriesItemCustomEntryPattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( S.NullOr( DlpProfilesPredefinedGetResponseEntriesItemCustomEntryPatternValidation, ), ), }), ).annotate({ identifier: "DlpProfilesPredefinedGetResponseEntriesItemCustomEntryPattern", }) as any as S.Schema; export type DlpProfilesPredefinedGetResponseEntriesItemCustomEntryType = "custom"; export const DlpProfilesPredefinedGetResponseEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedGetResponseEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesPredefinedGetResponseEntriesItemCustomEntryPattern; type: DlpProfilesPredefinedGetResponseEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesPredefinedGetResponseEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesPredefinedGetResponseEntriesItemCustomEntryPattern, type: DlpProfilesPredefinedGetResponseEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesPredefinedGetResponseEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesPredefinedGetResponseEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesPredefinedGetResponseEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedGetResponseEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesPredefinedGetResponseEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesPredefinedGetResponseEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesPredefinedGetResponseEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesPredefinedGetResponseEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariant = | DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase0 | DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesPredefinedGetResponseEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesPredefinedGetResponseEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedGetResponseEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesPredefinedGetResponseEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesPredefinedGetResponseEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesPredefinedGetResponseEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesPredefinedGetResponseEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesPredefinedGetResponseEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesPredefinedGetResponseEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedGetResponseEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesPredefinedGetResponseEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesPredefinedGetResponseEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesPredefinedGetResponseEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesPredefinedGetResponseEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesPredefinedGetResponseEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesPredefinedGetResponseEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedGetResponseEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesPredefinedGetResponseEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesPredefinedGetResponseEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesPredefinedGetResponseEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesPredefinedGetResponseEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesPredefinedGetResponseEntriesItemWordListEntryType = "word_list"; export const DlpProfilesPredefinedGetResponseEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedGetResponseEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesPredefinedGetResponseEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesPredefinedGetResponseEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesPredefinedGetResponseEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesPredefinedGetResponseEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesPredefinedGetResponseEntriesItem = | DlpProfilesPredefinedGetResponseEntriesItemCustomEntry | DlpProfilesPredefinedGetResponseEntriesItemCustomPromptTopicEntry | DlpProfilesPredefinedGetResponseEntriesItemPredefinedEntry | DlpProfilesPredefinedGetResponseEntriesItemIntegrationEntry | DlpProfilesPredefinedGetResponseEntriesItemExactDataEntry | DlpProfilesPredefinedGetResponseEntriesItemDocumentFingerprintEntry | DlpProfilesPredefinedGetResponseEntriesItemWordListEntry; export const DlpProfilesPredefinedGetResponseEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesPredefinedGetResponseEntriesList = Array; export const DlpProfilesPredefinedGetResponseEntriesList = /*@__PURE__*/ S.Array( DlpProfilesPredefinedGetResponseEntriesItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDlpProfilePredefinedResponse { /** The id of the predefined profile (uuid). */ id: string; allowedMatchCount: number; confidenceThreshold: string; /** Entries to enable for this predefined profile. Any entries not provided will be disabled. */ enabledEntries: DlpProfilesPredefinedGetResponseEnabledEntriesList; /** This field has been deprecated for `enabled_entries`. */ entries: DlpProfilesPredefinedGetResponseEntriesList; /** The name of the predefined profile. */ name: string; aiContextEnabled?: boolean | null; ocrEnabled?: boolean | null; /** Whether this profile can be accessed by anyone. */ openAccess?: boolean | null; } export const GetDlpProfilePredefinedResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, allowedMatchCount: S.Number.pipe(T.Body("allowed_match_count")), confidenceThreshold: S.String.pipe(T.Body("confidence_threshold")), enabledEntries: DlpProfilesPredefinedGetResponseEnabledEntriesList.pipe( T.Body("enabled_entries"), ), entries: DlpProfilesPredefinedGetResponseEntriesList, name: S.String, aiContextEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ai_context_enabled")), ), ocrEnabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("ocr_enabled"))), openAccess: S.optional(S.NullOr(S.Boolean).pipe(T.Body("open_access"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpProfilePredefinedResponse", }) as any as S.Schema; export interface GetDlpSensitivityGroupRequest { accountId: string; sensitivityGroupId: string; } export const GetDlpSensitivityGroupRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), sensitivityGroupId: S.String.pipe(T.Label("sensitivity_group_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpSensitivityGroupRequest", }) as any as S.Schema; export type DlpSensitivityGroupsGetResponseLevelsItem = DlpDataTagCategoriesCreateResponseTagsItem; export const DlpSensitivityGroupsGetResponseLevelsItem = DlpDataTagCategoriesCreateResponseTagsItem; export type DlpSensitivityGroupsGetResponseLevelsList = Array; export const DlpSensitivityGroupsGetResponseLevelsList = /*@__PURE__*/ S.Array( DlpDataTagCategoriesCreateResponseTagsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDlpSensitivityGroupResponse { id: string; createdAt: string; levels: DlpSensitivityGroupsGetResponseLevelsList; name: string; updatedAt: string; description?: string | null; templateId?: string | null; } export const GetDlpSensitivityGroupResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), levels: DlpSensitivityGroupsGetResponseLevelsList, name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), templateId: S.optional(S.NullOr(S.String).pipe(T.Body("template_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpSensitivityGroupResponse", }) as any as S.Schema; export interface GetDlpSensitivityGroupLevelRequest { accountId: string; sensitivityGroupId: string; sensitivityLevelId: string; } export const GetDlpSensitivityGroupLevelRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), sensitivityGroupId: S.String.pipe(T.Label("sensitivity_group_id")), sensitivityLevelId: S.String.pipe(T.Label("sensitivity_level_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}/levels/{sensitivity_level_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpSensitivityGroupLevelRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDlpSensitivityGroupLevelResponse { id: string; createdAt: string; name: string; updatedAt: string; description?: string | null; } export const GetDlpSensitivityGroupLevelResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpSensitivityGroupLevelResponse", }) as any as S.Schema; export interface GetDlpSensitivityGroupLevelOrderRequest { accountId: string; sensitivityGroupId: string; } export const GetDlpSensitivityGroupLevelOrderRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), sensitivityGroupId: S.String.pipe(T.Label("sensitivity_group_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}/level_order", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpSensitivityGroupLevelOrderRequest", }) as any as S.Schema; export type DlpSensitivityGroupsLevelsOrderGetResponseLevelIdsList = Array; export const DlpSensitivityGroupsLevelsOrderGetResponseLevelIdsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDlpSensitivityGroupLevelOrderResponse { levelIds: DlpSensitivityGroupsLevelsOrderGetResponseLevelIdsList; } export const GetDlpSensitivityGroupLevelOrderResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ levelIds: DlpSensitivityGroupsLevelsOrderGetResponseLevelIdsList.pipe( T.Body("level_ids"), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpSensitivityGroupLevelOrderResponse", }) as any as S.Schema; export interface GetDlpSettingRequest { accountId: string; } export const GetDlpSettingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpSettingRequest", }) as any as S.Schema; export type DlpSettingsGetResponsePayloadLoggingMaskingLevel = | "full" | "partial" | "clear" | "default"; export const DlpSettingsGetResponsePayloadLoggingMaskingLevel = /*@__PURE__*/ S.String; export interface DlpSettingsGetResponsePayloadLogging { updatedAt: string; /** Masking level for payload logs. */ maskingLevel?: DlpSettingsGetResponsePayloadLoggingMaskingLevel | null; /** Base64-encoded public key for encrypting payload logs. Null when payload logging is disabled. */ publicKey?: string | null; } export const DlpSettingsGetResponsePayloadLogging = /*@__PURE__*/ S.suspend( () => S.Struct({ updatedAt: S.String.pipe(T.Body("updated_at")), maskingLevel: S.optional( S.NullOr(DlpSettingsGetResponsePayloadLoggingMaskingLevel).pipe( T.Body("masking_level"), ), ), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), }), ).annotate({ identifier: "DlpSettingsGetResponsePayloadLogging", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetDlpSettingResponse { /** Whether AI context analysis is enabled at the account level. */ aiContextAnalysis: boolean; /** Whether OCR is enabled at the account level. */ ocr: boolean; payloadLogging: DlpSettingsGetResponsePayloadLogging; } export const GetDlpSettingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ aiContextAnalysis: S.Boolean.pipe(T.Body("ai_context_analysis")), ocr: S.Boolean, payloadLogging: DlpSettingsGetResponsePayloadLogging.pipe( T.Body("payload_logging"), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetDlpSettingResponse", }) as any as S.Schema; export interface GetGatewayAuditSshSettingRequest { accountId: string; } export const GetGatewayAuditSshSettingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/audit_ssh_settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayAuditSshSettingRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetGatewayAuditSshSettingResponse { createdAt?: string | null; /** Provide the Base64-encoded HPKE public key that encrypts SSH session logs. See https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/#enable-ssh-command-logging. */ publicKey?: string | null; /** Identify the seed ID. */ seedId?: string | null; updatedAt?: string | null; } export const GetGatewayAuditSshSettingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), seedId: S.optional(S.NullOr(S.String).pipe(T.Body("seed_id"))), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayAuditSshSettingResponse", }) as any as S.Schema; export interface GetGatewayCertificateRequest { accountId: string; /** Identify the certificate with a UUID. */ certificateId: string; } export const GetGatewayCertificateRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), certificateId: S.String.pipe(T.Label("certificate_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/certificates/{certificate_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayCertificateRequest", }) as any as S.Schema; export type GatewayCertificatesGetResponseBindingStatus = | "pending_deployment" | "available" | "pending_deletion" | "inactive"; export const GatewayCertificatesGetResponseBindingStatus = /*@__PURE__*/ S.String; export type GatewayCertificatesGetResponseType = "custom" | "gateway_managed"; export const GatewayCertificatesGetResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetGatewayCertificateResponse { /** Identify the certificate with a UUID. */ id?: string | null; /** Indicate the read-only deployment status of the certificate on Cloudflare's edge. Gateway TLS interception can use certificates in the 'available' (previously called 'active') state. */ bindingStatus?: GatewayCertificatesGetResponseBindingStatus | null; /** Provide the CA certificate (read-only). */ certificate?: string | null; createdAt?: string | null; expiresOn?: string | null; /** Provide the SHA256 fingerprint of the certificate (read-only). */ fingerprint?: string | null; /** Indicate whether Gateway TLS interception uses this certificate (read-only). You cannot set this value directly. To configure interception, use the Gateway configuration setting named `certificate` (read-only). */ inUse?: boolean | null; /** Indicate the organization that issued the certificate (read-only). */ issuerOrg?: string | null; /** Provide the entire issuer field of the certificate (read-only). */ issuerRaw?: string | null; /** Indicate the read-only certificate type, BYO-PKI (custom) or Gateway-managed. */ type?: GatewayCertificatesGetResponseType | null; updatedAt?: string | null; uploadedOn?: string | null; } export const GetGatewayCertificateResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), bindingStatus: S.optional( S.NullOr(GatewayCertificatesGetResponseBindingStatus).pipe( T.Body("binding_status"), ), ), certificate: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), expiresOn: S.optional(S.NullOr(S.String).pipe(T.Body("expires_on"))), fingerprint: S.optional(S.NullOr(S.String)), inUse: S.optional(S.NullOr(S.Boolean).pipe(T.Body("in_use"))), issuerOrg: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_org"))), issuerRaw: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_raw"))), type: S.optional(S.NullOr(GatewayCertificatesGetResponseType)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), uploadedOn: S.optional(S.NullOr(S.String).pipe(T.Body("uploaded_on"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayCertificateResponse", }) as any as S.Schema; export interface GetGatewayConfigurationRequest { accountId: string; } export const GetGatewayConfigurationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/configuration", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayConfigurationRequest", }) as any as S.Schema; export interface GatewayConfigurationsGetResponseSettingsActivityLog { /** Specify whether to log activity. */ enabled?: boolean | null; } export const GatewayConfigurationsGetResponseSettingsActivityLog = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettingsActivityLog", }) as any as S.Schema; export interface GatewayConfigurationsGetResponseSettingsAntivirusNotificationSettings { /** Specify whether to enable notifications. */ enabled?: boolean | null; /** Specify whether to include context information as query parameters. */ includeContext?: boolean | null; /** Specify the message to show in the notification. */ msg?: string | null; /** Specify a URL that directs users to more information. If unset, the notification opens a block page. */ supportUrl?: string | null; } export const GatewayConfigurationsGetResponseSettingsAntivirusNotificationSettings = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), includeContext: S.optional( S.NullOr(S.Boolean).pipe(T.Body("include_context")), ), msg: S.optional(S.NullOr(S.String)), supportUrl: S.optional(S.NullOr(S.String).pipe(T.Body("support_url"))), }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettingsAntivirusNotificationSettings", }) as any as S.Schema; export interface GatewayConfigurationsGetResponseSettingsAntivirus { /** Specify whether to enable anti-virus scanning on downloads. */ enabledDownloadPhase?: boolean | null; /** Specify whether to enable anti-virus scanning on uploads. */ enabledUploadPhase?: boolean | null; /** Specify whether to block requests for unscannable files. */ failClosed?: boolean | null; /** Configure the message the user's device shows during an antivirus scan. */ notificationSettings?: GatewayConfigurationsGetResponseSettingsAntivirusNotificationSettings | null; } export const GatewayConfigurationsGetResponseSettingsAntivirus = /*@__PURE__*/ S.suspend(() => S.Struct({ enabledDownloadPhase: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enabled_download_phase")), ), enabledUploadPhase: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enabled_upload_phase")), ), failClosed: S.optional(S.NullOr(S.Boolean).pipe(T.Body("fail_closed"))), notificationSettings: S.optional( S.NullOr( GatewayConfigurationsGetResponseSettingsAntivirusNotificationSettings, ).pipe(T.Body("notification_settings")), ), }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettingsAntivirus", }) as any as S.Schema; export type GatewayConfigurationsGetResponseSettingsBlockPageMode = | "" | "customized_block_page" | "redirect_uri"; export const GatewayConfigurationsGetResponseSettingsBlockPageMode = /*@__PURE__*/ S.String; export interface GatewayConfigurationsGetResponseSettingsBlockPage { /** Specify the block page background color in `#rrggbb` format when the mode is customized_block_page. */ backgroundColor?: string | null; /** Specify whether to enable the custom block page. */ enabled?: boolean | null; /** Specify the block page footer text when the mode is customized_block_page. */ footerText?: string | null; /** Specify the block page header text when the mode is customized_block_page. */ headerText?: string | null; /** Specify whether to append context to target_uri as query parameters. This applies only when the mode is redirect_uri. */ includeContext?: boolean | null; /** Specify the full URL to the logo file when the mode is customized_block_page. */ logoPath?: string | null; /** Specify the admin email for users to contact when the mode is customized_block_page. */ mailtoAddress?: string | null; /** Specify the subject line for emails created from the block page when the mode is customized_block_page. */ mailtoSubject?: string | null; /** Specify whether to redirect users to a Cloudflare-hosted block page or a customer-provided URI. */ mode?: GatewayConfigurationsGetResponseSettingsBlockPageMode | null; /** Specify the block page title when the mode is customized_block_page. */ name?: string | null; /** Indicate that this setting was shared via the Orgs API and read only for the current account. */ readOnly?: boolean | null; /** Indicate the account tag of the account that shared this setting. */ sourceAccount?: string | null; /** Specify whether to suppress detailed information at the bottom of the block page when the mode is customized_block_page. */ suppressFooter?: boolean | null; /** Specify the URI to redirect users to when the mode is redirect_uri. */ targetUri?: string | null; /** Indicate the version number of the setting. */ version?: number | null; } export const GatewayConfigurationsGetResponseSettingsBlockPage = /*@__PURE__*/ S.suspend(() => S.Struct({ backgroundColor: S.optional( S.NullOr(S.String).pipe(T.Body("background_color")), ), enabled: S.optional(S.NullOr(S.Boolean)), footerText: S.optional(S.NullOr(S.String).pipe(T.Body("footer_text"))), headerText: S.optional(S.NullOr(S.String).pipe(T.Body("header_text"))), includeContext: S.optional( S.NullOr(S.Boolean).pipe(T.Body("include_context")), ), logoPath: S.optional(S.NullOr(S.String).pipe(T.Body("logo_path"))), mailtoAddress: S.optional( S.NullOr(S.String).pipe(T.Body("mailto_address")), ), mailtoSubject: S.optional( S.NullOr(S.String).pipe(T.Body("mailto_subject")), ), mode: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsBlockPageMode), ), name: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), sourceAccount: S.optional( S.NullOr(S.String).pipe(T.Body("source_account")), ), suppressFooter: S.optional( S.NullOr(S.Boolean).pipe(T.Body("suppress_footer")), ), targetUri: S.optional(S.NullOr(S.String).pipe(T.Body("target_uri"))), version: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettingsBlockPage", }) as any as S.Schema; export type GatewayConfigurationsGetResponseSettingsBodyScanningInspectionMode = | "deep" | "shallow"; export const GatewayConfigurationsGetResponseSettingsBodyScanningInspectionMode = /*@__PURE__*/ S.String; export interface GatewayConfigurationsGetResponseSettingsBodyScanning { /** Specify the inspection mode as either `deep` or `shallow`. */ inspectionMode?: GatewayConfigurationsGetResponseSettingsBodyScanningInspectionMode | null; } export const GatewayConfigurationsGetResponseSettingsBodyScanning = /*@__PURE__*/ S.suspend(() => S.Struct({ inspectionMode: S.optional( S.NullOr( GatewayConfigurationsGetResponseSettingsBodyScanningInspectionMode, ).pipe(T.Body("inspection_mode")), ), }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettingsBodyScanning", }) as any as S.Schema; export interface GatewayConfigurationsGetResponseSettingsBrowserIsolation { /** Specify whether to enable non-identity onramp support for Browser Isolation. */ nonIdentityEnabled?: boolean | null; /** Specify whether to enable Clientless Browser Isolation. */ urlBrowserIsolationEnabled?: boolean | null; } export const GatewayConfigurationsGetResponseSettingsBrowserIsolation = /*@__PURE__*/ S.suspend(() => S.Struct({ nonIdentityEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("non_identity_enabled")), ), urlBrowserIsolationEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("url_browser_isolation_enabled")), ), }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettingsBrowserIsolation", }) as any as S.Schema; export interface GatewayConfigurationsGetResponseSettingsCertificate { /** Specify the UUID of the certificate used for interception. Ensure the certificate is available at the edge(previously called 'active'). A nil UUID directs Cloudflare to use the Root CA. */ id: string; } export const GatewayConfigurationsGetResponseSettingsCertificate = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettingsCertificate", }) as any as S.Schema; export interface GatewayConfigurationsGetResponseSettingsCustomCertificate { /** Specify whether to enable a custom certificate authority for signing Gateway traffic. */ enabled: boolean; /** Specify the UUID of the certificate (ID from MTLS certificate store). */ id?: string | null; /** Indicate the internal certificate status. */ bindingStatus?: string | null; updatedAt?: string | null; } export const GatewayConfigurationsGetResponseSettingsCustomCertificate = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, id: S.optional(S.NullOr(S.String)), bindingStatus: S.optional( S.NullOr(S.String).pipe(T.Body("binding_status")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettingsCustomCertificate", }) as any as S.Schema; export interface GatewayConfigurationsGetResponseSettingsExtendedEmailMatching { /** Specify whether to match all variants of user emails (with + or . modifiers) used as criteria in Firewall policies. */ enabled?: boolean | null; /** Indicate that this setting was shared via the Orgs API and read only for the current account. */ readOnly?: boolean | null; /** Indicate the account tag of the account that shared this setting. */ sourceAccount?: string | null; /** Indicate the version number of the setting. */ version?: number | null; } export const GatewayConfigurationsGetResponseSettingsExtendedEmailMatching = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), sourceAccount: S.optional( S.NullOr(S.String).pipe(T.Body("source_account")), ), version: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettingsExtendedEmailMatching", }) as any as S.Schema; export interface GatewayConfigurationsGetResponseSettingsFips { /** Enforce cipher suites and TLS versions compliant with FIPS 140-2. */ tls?: boolean | null; } export const GatewayConfigurationsGetResponseSettingsFips = /*@__PURE__*/ S.suspend(() => S.Struct({ tls: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettingsFips", }) as any as S.Schema; export interface GatewayConfigurationsGetResponseSettingsHostSelector { /** Specify whether to enable filtering via hosts for egress policies. */ enabled?: boolean | null; } export const GatewayConfigurationsGetResponseSettingsHostSelector = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettingsHostSelector", }) as any as S.Schema; export type GatewayConfigurationsGetResponseSettingsInspectionMode = | "static" | "dynamic"; export const GatewayConfigurationsGetResponseSettingsInspectionMode = /*@__PURE__*/ S.String; export interface GatewayConfigurationsGetResponseSettingsInspection { /** Define the proxy inspection mode. 1. static: Gateway applies static inspection to HTTP on TCP(80). With TLS decryption on, Gateway inspects HTTPS traffic on TCP(443) and UDP(443). 2. dynamic: Gateway applies protocol detection to inspect HTTP and HTTPS traffic on any port. TLS decryption must remain on to inspect HTTPS traffic. */ mode?: GatewayConfigurationsGetResponseSettingsInspectionMode | null; } export const GatewayConfigurationsGetResponseSettingsInspection = /*@__PURE__*/ S.suspend(() => S.Struct({ mode: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsInspectionMode), ), }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettingsInspection", }) as any as S.Schema; export interface GatewayConfigurationsGetResponseSettingsProtocolDetection { /** Specify whether to detect protocols from the initial bytes of client traffic. */ enabled?: boolean | null; } export const GatewayConfigurationsGetResponseSettingsProtocolDetection = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettingsProtocolDetection", }) as any as S.Schema; export type GatewayConfigurationsGetResponseSettingsSandboxFallbackAction = | "allow" | "block"; export const GatewayConfigurationsGetResponseSettingsSandboxFallbackAction = /*@__PURE__*/ S.String; export interface GatewayConfigurationsGetResponseSettingsSandbox { /** Specify whether to enable the sandbox. */ enabled?: boolean | null; /** Specify the action to take when the system cannot scan the file. */ fallbackAction?: GatewayConfigurationsGetResponseSettingsSandboxFallbackAction | null; } export const GatewayConfigurationsGetResponseSettingsSandbox = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), fallbackAction: S.optional( S.NullOr( GatewayConfigurationsGetResponseSettingsSandboxFallbackAction, ).pipe(T.Body("fallback_action")), ), }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettingsSandbox", }) as any as S.Schema; export interface GatewayConfigurationsGetResponseSettingsTlsDecrypt { /** Specify whether to inspect encrypted HTTP traffic. */ enabled?: boolean | null; } export const GatewayConfigurationsGetResponseSettingsTlsDecrypt = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettingsTlsDecrypt", }) as any as S.Schema; export interface GatewayConfigurationsGetResponseSettings { /** Specify activity log settings. */ activityLog?: GatewayConfigurationsGetResponseSettingsActivityLog | null; /** Specify anti-virus settings. */ antivirus?: GatewayConfigurationsGetResponseSettingsAntivirus | null; /** Specify block page layout settings. */ blockPage?: GatewayConfigurationsGetResponseSettingsBlockPage | null; /** Specify the DLP inspection mode. */ bodyScanning?: GatewayConfigurationsGetResponseSettingsBodyScanning | null; /** Specify Clientless Browser Isolation settings. */ browserIsolation?: GatewayConfigurationsGetResponseSettingsBrowserIsolation | null; /** Specify certificate settings for Gateway TLS interception. If unset, the Cloudflare Root CA handles interception. */ certificate?: GatewayConfigurationsGetResponseSettingsCertificate | null; /** Specify custom certificate settings for BYO-PKI. This field is deprecated; use `certificate` instead. */ customCertificate?: GatewayConfigurationsGetResponseSettingsCustomCertificate | null; /** Configures user email settings for firewall policies. When you enable this, the system standardizes email addresses in the identity portion of the rule to match extended email variants in firewall policies. When you disable this setting, the system matches email addresses exactly as you provide them. Enable this setting if your email uses `.` or `+` modifiers. */ extendedEmailMatching?: GatewayConfigurationsGetResponseSettingsExtendedEmailMatching | null; /** Specify FIPS settings. */ fips?: GatewayConfigurationsGetResponseSettingsFips | null; /** Enable host selection in egress policies. */ hostSelector?: GatewayConfigurationsGetResponseSettingsHostSelector | null; /** Define the proxy inspection mode. */ inspection?: GatewayConfigurationsGetResponseSettingsInspection | null; /** Account-level cap on DNS response TTLs, in seconds. Gateway rewrites DNS responses so returned record TTLs do not exceed this value. Null means no cap. Each DNS location can inherit, override, or disable it through the location `max_ttl` setting. */ maxTtlSecs?: number | null; /** Specify whether to detect protocols from the initial bytes of client traffic. */ protocolDetection?: GatewayConfigurationsGetResponseSettingsProtocolDetection | null; /** Specify whether to enable the sandbox. */ sandbox?: GatewayConfigurationsGetResponseSettingsSandbox | null; /** Specify whether to inspect encrypted HTTP traffic. */ tlsDecrypt?: GatewayConfigurationsGetResponseSettingsTlsDecrypt | null; } export const GatewayConfigurationsGetResponseSettings = /*@__PURE__*/ S.suspend( () => S.Struct({ activityLog: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsActivityLog).pipe( T.Body("activity_log"), ), ), antivirus: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsAntivirus), ), blockPage: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsBlockPage).pipe( T.Body("block_page"), ), ), bodyScanning: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsBodyScanning).pipe( T.Body("body_scanning"), ), ), browserIsolation: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsBrowserIsolation).pipe( T.Body("browser_isolation"), ), ), certificate: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsCertificate), ), customCertificate: S.optional( S.NullOr( GatewayConfigurationsGetResponseSettingsCustomCertificate, ).pipe(T.Body("custom_certificate")), ), extendedEmailMatching: S.optional( S.NullOr( GatewayConfigurationsGetResponseSettingsExtendedEmailMatching, ).pipe(T.Body("extended_email_matching")), ), fips: S.optional(S.NullOr(GatewayConfigurationsGetResponseSettingsFips)), hostSelector: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsHostSelector).pipe( T.Body("host_selector"), ), ), inspection: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsInspection), ), maxTtlSecs: S.optional(S.NullOr(S.Number).pipe(T.Body("max_ttl_secs"))), protocolDetection: S.optional( S.NullOr( GatewayConfigurationsGetResponseSettingsProtocolDetection, ).pipe(T.Body("protocol_detection")), ), sandbox: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsSandbox), ), tlsDecrypt: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsTlsDecrypt).pipe( T.Body("tls_decrypt"), ), ), }), ).annotate({ identifier: "GatewayConfigurationsGetResponseSettings", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetGatewayConfigurationResponse { createdAt?: string | null; /** Specify account settings. */ settings?: GatewayConfigurationsGetResponseSettings | null; updatedAt?: string | null; } export const GetGatewayConfigurationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), settings: S.optional(S.NullOr(GatewayConfigurationsGetResponseSettings)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayConfigurationResponse", }) as any as S.Schema; export interface GetGatewayConfigurationCustomCertificateRequest { accountId: string; } export const GetGatewayConfigurationCustomCertificateRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/configuration/custom_certificate", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayConfigurationCustomCertificateRequest", }) as any as S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface GetGatewayConfigurationCustomCertificateResponse {} export const GetGatewayConfigurationCustomCertificateResponse = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayConfigurationCustomCertificateResponse", }) as any as S.Schema; export interface GetGatewayListRequest { accountId: string; /** Identify the API resource with a UUID. */ listId: string; } export const GetGatewayListRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), listId: S.String.pipe(T.Label("list_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/lists/{list_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayListRequest", }) as any as S.Schema; export type GatewayListsGetResponseItemsItem = GatewayListsCreateResponseItemsItem; export const GatewayListsGetResponseItemsItem = GatewayListsCreateResponseItemsItem; export type GatewayListsGetResponseItemsList = Array; export const GatewayListsGetResponseItemsList = /*@__PURE__*/ S.Array( GatewayListsCreateResponseItemsItem, ) as any as S.Schema; export type GatewayListsGetResponseType = | "SERIAL" | "URL" | "DOMAIN" | "EMAIL" | "IP" | "CATEGORY" | "LOCATION" | "DEVICE" | "AAGUID"; export const GatewayListsGetResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetGatewayListResponse { /** Identify the API resource with a UUID. */ id?: string | null; /** Indicate the number of items in the list. */ count?: number | null; createdAt?: string | null; /** Provide the list description. */ description?: string | null; /** Provide the list items. */ items?: GatewayListsGetResponseItemsList | null; /** Specify the list name. */ name?: string | null; /** Specify the list type. */ type?: GatewayListsGetResponseType | null; updatedAt?: string | null; } export const GetGatewayListResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), count: S.optional(S.NullOr(S.Number)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), description: S.optional(S.NullOr(S.String)), items: S.optional(S.NullOr(GatewayListsGetResponseItemsList)), name: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(GatewayListsGetResponseType)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayListResponse", }) as any as S.Schema; export interface GetGatewayLocationRequest { accountId: string; locationId: string; } export const GetGatewayLocationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), locationId: S.String.pipe(T.Label("location_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/locations/{location_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayLocationRequest", }) as any as S.Schema; export type GatewayLocationsGetResponseEndpointsDohNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export const GatewayLocationsGetResponseEndpointsDohNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export type GatewayLocationsGetResponseEndpointsDohNetworksList = Array; export const GatewayLocationsGetResponseEndpointsDohNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsDohNetworksItem, ) as any as S.Schema; export interface GatewayLocationsGetResponseEndpointsDoh { /** Indicate whether the DOH endpoint is enabled for this location. */ enabled?: boolean | null; /** Specify the list of allowed source IP network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsGetResponseEndpointsDohNetworksList | null; /** Specify whether the DOH endpoint requires user identity authentication. */ requireToken?: boolean | null; } export const GatewayLocationsGetResponseEndpointsDoh = /*@__PURE__*/ S.suspend( () => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), networks: S.optional( S.NullOr(GatewayLocationsGetResponseEndpointsDohNetworksList), ), requireToken: S.optional( S.NullOr(S.Boolean).pipe(T.Body("require_token")), ), }), ).annotate({ identifier: "GatewayLocationsGetResponseEndpointsDoh", }) as any as S.Schema; export type GatewayLocationsGetResponseEndpointsDotNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export const GatewayLocationsGetResponseEndpointsDotNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export type GatewayLocationsGetResponseEndpointsDotNetworksList = Array; export const GatewayLocationsGetResponseEndpointsDotNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsDohNetworksItem, ) as any as S.Schema; export interface GatewayLocationsGetResponseEndpointsDot { /** Indicate whether the DOT endpoint is enabled for this location. */ enabled?: boolean | null; /** Specify the list of allowed source IP network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsGetResponseEndpointsDotNetworksList | null; } export const GatewayLocationsGetResponseEndpointsDot = /*@__PURE__*/ S.suspend( () => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), networks: S.optional( S.NullOr(GatewayLocationsGetResponseEndpointsDotNetworksList), ), }), ).annotate({ identifier: "GatewayLocationsGetResponseEndpointsDot", }) as any as S.Schema; export type GatewayLocationsGetResponseEndpointsIpv4 = GatewayLocationsCreateResponseEndpointsIpv4; export const GatewayLocationsGetResponseEndpointsIpv4 = GatewayLocationsCreateResponseEndpointsIpv4; export type GatewayLocationsGetResponseEndpointsIpv6NetworksItem = GatewayLocationsCreateRequestEndpointsIpv6NetworksItem; export const GatewayLocationsGetResponseEndpointsIpv6NetworksItem = GatewayLocationsCreateRequestEndpointsIpv6NetworksItem; export type GatewayLocationsGetResponseEndpointsIpv6NetworksList = Array; export const GatewayLocationsGetResponseEndpointsIpv6NetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsIpv6NetworksItem, ) as any as S.Schema; export interface GatewayLocationsGetResponseEndpointsIpv6 { /** Indicate whether the IPV6 endpoint is enabled for this location. */ enabled?: boolean | null; /** Specify the list of allowed source IPv6 network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsGetResponseEndpointsIpv6NetworksList | null; } export const GatewayLocationsGetResponseEndpointsIpv6 = /*@__PURE__*/ S.suspend( () => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), networks: S.optional( S.NullOr(GatewayLocationsGetResponseEndpointsIpv6NetworksList), ), }), ).annotate({ identifier: "GatewayLocationsGetResponseEndpointsIpv6", }) as any as S.Schema; export interface GatewayLocationsGetResponseEndpoints { doh: GatewayLocationsGetResponseEndpointsDoh; dot: GatewayLocationsGetResponseEndpointsDot; ipv4: GatewayLocationsCreateResponseEndpointsIpv4; ipv6: GatewayLocationsGetResponseEndpointsIpv6; } export const GatewayLocationsGetResponseEndpoints = /*@__PURE__*/ S.suspend( () => S.Struct({ doh: GatewayLocationsGetResponseEndpointsDoh, dot: GatewayLocationsGetResponseEndpointsDot, ipv4: GatewayLocationsCreateResponseEndpointsIpv4, ipv6: GatewayLocationsGetResponseEndpointsIpv6, }), ).annotate({ identifier: "GatewayLocationsGetResponseEndpoints", }) as any as S.Schema; export type GatewayLocationsGetResponseMaxTtlMode = | "inherit" | "override" | "disabled"; export const GatewayLocationsGetResponseMaxTtlMode = /*@__PURE__*/ S.String; export interface GatewayLocationsGetResponseMaxTtl { /** `inherit` uses the account `max_ttl_secs`. `override` uses this location's `ttl_secs`. `disabled` leaves returned TTLs unchanged. */ mode: GatewayLocationsGetResponseMaxTtlMode; /** Location-specific cap on DNS response TTLs, in seconds. Required when `mode` is `override`. Must be omitted when `mode` is `inherit` or `disabled`. */ ttlSecs?: number | null; } export const GatewayLocationsGetResponseMaxTtl = /*@__PURE__*/ S.suspend(() => S.Struct({ mode: GatewayLocationsGetResponseMaxTtlMode, ttlSecs: S.optional(S.NullOr(S.Number).pipe(T.Body("ttl_secs"))), }), ).annotate({ identifier: "GatewayLocationsGetResponseMaxTtl", }) as any as S.Schema; export type GatewayLocationsGetResponseNetworksItem = GatewayLocationsCreateRequestNetworksItem; export const GatewayLocationsGetResponseNetworksItem = GatewayLocationsCreateRequestNetworksItem; export type GatewayLocationsGetResponseNetworksList = Array; export const GatewayLocationsGetResponseNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestNetworksItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetGatewayLocationResponse { id?: string | null; /** Indicate whether this location is the default location. */ clientDefault?: boolean | null; createdAt?: string | null; /** Indicate the identifier of the pair of IPv4 addresses assigned to this location. */ dnsDestinationIpsId?: string | null; /** Specify the UUID of the IPv6 block brought to the gateway so that this location's IPv6 address is allocated from the Bring Your Own IPv6 (BYOIPv6) block rather than the standard Cloudflare IPv6 block. */ dnsDestinationIpv6BlockId?: string | null; /** Specify the DNS over HTTPS domain that receives DNS requests. Gateway automatically generates this value. */ dohSubdomain?: string | null; /** Indicate whether the location must resolve EDNS queries. */ ecsSupport?: boolean | null; /** Configure the destination endpoints for this location. */ endpoints?: GatewayLocationsGetResponseEndpoints | null; /** Defines the automatically generated IPv6 destination IP assigned to this location. Gateway counts all DNS requests sent to this IP as requests under this location. */ ip?: string | null; /** Show the primary destination IPv4 address from the pair identified dns_destination_ips_id. This field read-only. */ ipv4Destination?: string | null; /** Show the backup destination IPv4 address from the pair identified dns_destination_ips_id. This field read-only. */ ipv4DestinationBackup?: string | null; /** Controls how DNS response TTLs are capped for this location relative to the account `max_ttl_secs` setting. Omitting `max_ttl` on update resets it to `inherit`. */ maxTtl?: GatewayLocationsGetResponseMaxTtl | null; /** Specify the location name. */ name?: string | null; /** Specify the list of network ranges from which requests at this location originate. The list takes effect only if it is non-empty and the IPv4 endpoint is enabled for this location. */ networks?: GatewayLocationsGetResponseNetworksList | null; updatedAt?: string | null; } export const GetGatewayLocationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), clientDefault: S.optional( S.NullOr(S.Boolean).pipe(T.Body("client_default")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), dnsDestinationIpsId: S.optional( S.NullOr(S.String).pipe(T.Body("dns_destination_ips_id")), ), dnsDestinationIpv6BlockId: S.optional( S.NullOr(S.String).pipe(T.Body("dns_destination_ipv6_block_id")), ), dohSubdomain: S.optional(S.NullOr(S.String).pipe(T.Body("doh_subdomain"))), ecsSupport: S.optional(S.NullOr(S.Boolean).pipe(T.Body("ecs_support"))), endpoints: S.optional(S.NullOr(GatewayLocationsGetResponseEndpoints)), ip: S.optional(S.NullOr(S.String)), ipv4Destination: S.optional( S.NullOr(S.String).pipe(T.Body("ipv4_destination")), ), ipv4DestinationBackup: S.optional( S.NullOr(S.String).pipe(T.Body("ipv4_destination_backup")), ), maxTtl: S.optional( S.NullOr(GatewayLocationsGetResponseMaxTtl).pipe(T.Body("max_ttl")), ), name: S.optional(S.NullOr(S.String)), networks: S.optional(S.NullOr(GatewayLocationsGetResponseNetworksList)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayLocationResponse", }) as any as S.Schema; export interface GetGatewayLoggingRequest { accountId: string; } export const GetGatewayLoggingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/logging", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayLoggingRequest", }) as any as S.Schema; export interface GatewayLoggingGetResponseSettingsByRuleTypeDns { /** Specify whether to log all requests to this service. */ logAll?: boolean | null; /** Specify whether to log only blocking requests to this service. */ logBlocks?: boolean | null; } export const GatewayLoggingGetResponseSettingsByRuleTypeDns = /*@__PURE__*/ S.suspend(() => S.Struct({ logAll: S.optional(S.NullOr(S.Boolean).pipe(T.Body("log_all"))), logBlocks: S.optional(S.NullOr(S.Boolean).pipe(T.Body("log_blocks"))), }), ).annotate({ identifier: "GatewayLoggingGetResponseSettingsByRuleTypeDns", }) as any as S.Schema; export type GatewayLoggingGetResponseSettingsByRuleTypeHttp = GatewayLoggingGetResponseSettingsByRuleTypeDns; export const GatewayLoggingGetResponseSettingsByRuleTypeHttp = GatewayLoggingGetResponseSettingsByRuleTypeDns; export type GatewayLoggingGetResponseSettingsByRuleTypeL4 = GatewayLoggingGetResponseSettingsByRuleTypeDns; export const GatewayLoggingGetResponseSettingsByRuleTypeL4 = GatewayLoggingGetResponseSettingsByRuleTypeDns; export interface GatewayLoggingGetResponseSettingsByRuleType { /** Configure logging settings for DNS firewall. */ dns?: GatewayLoggingGetResponseSettingsByRuleTypeDns | null; /** Configure logging settings for HTTP/HTTPS firewall. */ http?: GatewayLoggingGetResponseSettingsByRuleTypeDns | null; /** Configure logging settings for Network firewall. */ l4?: GatewayLoggingGetResponseSettingsByRuleTypeDns | null; } export const GatewayLoggingGetResponseSettingsByRuleType = /*@__PURE__*/ S.suspend(() => S.Struct({ dns: S.optional(S.NullOr(GatewayLoggingGetResponseSettingsByRuleTypeDns)), http: S.optional( S.NullOr(GatewayLoggingGetResponseSettingsByRuleTypeDns), ), l4: S.optional(S.NullOr(GatewayLoggingGetResponseSettingsByRuleTypeDns)), }), ).annotate({ identifier: "GatewayLoggingGetResponseSettingsByRuleType", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetGatewayLoggingResponse { /** Indicate whether to redact personally identifiable information from activity logging (PII fields include source IP, user email, user ID, device ID, URL, referrer, and user agent). */ redactPii?: boolean | null; /** Configure logging settings for each rule type. */ settingsByRuleType?: GatewayLoggingGetResponseSettingsByRuleType | null; } export const GetGatewayLoggingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ redactPii: S.optional(S.NullOr(S.Boolean).pipe(T.Body("redact_pii"))), settingsByRuleType: S.optional( S.NullOr(GatewayLoggingGetResponseSettingsByRuleType).pipe( T.Body("settings_by_rule_type"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayLoggingResponse", }) as any as S.Schema; export interface GetGatewayPacfileRequest { accountId: string; pacfileId: string; } export const GetGatewayPacfileRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), pacfileId: S.String.pipe(T.Label("pacfile_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/pacfiles/{pacfile_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayPacfileRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetGatewayPacfileResponse { id?: string | null; /** Actual contents of the PAC file */ contents?: string | null; createdAt?: string | null; /** Detailed description of the PAC file. */ description?: string | null; /** Name of the PAC file. */ name?: string | null; /** URL-friendly version of the PAC file name. */ slug?: string | null; updatedAt?: string | null; /** Unique URL to download the PAC file. */ url?: string | null; } export const GetGatewayPacfileResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), contents: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), description: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), slug: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), url: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayPacfileResponse", }) as any as S.Schema; export interface GetGatewayProxyEndpointRequest { accountId: string; proxyEndpointId: string; } export const GetGatewayProxyEndpointRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), proxyEndpointId: S.String.pipe(T.Label("proxy_endpoint_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/proxy_endpoints/{proxy_endpoint_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayProxyEndpointRequest", }) as any as S.Schema; export type GatewayProxyEndpointsGetResultIPIpsList = Array; export const GatewayProxyEndpointsGetResultIPIpsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayProxyEndpointsGetResultIPKind = "ip"; export const GatewayProxyEndpointsGetResultIPKind = /*@__PURE__*/ S.String; export interface GatewayProxyEndpointsGetResultIP { /** Specify the list of CIDRs to restrict ingress connections. */ ips?: GatewayProxyEndpointsGetResultIPIpsList | null; /** Specify the name of the proxy endpoint. */ name: string; id?: string | null; createdAt?: string | null; /** The proxy endpoint kind */ kind?: GatewayProxyEndpointsGetResultIPKind | null; /** Specify the subdomain to use as the destination in the proxy client. */ subdomain?: string | null; updatedAt?: string | null; } export const GatewayProxyEndpointsGetResultIP = /*@__PURE__*/ S.suspend(() => S.Struct({ ips: S.optional(S.NullOr(GatewayProxyEndpointsGetResultIPIpsList)), name: S.String, id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), kind: S.optional(S.NullOr(GatewayProxyEndpointsGetResultIPKind)), subdomain: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "GatewayProxyEndpointsGetResultIP", }) as any as S.Schema; export type GatewayProxyEndpointsGetResultIdentityKind = "identity"; export const GatewayProxyEndpointsGetResultIdentityKind = /*@__PURE__*/ S.String; export interface GatewayProxyEndpointsGetResultIdentity { /** The proxy endpoint kind */ kind: GatewayProxyEndpointsGetResultIdentityKind; /** Specify the name of the proxy endpoint. */ name: string; id?: string | null; createdAt?: string | null; /** Specify the subdomain to use as the destination in the proxy client. */ subdomain?: string | null; updatedAt?: string | null; } export const GatewayProxyEndpointsGetResultIdentity = /*@__PURE__*/ S.suspend( () => S.Struct({ kind: GatewayProxyEndpointsGetResultIdentityKind, name: S.String, id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), subdomain: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "GatewayProxyEndpointsGetResultIdentity", }) as any as S.Schema; export type GatewayProxyEndpointsGetResult = | GatewayProxyEndpointsGetResultIP | GatewayProxyEndpointsGetResultIdentity; export const GatewayProxyEndpointsGetResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["ips", "name", "id", "createdAt", "kind", "subdomain", "updatedAt"], ["kind", "name", "id", "createdAt", "subdomain", "updatedAt"], ]), ); export type GetGatewayProxyEndpointResponse = GatewayProxyEndpointsGetResult; export const GetGatewayProxyEndpointResponse = /*@__PURE__*/ S.suspend(() => GatewayProxyEndpointsGetResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "GetGatewayProxyEndpointResponse", }) as any as S.Schema; export interface GetGatewayRuleRequest { accountId: string; /** Identify the API resource with a UUID. */ ruleId: string; } export const GetGatewayRuleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ruleId: S.String.pipe(T.Label("rule_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/rules/{rule_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayRuleRequest", }) as any as S.Schema; export type GatewayRulesGetResponseAction = | "on" | "off" | "allow" | "block" | "scan" | "noscan" | "safesearch" | "ytrestricted" | "isolate" | "noisolate" | "override" | "l4_override" | "egress" | "resolve" | "quarantine" | "redirect"; export const GatewayRulesGetResponseAction = /*@__PURE__*/ S.String; export type GatewayRulesGetResponseFiltersItem = | "http" | "dns" | "l4" | "egress" | "dns_resolver"; export const GatewayRulesGetResponseFiltersItem = /*@__PURE__*/ S.String; export type GatewayRulesGetResponseFiltersList = Array; export const GatewayRulesGetResponseFiltersList = /*@__PURE__*/ S.Array( GatewayRulesGetResponseFiltersItem, ) as any as S.Schema; export type GatewayRulesGetResponseExpiration = GatewayRulesCreateResponseExpiration; export const GatewayRulesGetResponseExpiration = GatewayRulesCreateResponseExpiration; export type GatewayRulesGetResponseRuleSettingsAddHeadersValueList = Array; export const GatewayRulesGetResponseRuleSettingsAddHeadersValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayRulesGetResponseRuleSettingsAddHeadersMap = { [key: string]: | GatewayRulesGetResponseRuleSettingsAddHeadersValueList | undefined; }; export const GatewayRulesGetResponseRuleSettingsAddHeadersMap = /*@__PURE__*/ S.Record( S.String, GatewayRulesGetResponseRuleSettingsAddHeadersValueList, ) as any as S.Schema; export type GatewayRulesGetResponseRuleSettingsAuditSsh = GatewayRulesCreateResponseRuleSettingsAuditSsh; export const GatewayRulesGetResponseRuleSettingsAuditSsh = GatewayRulesCreateResponseRuleSettingsAuditSsh; export type GatewayRulesGetResponseRuleSettingsBisoAdminControlsCopy = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesGetResponseRuleSettingsBisoAdminControlsCopy = /*@__PURE__*/ S.String; export type GatewayRulesGetResponseRuleSettingsBisoAdminControlsDownload = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesGetResponseRuleSettingsBisoAdminControlsDownload = /*@__PURE__*/ S.String; export type GatewayRulesGetResponseRuleSettingsBisoAdminControlsKeyboard = | "enabled" | "disabled"; export const GatewayRulesGetResponseRuleSettingsBisoAdminControlsKeyboard = /*@__PURE__*/ S.String; export type GatewayRulesGetResponseRuleSettingsBisoAdminControlsPaste = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesGetResponseRuleSettingsBisoAdminControlsPaste = /*@__PURE__*/ S.String; export type GatewayRulesGetResponseRuleSettingsBisoAdminControlsPrinting = | "enabled" | "disabled"; export const GatewayRulesGetResponseRuleSettingsBisoAdminControlsPrinting = /*@__PURE__*/ S.String; export type GatewayRulesGetResponseRuleSettingsBisoAdminControlsUpload = | "enabled" | "disabled"; export const GatewayRulesGetResponseRuleSettingsBisoAdminControlsUpload = /*@__PURE__*/ S.String; export type GatewayRulesGetResponseRuleSettingsBisoAdminControlsVersion = | "v1" | "v2"; export const GatewayRulesGetResponseRuleSettingsBisoAdminControlsVersion = /*@__PURE__*/ S.String; export interface GatewayRulesGetResponseRuleSettingsBisoAdminControls { /** Configure copy behavior. If set to remote_only, users cannot copy isolated content from the remote browser to the local clipboard. If this field is absent, copying remains enabled. Applies only when version == "v2". */ copy?: GatewayRulesGetResponseRuleSettingsBisoAdminControlsCopy | null; /** Set to false to enable copy-pasting. Only applies when `version == "v1"`. */ dcp?: boolean | null; /** Set to false to enable downloading. Only applies when `version == "v1"`. */ dd?: boolean | null; /** Set to false to enable keyboard usage. Only applies when `version == "v1"`. */ dk?: boolean | null; /** Configure download behavior. When set to remote_only, users can view downloads but cannot save them. If this field is absent, downloading remains enabled. Applies only when version == "v2". */ download?: GatewayRulesGetResponseRuleSettingsBisoAdminControlsDownload | null; /** Set to false to enable printing. Only applies when `version == "v1"`. */ dp?: boolean | null; /** Set to false to enable uploading. Only applies when `version == "v1"`. */ du?: boolean | null; /** Configure keyboard usage behavior. If this field is absent, keyboard usage remains enabled. Applies only when version == "v2". */ keyboard?: GatewayRulesGetResponseRuleSettingsBisoAdminControlsKeyboard | null; /** Configure paste behavior. If set to remote_only, users cannot paste content from the local clipboard into isolated pages. If this field is absent, pasting remains enabled. Applies only when version == "v2". */ paste?: GatewayRulesGetResponseRuleSettingsBisoAdminControlsPaste | null; /** Configure print behavior. Default, Printing is enabled. Applies only when version == "v2". */ printing?: GatewayRulesGetResponseRuleSettingsBisoAdminControlsPrinting | null; /** Configure upload behavior. If this field is absent, uploading remains enabled. Applies only when version == "v2". */ upload?: GatewayRulesGetResponseRuleSettingsBisoAdminControlsUpload | null; /** Indicate which version of the browser isolation controls should apply. */ version?: GatewayRulesGetResponseRuleSettingsBisoAdminControlsVersion | null; /** Specify the watermark ID (UUID) to apply to the isolated browser session. When present, enables watermark rendering in the isolated browser. */ wmId?: string | null; } export const GatewayRulesGetResponseRuleSettingsBisoAdminControls = /*@__PURE__*/ S.suspend(() => S.Struct({ copy: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsBisoAdminControlsCopy), ), dcp: S.optional(S.NullOr(S.Boolean)), dd: S.optional(S.NullOr(S.Boolean)), dk: S.optional(S.NullOr(S.Boolean)), download: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsBisoAdminControlsDownload), ), dp: S.optional(S.NullOr(S.Boolean)), du: S.optional(S.NullOr(S.Boolean)), keyboard: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsBisoAdminControlsKeyboard), ), paste: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsBisoAdminControlsPaste), ), printing: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsBisoAdminControlsPrinting), ), upload: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsBisoAdminControlsUpload), ), version: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsBisoAdminControlsVersion), ), wmId: S.optional(S.NullOr(S.String).pipe(T.Body("wm_id"))), }), ).annotate({ identifier: "GatewayRulesGetResponseRuleSettingsBisoAdminControls", }) as any as S.Schema; export type GatewayRulesGetResponseRuleSettingsBlockPage = GatewayRulesCreateResponseRuleSettingsBlockPage; export const GatewayRulesGetResponseRuleSettingsBlockPage = GatewayRulesCreateResponseRuleSettingsBlockPage; export type GatewayRulesGetResponseRuleSettingsCheckSession = GatewayRulesCreateResponseRuleSettingsCheckSession; export const GatewayRulesGetResponseRuleSettingsCheckSession = GatewayRulesCreateResponseRuleSettingsCheckSession; export type GatewayRulesGetResponseRuleSettingsDnsResolversIpv4Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item; export const GatewayRulesGetResponseRuleSettingsDnsResolversIpv4Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item; export type GatewayRulesGetResponseRuleSettingsDnsResolversIpv4List = Array; export const GatewayRulesGetResponseRuleSettingsDnsResolversIpv4List = /*@__PURE__*/ S.Array( GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item, ) as any as S.Schema; export type GatewayRulesGetResponseRuleSettingsDnsResolversIpv6Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item; export const GatewayRulesGetResponseRuleSettingsDnsResolversIpv6Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item; export type GatewayRulesGetResponseRuleSettingsDnsResolversIpv6List = Array; export const GatewayRulesGetResponseRuleSettingsDnsResolversIpv6List = /*@__PURE__*/ S.Array( GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item, ) as any as S.Schema; export interface GatewayRulesGetResponseRuleSettingsDnsResolvers { ipv4?: GatewayRulesGetResponseRuleSettingsDnsResolversIpv4List | null; ipv6?: GatewayRulesGetResponseRuleSettingsDnsResolversIpv6List | null; } export const GatewayRulesGetResponseRuleSettingsDnsResolvers = /*@__PURE__*/ S.suspend(() => S.Struct({ ipv4: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsDnsResolversIpv4List), ), ipv6: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsDnsResolversIpv6List), ), }), ).annotate({ identifier: "GatewayRulesGetResponseRuleSettingsDnsResolvers", }) as any as S.Schema; export type GatewayRulesGetResponseRuleSettingsEgress = GatewayRulesCreateResponseRuleSettingsEgress; export const GatewayRulesGetResponseRuleSettingsEgress = GatewayRulesCreateResponseRuleSettingsEgress; export type GatewayRulesGetResponseRuleSettingsForensicCopy = GatewayRulesCreateResponseRuleSettingsForensicCopy; export const GatewayRulesGetResponseRuleSettingsForensicCopy = GatewayRulesCreateResponseRuleSettingsForensicCopy; export type GatewayRulesGetResponseRuleSettingsL4override = GatewayRulesCreateResponseRuleSettingsL4override; export const GatewayRulesGetResponseRuleSettingsL4override = GatewayRulesCreateResponseRuleSettingsL4override; export type GatewayRulesGetResponseRuleSettingsNotificationSettings = GatewayRulesCreateResponseRuleSettingsNotificationSettings; export const GatewayRulesGetResponseRuleSettingsNotificationSettings = GatewayRulesCreateResponseRuleSettingsNotificationSettings; export type GatewayRulesGetResponseRuleSettingsOverrideIpsList = Array; export const GatewayRulesGetResponseRuleSettingsOverrideIpsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayRulesGetResponseRuleSettingsPayloadLog = GatewayRulesCreateResponseRuleSettingsPayloadLog; export const GatewayRulesGetResponseRuleSettingsPayloadLog = GatewayRulesCreateResponseRuleSettingsPayloadLog; export type GatewayRulesGetResponseRuleSettingsQuarantineFileTypesItem = | "exe" | "pdf" | "doc" | "docm" | "docx" | "rtf" | "ppt" | "pptx" | "xls" | "xlsm" | "xlsx" | "zip" | "rar"; export const GatewayRulesGetResponseRuleSettingsQuarantineFileTypesItem = /*@__PURE__*/ S.String; export type GatewayRulesGetResponseRuleSettingsQuarantineFileTypesList = Array; export const GatewayRulesGetResponseRuleSettingsQuarantineFileTypesList = /*@__PURE__*/ S.Array( GatewayRulesGetResponseRuleSettingsQuarantineFileTypesItem, ) as any as S.Schema; export interface GatewayRulesGetResponseRuleSettingsQuarantine { /** Specify the types of files to sandbox. */ fileTypes?: GatewayRulesGetResponseRuleSettingsQuarantineFileTypesList | null; } export const GatewayRulesGetResponseRuleSettingsQuarantine = /*@__PURE__*/ S.suspend(() => S.Struct({ fileTypes: S.optional( S.NullOr( GatewayRulesGetResponseRuleSettingsQuarantineFileTypesList, ).pipe(T.Body("file_types")), ), }), ).annotate({ identifier: "GatewayRulesGetResponseRuleSettingsQuarantine", }) as any as S.Schema; export type GatewayRulesGetResponseRuleSettingsRedirect = GatewayRulesCreateResponseRuleSettingsRedirect; export const GatewayRulesGetResponseRuleSettingsRedirect = GatewayRulesCreateResponseRuleSettingsRedirect; export type GatewayRulesGetResponseRuleSettingsResolveDnsInternallyFallback = | "none" | "public_dns"; export const GatewayRulesGetResponseRuleSettingsResolveDnsInternallyFallback = /*@__PURE__*/ S.String; export interface GatewayRulesGetResponseRuleSettingsResolveDnsInternally { /** Specify the fallback behavior to apply when the internal DNS response code differs from 'NOERROR' or when the response data contains only CNAME records for 'A' or 'AAAA' queries. */ fallback?: GatewayRulesGetResponseRuleSettingsResolveDnsInternallyFallback | null; /** Specify the internal DNS view identifier to pass to the internal DNS service. */ viewId?: string | null; } export const GatewayRulesGetResponseRuleSettingsResolveDnsInternally = /*@__PURE__*/ S.suspend(() => S.Struct({ fallback: S.optional( S.NullOr( GatewayRulesGetResponseRuleSettingsResolveDnsInternallyFallback, ), ), viewId: S.optional(S.NullOr(S.String).pipe(T.Body("view_id"))), }), ).annotate({ identifier: "GatewayRulesGetResponseRuleSettingsResolveDnsInternally", }) as any as S.Schema; export type GatewayRulesGetResponseRuleSettingsUntrustedCertAction = | "pass_through" | "block" | "error"; export const GatewayRulesGetResponseRuleSettingsUntrustedCertAction = /*@__PURE__*/ S.String; export interface GatewayRulesGetResponseRuleSettingsUntrustedCert { /** Defines the action performed when an untrusted certificate seen. The default action an error with HTTP code 526. */ action?: GatewayRulesGetResponseRuleSettingsUntrustedCertAction | null; } export const GatewayRulesGetResponseRuleSettingsUntrustedCert = /*@__PURE__*/ S.suspend(() => S.Struct({ action: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsUntrustedCertAction), ), }), ).annotate({ identifier: "GatewayRulesGetResponseRuleSettingsUntrustedCert", }) as any as S.Schema; export interface GatewayRulesGetResponseRuleSettings { /** Add custom headers to allowed requests as key-value pairs. Use header names as keys that map to arrays of header values. Settable only for `http` rules with the action set to `allow`. */ addHeaders?: GatewayRulesGetResponseRuleSettingsAddHeadersMap | null; /** Set to enable MSP children to bypass this rule. Only parent MSP accounts can set this. this rule. Settable for all types of rules. */ allowChildBypass?: boolean | null; /** Define the settings for the Audit SSH action. Settable only for `l4` rules with `audit_ssh` action. */ auditSsh?: GatewayRulesCreateResponseRuleSettingsAuditSsh | null; /** Configure browser isolation behavior. Settable only for `http` rules with the action set to `isolate`. */ bisoAdminControls?: GatewayRulesGetResponseRuleSettingsBisoAdminControls | null; /** Configure custom block page settings. If missing or null, use the account settings. Settable only for `http` rules with the action set to `block`. */ blockPage?: GatewayRulesCreateResponseRuleSettingsBlockPage | null; /** Enable the custom block page. Settable only for `dns` rules with action `block`. */ blockPageEnabled?: boolean | null; /** Explain why the rule blocks the request. The custom block page shows this text (if enabled). Settable only for `dns`, `l4`, and `http` rules when the action set to `block`. */ blockReason?: string | null; /** Set to enable MSP accounts to bypass their parent's rules. Only MSP child accounts can set this. Settable for all types of rules. */ bypassParentRule?: boolean | null; /** Configure session check behavior. Settable only for `l4` and `http` rules with the action set to `allow`. */ checkSession?: GatewayRulesCreateResponseRuleSettingsCheckSession | null; /** Configure custom resolvers to route queries that match the resolver policy. Unused with 'resolve_dns_through_cloudflare' or 'resolve_dns_internally' settings. DNS queries get routed to the address closest to their origin. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ dnsResolvers?: GatewayRulesGetResponseRuleSettingsDnsResolvers | null; /** Configure how Gateway Proxy traffic egresses. You can enable this setting for rules with Egress actions and filters, or omit it to indicate local egress via WARP IPs. Settable only for `egress` rules. */ egress?: GatewayRulesCreateResponseRuleSettingsEgress | null; /** Configure whether a copy of the HTTP request will be sent to storage when the rule matches. */ forensicCopy?: GatewayRulesCreateResponseRuleSettingsForensicCopy | null; /** Ignore category matches at CNAME domains in a response. When off, evaluate categories in this rule against all CNAME domain categories in the response. Settable only for `dns` and `dns_resolver` rules. */ ignoreCnameCategoryMatches?: boolean | null; /** Specify whether to disable DNSSEC validation (for Allow actions) [INSECURE]. Settable only for `dns` rules. */ insecureDisableDnssecValidation?: boolean | null; /** Enable IPs in DNS resolver category blocks. The system blocks only domain name categories unless you enable this setting. Settable only for `dns` and `dns_resolver` rules. */ ipCategories?: boolean | null; /** Indicates whether to include IPs in DNS resolver indicator feed blocks. Default, indicator feeds block only domain names. Settable only for `dns` and `dns_resolver` rules. */ ipIndicatorFeeds?: boolean | null; /** Send matching traffic to the supplied destination IP address and port. Settable only for `l4` rules with the action set to `l4_override`. */ l4override?: GatewayRulesCreateResponseRuleSettingsL4override | null; /** Configure a notification to display on the user's device when this rule matched. Settable for all types of rules with the action set to `block`. */ notificationSettings?: GatewayRulesCreateResponseRuleSettingsNotificationSettings | null; /** Defines a hostname for override, for the matching DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideHost?: string | null; /** Defines a an IP or set of IPs for overriding matched DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideIps?: GatewayRulesGetResponseRuleSettingsOverrideIpsList | null; /** Configure DLP payload logging. Settable only for `http` rules. */ payloadLog?: GatewayRulesCreateResponseRuleSettingsPayloadLog | null; /** Configure settings that apply to quarantine rules. Settable only for `http` rules. */ quarantine?: GatewayRulesGetResponseRuleSettingsQuarantine | null; /** Apply settings to redirect rules. Settable only for `http` rules with the action set to `redirect`. */ redirect?: GatewayRulesCreateResponseRuleSettingsRedirect | null; /** Configure to forward the query to the internal DNS service, passing the specified 'view_id' as input. Not used when 'dns_resolvers' is specified or 'resolve_dns_through_cloudflare' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsInternally?: GatewayRulesGetResponseRuleSettingsResolveDnsInternally | null; /** Enable to send queries that match the policy to Cloudflare's default 1.1.1.1 DNS resolver. Cannot set when 'dns_resolvers' specified or 'resolve_dns_internally' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsThroughCloudflare?: boolean | null; /** Configure behavior when an upstream certificate is invalid or an SSL error occurs. Settable only for `http` rules with the action set to `allow`. */ untrustedCert?: GatewayRulesGetResponseRuleSettingsUntrustedCert | null; } export const GatewayRulesGetResponseRuleSettings = /*@__PURE__*/ S.suspend(() => S.Struct({ addHeaders: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsAddHeadersMap).pipe( T.Body("add_headers"), ), ), allowChildBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_child_bypass")), ), auditSsh: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsAuditSsh).pipe( T.Body("audit_ssh"), ), ), bisoAdminControls: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsBisoAdminControls).pipe( T.Body("biso_admin_controls"), ), ), blockPage: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsBlockPage).pipe( T.Body("block_page"), ), ), blockPageEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("block_page_enabled")), ), blockReason: S.optional(S.NullOr(S.String).pipe(T.Body("block_reason"))), bypassParentRule: S.optional( S.NullOr(S.Boolean).pipe(T.Body("bypass_parent_rule")), ), checkSession: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsCheckSession).pipe( T.Body("check_session"), ), ), dnsResolvers: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsDnsResolvers).pipe( T.Body("dns_resolvers"), ), ), egress: S.optional(S.NullOr(GatewayRulesCreateResponseRuleSettingsEgress)), forensicCopy: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsForensicCopy).pipe( T.Body("forensic_copy"), ), ), ignoreCnameCategoryMatches: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ignore_cname_category_matches")), ), insecureDisableDnssecValidation: S.optional( S.NullOr(S.Boolean).pipe(T.Body("insecure_disable_dnssec_validation")), ), ipCategories: S.optional(S.NullOr(S.Boolean).pipe(T.Body("ip_categories"))), ipIndicatorFeeds: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ip_indicator_feeds")), ), l4override: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsL4override), ), notificationSettings: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsNotificationSettings).pipe( T.Body("notification_settings"), ), ), overrideHost: S.optional(S.NullOr(S.String).pipe(T.Body("override_host"))), overrideIps: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsOverrideIpsList).pipe( T.Body("override_ips"), ), ), payloadLog: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsPayloadLog).pipe( T.Body("payload_log"), ), ), quarantine: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsQuarantine), ), redirect: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsRedirect), ), resolveDnsInternally: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsResolveDnsInternally).pipe( T.Body("resolve_dns_internally"), ), ), resolveDnsThroughCloudflare: S.optional( S.NullOr(S.Boolean).pipe(T.Body("resolve_dns_through_cloudflare")), ), untrustedCert: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettingsUntrustedCert).pipe( T.Body("untrusted_cert"), ), ), }), ).annotate({ identifier: "GatewayRulesGetResponseRuleSettings", }) as any as S.Schema; export type GatewayRulesGetResponseSchedule = GatewayRulesCreateResponseSchedule; export const GatewayRulesGetResponseSchedule = GatewayRulesCreateResponseSchedule; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetGatewayRuleResponse { /** Specify the action to perform when the associated traffic, identity, and device posture expressions either absent or evaluate to `true`. */ action: GatewayRulesGetResponseAction; /** Specify whether the rule is enabled. */ enabled: boolean; /** Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value. */ filters: GatewayRulesGetResponseFiltersList; /** Specify the rule name. */ name: string; /** Set the order of your rules. Lower values indicate higher precedence. At each processing phase, evaluate applicable rules in ascending order of this value. Refer to [Order of enforcement](http://developers.cloudflare.com/learning-paths/secure-internet-traffic/understand-policies/order-of-enforcement/#manage-precedence-with-terraform) to manage precedence via Terraform. */ precedence: number; /** Specify the wirefilter expression used for traffic matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ traffic: string; /** Identify the API resource with a UUID. */ id?: string | null; createdAt?: string | null; /** Indicate the date of deletion, if any. */ deletedAt?: string | null; /** Specify the rule description. */ description?: string | null; /** Specify the wirefilter expression used for device posture check. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ devicePosture?: string | null; /** Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This does not apply to HTTP or network policies. Settable only for `dns` rules. */ expiration?: GatewayRulesCreateResponseExpiration | null; /** Specify the wirefilter expression used for identity matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ identity?: string | null; /** Indicate that this rule is shared via the Orgs API and read only. */ readOnly?: boolean | null; /** Defines settings for this rule. Settings apply only to specific rule types and must use compatible selectors. If Terraform detects drift, confirm the setting supports your rule type and check whether the API modifies the value. Use API-returned values in your configuration to prevent drift. */ ruleSettings?: GatewayRulesGetResponseRuleSettings | null; /** Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules. */ schedule?: GatewayRulesCreateResponseSchedule | null; /** Indicate that this rule is sharable via the Orgs API. */ sharable?: boolean | null; /** Provide the account tag of the account that created the rule. */ sourceAccount?: string | null; updatedAt?: string | null; /** Indicate the version number of the rule(read-only). */ version?: number | null; /** Indicate a warning for a misconfigured rule, if any. */ warningStatus?: string | null; } export const GetGatewayRuleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ action: GatewayRulesGetResponseAction, enabled: S.Boolean, filters: GatewayRulesGetResponseFiltersList, name: S.String, precedence: S.Number, traffic: S.String, id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), description: S.optional(S.NullOr(S.String)), devicePosture: S.optional( S.NullOr(S.String).pipe(T.Body("device_posture")), ), expiration: S.optional(S.NullOr(GatewayRulesCreateResponseExpiration)), identity: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), ruleSettings: S.optional( S.NullOr(GatewayRulesGetResponseRuleSettings).pipe( T.Body("rule_settings"), ), ), schedule: S.optional(S.NullOr(GatewayRulesCreateResponseSchedule)), sharable: S.optional(S.NullOr(S.Boolean)), sourceAccount: S.optional( S.NullOr(S.String).pipe(T.Body("source_account")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), version: S.optional(S.NullOr(S.Number)), warningStatus: S.optional( S.NullOr(S.String).pipe(T.Body("warning_status")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetGatewayRuleResponse", }) as any as S.Schema; export interface GetIdentityProviderForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ identityProviderId: string; } export const GetIdentityProviderForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), identityProviderId: S.String.pipe(T.Label("identity_provider_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/identity_providers/{identity_provider_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetIdentityProviderForAccountRequest", }) as any as S.Schema; export type IdentityProvidersGetResultAzureADConfigClaimsList = Array; export const IdentityProvidersGetResultAzureADConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersGetResultAzureADConfigPrompt = | "login" | "select_account" | "none"; export const IdentityProvidersGetResultAzureADConfigPrompt = /*@__PURE__*/ S.String; export interface IdentityProvidersGetResultAzureADConfig { /** Custom claims */ claims?: IdentityProvidersGetResultAzureADConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** Should Cloudflare try to load authentication contexts from your account */ conditionalAccessEnabled?: boolean | null; /** Your Azure directory uuid */ directoryId?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Indicates the type of user interaction that is required. prompt=login forces the user to enter their credentials on that request, negating single-sign on. prompt=none is the opposite. It ensures that the user isn't presented with any interactive prompt. If the request can't be completed silently by using single-sign on, the Microsoft identity platform returns an interaction_required error. prompt=select_account interrupts single sign-on providing account selection experience listing all the accounts either in session or any remembered account or an option to choose to use a different account altogether. */ prompt?: IdentityProvidersGetResultAzureADConfigPrompt | null; /** Should Cloudflare try to load groups from your account */ supportGroups?: boolean | null; } export const IdentityProvidersGetResultAzureADConfig = /*@__PURE__*/ S.suspend( () => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersGetResultAzureADConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), conditionalAccessEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("conditional_access_enabled")), ), directoryId: S.optional(S.NullOr(S.String).pipe(T.Body("directory_id"))), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), prompt: S.optional( S.NullOr(IdentityProvidersGetResultAzureADConfigPrompt), ), supportGroups: S.optional( S.NullOr(S.Boolean).pipe(T.Body("support_groups")), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAzureADConfig", }) as any as S.Schema; export type IdentityProvidersGetResultAzureADType = | "onetimepin" | "azureAD" | "saml" | "centrify" | "facebook" | "github" | "google-apps" | "google" | "linkedin" | "oidc" | "okta" | "onelogin" | "pingone" | "yandex" | "cloudflare"; export const IdentityProvidersGetResultAzureADType = /*@__PURE__*/ S.String; export type IdentityProvidersGetResultAzureADSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersGetResultAzureADSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersGetResultAzureADSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersGetResultAzureADSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export type IdentityProvidersGetResultAzureADScimConfigIdentityUpdateBehavior = | "automatic" | "reauth" | "no_action"; export const IdentityProvidersGetResultAzureADScimConfigIdentityUpdateBehavior = /*@__PURE__*/ S.String; export interface IdentityProvidersGetResultAzureADScimConfig { /** A flag to enable or disable SCIM for the identity provider. */ enabled?: boolean | null; /** Indicates how a SCIM event updates a user identity used for policy evaluation. Use "automatic" to automatically update a user's identity and augment it with fields from the SCIM user resource. Use "reauth" to force re-authentication on group membership updates, user identity update will only occur after successful re-authentication. With "reauth" identities will not contain fields from the SCIM user resource. With "no_action" identities will not be changed by SCIM updates in any way and users will not be prompted to reauthenticate. */ identityUpdateBehavior?: IdentityProvidersGetResultAzureADScimConfigIdentityUpdateBehavior | null; /** The base URL of Cloudflare's SCIM V2.0 API endpoint. */ scimBaseUrl?: string | null; /** A flag to remove a user's seat in Zero Trust when they have been deprovisioned in the Identity Provider. This cannot be enabled unless user_deprovision is also enabled. */ seatDeprovision?: boolean | null; /** A read-only token generated when the SCIM integration is enabled for the first time. It is redacted on subsequent requests. If you lose this you will need to refresh it at /access/identity_providers/:idpID/refresh_scim_secret. */ secret?: string | null; /** A flag to enable revoking a user's session in Access and Gateway when they have been deprovisioned in the Identity Provider. */ userDeprovision?: boolean | null; } export const IdentityProvidersGetResultAzureADScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), identityUpdateBehavior: S.optional( S.NullOr( IdentityProvidersGetResultAzureADScimConfigIdentityUpdateBehavior, ).pipe(T.Body("identity_update_behavior")), ), scimBaseUrl: S.optional(S.NullOr(S.String).pipe(T.Body("scim_base_url"))), seatDeprovision: S.optional( S.NullOr(S.Boolean).pipe(T.Body("seat_deprovision")), ), secret: S.optional(S.NullOr(S.String)), userDeprovision: S.optional( S.NullOr(S.Boolean).pipe(T.Body("user_deprovision")), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAzureADScimConfig", }) as any as S.Schema; export interface IdentityProvidersGetResultAzureAD { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersGetResultAzureADConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersGetResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersGetResultAzureADScimConfig | null; } export const IdentityProvidersGetResultAzureAD = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersGetResultAzureADConfig, name: S.String, type: IdentityProvidersGetResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersGetResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAzureAD", }) as any as S.Schema; export type IdentityProvidersGetResultAccessCentrifyConfigClaimsList = Array; export const IdentityProvidersGetResultAccessCentrifyConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersGetResultAccessCentrifyConfig { /** Your centrify account url */ centrifyAccount?: string | null; /** Your centrify app id */ centrifyAppId?: string | null; /** Custom claims */ claims?: IdentityProvidersGetResultAccessCentrifyConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; } export const IdentityProvidersGetResultAccessCentrifyConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ centrifyAccount: S.optional( S.NullOr(S.String).pipe(T.Body("centrify_account")), ), centrifyAppId: S.optional( S.NullOr(S.String).pipe(T.Body("centrify_app_id")), ), claims: S.optional( S.NullOr(IdentityProvidersGetResultAccessCentrifyConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessCentrifyConfig", }) as any as S.Schema; export type IdentityProvidersGetResultAccessCentrifySamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersGetResultAccessCentrifySamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersGetResultAccessCentrifySamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersGetResultAccessCentrifySamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersGetResultAccessCentrify { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersGetResultAccessCentrifyConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersGetResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersGetResultAzureADScimConfig | null; } export const IdentityProvidersGetResultAccessCentrify = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersGetResultAccessCentrifyConfig, name: S.String, type: IdentityProvidersGetResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersGetResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessCentrify", }) as any as S.Schema; export type IdentityProvidersGetResultAccessFacebookConfig = IdentityProvidersCreateResultAccessFacebookConfig; export const IdentityProvidersGetResultAccessFacebookConfig = IdentityProvidersCreateResultAccessFacebookConfig; export type IdentityProvidersGetResultAccessFacebookSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersGetResultAccessFacebookSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersGetResultAccessFacebookSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersGetResultAccessFacebookSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersGetResultAccessFacebook { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessFacebookConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersGetResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersGetResultAzureADScimConfig | null; } export const IdentityProvidersGetResultAccessFacebook = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersCreateResultAccessFacebookConfig, name: S.String, type: IdentityProvidersGetResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersGetResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessFacebook", }) as any as S.Schema; export type IdentityProvidersGetResultAccessGitHubSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersGetResultAccessGitHubSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersGetResultAccessGitHubSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersGetResultAccessGitHubSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export type IdentityProvidersGetResultAccessGitHub = IdentityProvidersGetResultAccessFacebook; export const IdentityProvidersGetResultAccessGitHub = IdentityProvidersGetResultAccessFacebook; export type IdentityProvidersGetResultAccessGoogleConfigClaimsList = Array; export const IdentityProvidersGetResultAccessGoogleConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersGetResultAccessGoogleConfig { /** Custom claims */ claims?: IdentityProvidersGetResultAccessGoogleConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; } export const IdentityProvidersGetResultAccessGoogleConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersGetResultAccessGoogleConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessGoogleConfig", }) as any as S.Schema; export type IdentityProvidersGetResultAccessGoogleSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersGetResultAccessGoogleSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersGetResultAccessGoogleSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersGetResultAccessGoogleSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersGetResultAccessGoogle { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersGetResultAccessGoogleConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersGetResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersGetResultAzureADScimConfig | null; } export const IdentityProvidersGetResultAccessGoogle = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersGetResultAccessGoogleConfig, name: S.String, type: IdentityProvidersGetResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersGetResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessGoogle", }) as any as S.Schema; export type IdentityProvidersGetResultAccessGoogleAppsConfigClaimsList = Array; export const IdentityProvidersGetResultAccessGoogleAppsConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersGetResultAccessGoogleAppsConfig { /** Your companies TLD */ appsDomain?: string | null; /** Custom claims */ claims?: IdentityProvidersGetResultAccessGoogleAppsConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; } export const IdentityProvidersGetResultAccessGoogleAppsConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ appsDomain: S.optional(S.NullOr(S.String).pipe(T.Body("apps_domain"))), claims: S.optional( S.NullOr(IdentityProvidersGetResultAccessGoogleAppsConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessGoogleAppsConfig", }) as any as S.Schema; export type IdentityProvidersGetResultAccessGoogleAppsSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersGetResultAccessGoogleAppsSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersGetResultAccessGoogleAppsSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersGetResultAccessGoogleAppsSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersGetResultAccessGoogleApps { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersGetResultAccessGoogleAppsConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersGetResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersGetResultAzureADScimConfig | null; } export const IdentityProvidersGetResultAccessGoogleApps = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersGetResultAccessGoogleAppsConfig, name: S.String, type: IdentityProvidersGetResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersGetResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessGoogleApps", }) as any as S.Schema; export type IdentityProvidersGetResultAccessLinkedinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersGetResultAccessLinkedinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersGetResultAccessLinkedinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersGetResultAccessLinkedinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export type IdentityProvidersGetResultAccessLinkedin = IdentityProvidersGetResultAccessFacebook; export const IdentityProvidersGetResultAccessLinkedin = IdentityProvidersGetResultAccessFacebook; export type IdentityProvidersGetResultAccessOIDCConfigClaimsList = Array; export const IdentityProvidersGetResultAccessOIDCConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersGetResultAccessOIDCConfigScopesList = Array; export const IdentityProvidersGetResultAccessOIDCConfigScopesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersGetResultAccessOIDCConfig { /** The authorization_endpoint URL of your IdP */ authUrl?: string | null; /** The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens */ certsUrl?: string | null; /** Custom claims */ claims?: IdentityProvidersGetResultAccessOIDCConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Enable Proof Key for Code Exchange (PKCE) */ pkceEnabled?: boolean | null; /** OAuth scopes */ scopes?: IdentityProvidersGetResultAccessOIDCConfigScopesList | null; /** The token_endpoint URL of your IdP */ tokenUrl?: string | null; } export const IdentityProvidersGetResultAccessOIDCConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ authUrl: S.optional(S.NullOr(S.String).pipe(T.Body("auth_url"))), certsUrl: S.optional(S.NullOr(S.String).pipe(T.Body("certs_url"))), claims: S.optional( S.NullOr(IdentityProvidersGetResultAccessOIDCConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), pkceEnabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("pkce_enabled"))), scopes: S.optional( S.NullOr(IdentityProvidersGetResultAccessOIDCConfigScopesList), ), tokenUrl: S.optional(S.NullOr(S.String).pipe(T.Body("token_url"))), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessOIDCConfig", }) as any as S.Schema; export type IdentityProvidersGetResultAccessOIDCSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersGetResultAccessOIDCSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersGetResultAccessOIDCSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersGetResultAccessOIDCSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersGetResultAccessOIDC { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersGetResultAccessOIDCConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersGetResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersGetResultAzureADScimConfig | null; } export const IdentityProvidersGetResultAccessOIDC = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersGetResultAccessOIDCConfig, name: S.String, type: IdentityProvidersGetResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersGetResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessOIDC", }) as any as S.Schema; export type IdentityProvidersGetResultAccessOktaConfigClaimsList = Array; export const IdentityProvidersGetResultAccessOktaConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersGetResultAccessOktaConfig { /** Your okta authorization server id */ authorizationServerId?: string | null; /** Custom claims */ claims?: IdentityProvidersGetResultAccessOktaConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Your okta account url */ oktaAccount?: string | null; } export const IdentityProvidersGetResultAccessOktaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ authorizationServerId: S.optional( S.NullOr(S.String).pipe(T.Body("authorization_server_id")), ), claims: S.optional( S.NullOr(IdentityProvidersGetResultAccessOktaConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), oktaAccount: S.optional(S.NullOr(S.String).pipe(T.Body("okta_account"))), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessOktaConfig", }) as any as S.Schema; export type IdentityProvidersGetResultAccessOktaSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersGetResultAccessOktaSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersGetResultAccessOktaSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersGetResultAccessOktaSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersGetResultAccessOkta { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersGetResultAccessOktaConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersGetResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersGetResultAzureADScimConfig | null; } export const IdentityProvidersGetResultAccessOkta = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersGetResultAccessOktaConfig, name: S.String, type: IdentityProvidersGetResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersGetResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessOkta", }) as any as S.Schema; export type IdentityProvidersGetResultAccessOneloginConfigClaimsList = Array; export const IdentityProvidersGetResultAccessOneloginConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersGetResultAccessOneloginConfig { /** Custom claims */ claims?: IdentityProvidersGetResultAccessOneloginConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Your OneLogin account url */ oneloginAccount?: string | null; } export const IdentityProvidersGetResultAccessOneloginConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersGetResultAccessOneloginConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), oneloginAccount: S.optional( S.NullOr(S.String).pipe(T.Body("onelogin_account")), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessOneloginConfig", }) as any as S.Schema; export type IdentityProvidersGetResultAccessOneloginSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersGetResultAccessOneloginSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersGetResultAccessOneloginSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersGetResultAccessOneloginSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersGetResultAccessOnelogin { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersGetResultAccessOneloginConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersGetResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersGetResultAzureADScimConfig | null; } export const IdentityProvidersGetResultAccessOnelogin = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersGetResultAccessOneloginConfig, name: S.String, type: IdentityProvidersGetResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersGetResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessOnelogin", }) as any as S.Schema; export type IdentityProvidersGetResultAccessPingoneConfigClaimsList = Array; export const IdentityProvidersGetResultAccessPingoneConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersGetResultAccessPingoneConfig { /** Custom claims */ claims?: IdentityProvidersGetResultAccessPingoneConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Your PingOne environment identifier */ pingEnvId?: string | null; } export const IdentityProvidersGetResultAccessPingoneConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersGetResultAccessPingoneConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), pingEnvId: S.optional(S.NullOr(S.String).pipe(T.Body("ping_env_id"))), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessPingoneConfig", }) as any as S.Schema; export type IdentityProvidersGetResultAccessPingoneSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersGetResultAccessPingoneSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersGetResultAccessPingoneSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersGetResultAccessPingoneSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersGetResultAccessPingone { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersGetResultAccessPingoneConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersGetResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersGetResultAzureADScimConfig | null; } export const IdentityProvidersGetResultAccessPingone = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersGetResultAccessPingoneConfig, name: S.String, type: IdentityProvidersGetResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersGetResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessPingone", }) as any as S.Schema; export type IdentityProvidersGetResultAccessSAMLConfigAttributesList = Array; export const IdentityProvidersGetResultAccessSAMLConfigAttributesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersGetResultAccessSAMLConfigHeaderAttributesItem = IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesItem; export const IdentityProvidersGetResultAccessSAMLConfigHeaderAttributesItem = IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesItem; export type IdentityProvidersGetResultAccessSAMLConfigHeaderAttributesList = Array; export const IdentityProvidersGetResultAccessSAMLConfigHeaderAttributesList = /*@__PURE__*/ S.Array( IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesItem, ) as any as S.Schema; export type IdentityProvidersGetResultAccessSAMLConfigIdpPublicCertsList = Array; export const IdentityProvidersGetResultAccessSAMLConfigIdpPublicCertsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersGetResultAccessSAMLConfig { /** A list of SAML attribute names that will be added to your signed JWT token and can be used in SAML policy rules. */ attributes?: IdentityProvidersGetResultAccessSAMLConfigAttributesList | null; /** The attribute name for email in the SAML response. */ emailAttributeName?: string | null; /** Enable SAML assertion encryption. When enabled, the Identity Provider will encrypt */ enableEncryption?: boolean | null; /** Add a list of attribute names that will be returned in the response header from the Access callback. */ headerAttributes?: IdentityProvidersGetResultAccessSAMLConfigHeaderAttributesList | null; /** X509 certificate to verify the signature in the SAML authentication response */ idpPublicCerts?: IdentityProvidersGetResultAccessSAMLConfigIdpPublicCertsList | null; /** IdP Entity ID or Issuer URL */ issuerUrl?: string | null; /** Sign the SAML authentication request with Access credentials. To verify the signature, use the public key from the Access certs endpoints. */ signRequest?: boolean | null; /** URL to send the SAML authentication requests to */ ssoTargetUrl?: string | null; } export const IdentityProvidersGetResultAccessSAMLConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ attributes: S.optional( S.NullOr(IdentityProvidersGetResultAccessSAMLConfigAttributesList), ), emailAttributeName: S.optional( S.NullOr(S.String).pipe(T.Body("email_attribute_name")), ), enableEncryption: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_encryption")), ), headerAttributes: S.optional( S.NullOr( IdentityProvidersGetResultAccessSAMLConfigHeaderAttributesList, ).pipe(T.Body("header_attributes")), ), idpPublicCerts: S.optional( S.NullOr( IdentityProvidersGetResultAccessSAMLConfigIdpPublicCertsList, ).pipe(T.Body("idp_public_certs")), ), issuerUrl: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_url"))), signRequest: S.optional(S.NullOr(S.Boolean).pipe(T.Body("sign_request"))), ssoTargetUrl: S.optional( S.NullOr(S.String).pipe(T.Body("sso_target_url")), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessSAMLConfig", }) as any as S.Schema; export type IdentityProvidersGetResultAccessSAMLSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersGetResultAccessSAMLSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersGetResultAccessSAMLSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersGetResultAccessSAMLSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersGetResultAccessSAML { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersGetResultAccessSAMLConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersGetResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersGetResultAzureADScimConfig | null; } export const IdentityProvidersGetResultAccessSAML = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersGetResultAccessSAMLConfig, name: S.String, type: IdentityProvidersGetResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersGetResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessSAML", }) as any as S.Schema; export type IdentityProvidersGetResultAccessYandexSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersGetResultAccessYandexSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersGetResultAccessYandexSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersGetResultAccessYandexSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export type IdentityProvidersGetResultAccessYandex = IdentityProvidersGetResultAccessFacebook; export const IdentityProvidersGetResultAccessYandex = IdentityProvidersGetResultAccessFacebook; export type IdentityProvidersGetResultAccessOnetimepinConfig = IdentityProvidersCreateResultAccessOnetimepinConfig; export const IdentityProvidersGetResultAccessOnetimepinConfig = IdentityProvidersCreateResultAccessOnetimepinConfig; export type IdentityProvidersGetResultAccessOnetimepinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersGetResultAccessOnetimepinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersGetResultAccessOnetimepinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersGetResultAccessOnetimepinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersGetResultAccessOnetimepin { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessOnetimepinConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersGetResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersGetResultAzureADScimConfig | null; } export const IdentityProvidersGetResultAccessOnetimepin = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessOnetimepinConfig, name: S.String, type: IdentityProvidersGetResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersGetResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessOnetimepin", }) as any as S.Schema; export type IdentityProvidersGetResultAccessCloudflareConfig = IdentityProvidersCreateResultAccessCloudflareConfig; export const IdentityProvidersGetResultAccessCloudflareConfig = IdentityProvidersCreateResultAccessCloudflareConfig; export type IdentityProvidersGetResultAccessCloudflareSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersGetResultAccessCloudflareSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersGetResultAccessCloudflareSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersGetResultAccessCloudflareSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersGetResultAccessCloudflare { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessCloudflareConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersGetResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersGetResultAzureADScimConfig | null; } export const IdentityProvidersGetResultAccessCloudflare = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessCloudflareConfig, name: S.String, type: IdentityProvidersGetResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersGetResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersGetResultAccessCloudflare", }) as any as S.Schema; export type IdentityProvidersGetResult = | IdentityProvidersGetResultAzureAD | IdentityProvidersGetResultAccessCentrify | IdentityProvidersGetResultAccessFacebook | IdentityProvidersGetResultAccessFacebook | IdentityProvidersGetResultAccessGoogle | IdentityProvidersGetResultAccessGoogleApps | IdentityProvidersGetResultAccessFacebook | IdentityProvidersGetResultAccessOIDC | IdentityProvidersGetResultAccessOkta | IdentityProvidersGetResultAccessOnelogin | IdentityProvidersGetResultAccessPingone | IdentityProvidersGetResultAccessSAML | IdentityProvidersGetResultAccessFacebook | IdentityProvidersGetResultAccessOnetimepin | IdentityProvidersGetResultAccessCloudflare; export const IdentityProvidersGetResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], ]), ); export type GetIdentityProviderResponse = IdentityProvidersGetResult; export const GetIdentityProviderResponse = /*@__PURE__*/ S.suspend(() => IdentityProvidersGetResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "GetIdentityProviderResponse", }) as any as S.Schema; export interface GetIdentityProviderForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ identityProviderId: string; } export const GetIdentityProviderForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), identityProviderId: S.String.pipe(T.Label("identity_provider_id")), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/identity_providers/{identity_provider_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetIdentityProviderForZoneRequest", }) as any as S.Schema; export interface GetNetworkHostnameRouteRequest { /** Cloudflare account ID */ accountId: string; /** The hostname route ID. */ hostnameRouteId: string; } export const GetNetworkHostnameRouteRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), hostnameRouteId: S.String.pipe(T.Label("hostname_route_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/zerotrust/routes/hostname/{hostname_route_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetNetworkHostnameRouteRequest", }) as any as S.Schema; export type NetworksHostnameRoutesGetResponseTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const NetworksHostnameRoutesGetResponseTunType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetNetworkHostnameRouteResponse { /** The hostname route ID. */ id?: string | null; /** An optional description of the hostname route. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** The hostname of the route. */ hostname?: string | null; /** The type of tunnel. */ tunType?: NetworksHostnameRoutesGetResponseTunType | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** A user-friendly name for a tunnel. */ tunnelName?: string | null; } export const GetNetworkHostnameRouteResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), hostname: S.optional(S.NullOr(S.String)), tunType: S.optional( S.NullOr(NetworksHostnameRoutesGetResponseTunType).pipe( T.Body("tun_type"), ), ), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), tunnelName: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_name"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetNetworkHostnameRouteResponse", }) as any as S.Schema; export interface GetNetworkRouteRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the route. */ routeId: string; } export const GetNetworkRouteRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), routeId: S.String.pipe(T.Label("route_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/teamnet/routes/{route_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetNetworkRouteRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetNetworkRouteResponse { /** UUID of the route. */ id?: string | null; /** Optional remark describing the route. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** The private IPv4 or IPv6 range connected by the route, in CIDR notation. */ network?: string | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** UUID of the virtual network. */ virtualNetworkId?: string | null; } export const GetNetworkRouteResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), network: S.optional(S.NullOr(S.String)), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), virtualNetworkId: S.optional( S.NullOr(S.String).pipe(T.Body("virtual_network_id")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetNetworkRouteResponse", }) as any as S.Schema; export interface GetNetworkRouteIpRequest { /** Cloudflare account ID */ accountId: string; ip: string; /** When the virtual_network_id parameter is not provided the request filter will default search routes that are in the default virtual network for the account. If this parameter is set to false, the search will include routes that do not have a virtual network. */ defaultVirtualNetworkFallback?: boolean; /** UUID of the virtual network. */ virtualNetworkId?: string; } export const GetNetworkRouteIpRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ip: S.String.pipe(T.Label()), defaultVirtualNetworkFallback: S.optional( S.Boolean.pipe(T.Query("default_virtual_network_fallback")), ), virtualNetworkId: S.optional(S.String.pipe(T.Query("virtual_network_id"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/teamnet/routes/ip/{ip}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetNetworkRouteIpRequest", }) as any as S.Schema; export type NetworksRoutesIpsGetResponseTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const NetworksRoutesIpsGetResponseTunType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetNetworkRouteIpResponse { /** UUID of the route. */ id?: string | null; /** Optional remark describing the route. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** The private IPv4 or IPv6 range connected by the route, in CIDR notation. */ network?: string | null; /** The type of tunnel. */ tunType?: NetworksRoutesIpsGetResponseTunType | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** A user-friendly name for a tunnel. */ tunnelName?: string | null; /** UUID of the virtual network. */ virtualNetworkId?: string | null; /** A user-friendly name for the virtual network. */ virtualNetworkName?: string | null; } export const GetNetworkRouteIpResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), network: S.optional(S.NullOr(S.String)), tunType: S.optional( S.NullOr(NetworksRoutesIpsGetResponseTunType).pipe(T.Body("tun_type")), ), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), tunnelName: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_name"))), virtualNetworkId: S.optional( S.NullOr(S.String).pipe(T.Body("virtual_network_id")), ), virtualNetworkName: S.optional( S.NullOr(S.String).pipe(T.Body("virtual_network_name")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetNetworkRouteIpResponse", }) as any as S.Schema; export interface GetNetworkSubnetWarpRequest { /** Cloudflare account ID */ accountId: string; /** The UUID of the subnet. */ subnetId: string; } export const GetNetworkSubnetWarpRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), subnetId: S.String.pipe(T.Label("subnet_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/zerotrust/subnets/warp/{subnet_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetNetworkSubnetWarpRequest", }) as any as S.Schema; export type NetworksSubnetsWarpGetResponseSubnetType = | "cloudflare_source" | "warp"; export const NetworksSubnetsWarpGetResponseSubnetType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetNetworkSubnetWarpResponse { /** The UUID of the subnet. */ id?: string | null; /** An optional description of the subnet. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** If `true`, this is the default subnet for the account. There can only be one default subnet per account. */ isDefaultNetwork?: boolean | null; /** A user-friendly name for the subnet. */ name?: string | null; /** The private IPv4 or IPv6 range defining the subnet, in CIDR notation. */ network?: string | null; /** The type of subnet. */ subnetType?: NetworksSubnetsWarpGetResponseSubnetType | null; } export const GetNetworkSubnetWarpResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), isDefaultNetwork: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_default_network")), ), name: S.optional(S.NullOr(S.String)), network: S.optional(S.NullOr(S.String)), subnetType: S.optional( S.NullOr(NetworksSubnetsWarpGetResponseSubnetType).pipe( T.Body("subnet_type"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetNetworkSubnetWarpResponse", }) as any as S.Schema; export interface GetNetworkVirtualNetworkRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the virtual network. */ virtualNetworkId: string; } export const GetNetworkVirtualNetworkRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), virtualNetworkId: S.String.pipe(T.Label("virtual_network_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/teamnet/virtual_networks/{virtual_network_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetNetworkVirtualNetworkRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetNetworkVirtualNetworkResponse { /** UUID of the virtual network. */ id: string; /** Optional remark describing the virtual network. */ comment: string; /** Timestamp of when the resource was created. */ createdAt: string; /** If `true`, this virtual network is the default for the account. */ isDefaultNetwork: boolean; /** A user-friendly name for the virtual network. */ name: string; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; } export const GetNetworkVirtualNetworkResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, comment: S.String, createdAt: S.String.pipe(T.Body("created_at")), isDefaultNetwork: S.Boolean.pipe(T.Body("is_default_network")), name: S.String, deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetNetworkVirtualNetworkResponse", }) as any as S.Schema; export interface GetOrganizationDohRequest { /** Identifier. */ accountId: string; } export const GetOrganizationDohRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/organizations/doh", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetOrganizationDohRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetOrganizationDohResponse { /** The ID of the service token. */ id?: string | null; /** The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header. */ clientId?: string | null; /** The duration the DoH JWT is valid for. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note that the maximum duration for this setting is the same as the key rotation period on the account. */ dohJwtDuration?: string | null; /** The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h). */ duration?: string | null; expiresAt?: string | null; /** The name of the service token. */ name?: string | null; } export const GetOrganizationDohResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), dohJwtDuration: S.optional( S.NullOr(S.String).pipe(T.Body("doh_jwt_duration")), ), duration: S.optional(S.NullOr(S.String)), expiresAt: S.optional(S.NullOr(S.String).pipe(T.Body("expires_at"))), name: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetOrganizationDohResponse", }) as any as S.Schema; export interface GetPemAccessSamlCertificateRequest { /** Identifier. */ accountId: string; /** UUID. */ samlCertSetId: string; } export const GetPemAccessSamlCertificateRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), samlCertSetId: S.String.pipe(T.Label("saml_cert_set_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/saml_certificates/{saml_cert_set_id}/pem", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetPemAccessSamlCertificateRequest", }) as any as S.Schema; export interface GetPemAccessSamlCertificateResponse {} export const GetPemAccessSamlCertificateResponse = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetPemAccessSamlCertificateResponse", }) as any as S.Schema; export interface GetResourceLibraryApplicationRequest { accountId: string; id: string; } export const GetResourceLibraryApplicationRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String.pipe(T.Label()), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/resource-library/applications/{id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetResourceLibraryApplicationRequest", }) as any as S.Schema; export type ResourceLibraryApplicationsGetResponseHostnamesList = Array; export const ResourceLibraryApplicationsGetResponseHostnamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type ResourceLibraryApplicationsGetResponseIpSubnetsList = Array; export const ResourceLibraryApplicationsGetResponseIpSubnetsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type ResourceLibraryApplicationsGetResponsePortProtocolsList = Array; export const ResourceLibraryApplicationsGetResponsePortProtocolsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type ResourceLibraryApplicationsGetResponseSupportDomainsList = Array; export const ResourceLibraryApplicationsGetResponseSupportDomainsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type ResourceLibraryApplicationsGetResponseSupportedItem = | "GATEWAY" | "ACCESS" | "CASB"; export const ResourceLibraryApplicationsGetResponseSupportedItem = /*@__PURE__*/ S.String; export type ResourceLibraryApplicationsGetResponseSupportedList = Array; export const ResourceLibraryApplicationsGetResponseSupportedList = /*@__PURE__*/ S.Array( ResourceLibraryApplicationsGetResponseSupportedItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetResourceLibraryApplicationResponse { /** Returns the application ID. */ id: string; /** Confidence score for the application. Returns -1 when no score is available. */ applicationConfidenceScore: number; /** Returns the application source. */ applicationSource: string; /** Returns the application type. */ applicationType: string; /** Returns the application type description. */ applicationTypeDescription: string; /** Returns the application creation time. */ createdAt: string; /** GenAI score for the application. Returns -1 when no score is available. */ genAiScore: number; /** Returns the list of hostnames for the application. */ hostnames: ResourceLibraryApplicationsGetResponseHostnamesList; /** Returns the human readable ID. */ humanId: string; /** Returns the list of IP subnets for the application. */ ipSubnets: ResourceLibraryApplicationsGetResponseIpSubnetsList; /** Returns the application name. */ name: string; /** Returns the list of port protocols for the application. */ portProtocols: ResourceLibraryApplicationsGetResponsePortProtocolsList; /** Returns the list of support domains for the application. */ supportDomains: ResourceLibraryApplicationsGetResponseSupportDomainsList; /** Cloudflare products that support this application. */ supported: ResourceLibraryApplicationsGetResponseSupportedList; /** Returns the application update time. */ updatedAt: string; /** Returns the application version. */ version: string; /** Returns the score composition breakdown for the application. */ applicationScoreComposition?: unknown | null; /** Returns the Intel API ID for the application. */ intelId?: number | null; } export const GetResourceLibraryApplicationResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, applicationConfidenceScore: S.Number.pipe( T.Body("application_confidence_score"), ), applicationSource: S.String.pipe(T.Body("application_source")), applicationType: S.String.pipe(T.Body("application_type")), applicationTypeDescription: S.String.pipe( T.Body("application_type_description"), ), createdAt: S.String.pipe(T.Body("created_at")), genAiScore: S.Number.pipe(T.Body("gen_ai_score")), hostnames: ResourceLibraryApplicationsGetResponseHostnamesList, humanId: S.String.pipe(T.Body("human_id")), ipSubnets: ResourceLibraryApplicationsGetResponseIpSubnetsList.pipe( T.Body("ip_subnets"), ), name: S.String, portProtocols: ResourceLibraryApplicationsGetResponsePortProtocolsList.pipe( T.Body("port_protocols"), ), supportDomains: ResourceLibraryApplicationsGetResponseSupportDomainsList.pipe( T.Body("support_domains"), ), supported: ResourceLibraryApplicationsGetResponseSupportedList, updatedAt: S.String.pipe(T.Body("updated_at")), version: S.String, applicationScoreComposition: S.optional( S.NullOr(S.Unknown).pipe(T.Body("application_score_composition")), ), intelId: S.optional(S.NullOr(S.Number).pipe(T.Body("intel_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetResourceLibraryApplicationResponse", }) as any as S.Schema; export interface GetResourceLibraryCategoryRequest { accountId: string; id: string; } export const GetResourceLibraryCategoryRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String.pipe(T.Label()), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/resource-library/categories/{id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetResourceLibraryCategoryRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetResourceLibraryCategoryResponse { /** Returns the category ID. */ id: string; /** Returns the category creation time. */ createdAt: string; /** Returns the category description. */ description: string; /** Returns the category name. */ name: string; } export const GetResourceLibraryCategoryResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), description: S.String, name: S.String, }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetResourceLibraryCategoryResponse", }) as any as S.Schema; export interface GetRiskScoringRequest { accountId: string; userId: string; } export const GetRiskScoringRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), userId: S.String.pipe(T.Label("user_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/zt_risk_scoring/{user_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetRiskScoringRequest", }) as any as S.Schema; export type RiskScoringGetResponseEventsItemRiskLevel = | "low" | "medium" | "high"; export const RiskScoringGetResponseEventsItemRiskLevel = /*@__PURE__*/ S.String; export interface RiskScoringGetResponseEventsItem { id: string; name: string; riskLevel: RiskScoringGetResponseEventsItemRiskLevel; timestamp: string; eventDetails?: unknown | null; } export const RiskScoringGetResponseEventsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, name: S.String, riskLevel: RiskScoringGetResponseEventsItemRiskLevel.pipe( T.Body("risk_level"), ), timestamp: S.String, eventDetails: S.optional(S.NullOr(S.Unknown).pipe(T.Body("event_details"))), }), ).annotate({ identifier: "RiskScoringGetResponseEventsItem", }) as any as S.Schema; export type RiskScoringGetResponseEventsList = Array; export const RiskScoringGetResponseEventsList = /*@__PURE__*/ S.Array( RiskScoringGetResponseEventsItem, ) as any as S.Schema; export type RiskScoringGetResponseRiskLevel = "low" | "medium" | "high"; export const RiskScoringGetResponseRiskLevel = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetRiskScoringResponse { email: string; events: RiskScoringGetResponseEventsList; name: string; lastResetTime?: string | null; riskLevel?: RiskScoringGetResponseRiskLevel | null; } export const GetRiskScoringResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ email: S.String, events: RiskScoringGetResponseEventsList, name: S.String, lastResetTime: S.optional( S.NullOr(S.String).pipe(T.Body("last_reset_time")), ), riskLevel: S.optional( S.NullOr(RiskScoringGetResponseRiskLevel).pipe(T.Body("risk_level")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetRiskScoringResponse", }) as any as S.Schema; export interface GetRiskScoringBehaviourRequest { accountId: string; } export const GetRiskScoringBehaviourRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/zt_risk_scoring/behaviors", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetRiskScoringBehaviourRequest", }) as any as S.Schema; export type RiskScoringBehavioursGetResponseBehaviorsValueRiskLevel = | "low" | "medium" | "high"; export const RiskScoringBehavioursGetResponseBehaviorsValueRiskLevel = /*@__PURE__*/ S.String; export interface RiskScoringBehavioursGetResponseBehaviorsValue { description: string; enabled: boolean; name: string; riskLevel: RiskScoringBehavioursGetResponseBehaviorsValueRiskLevel; } export const RiskScoringBehavioursGetResponseBehaviorsValue = /*@__PURE__*/ S.suspend(() => S.Struct({ description: S.String, enabled: S.Boolean, name: S.String, riskLevel: RiskScoringBehavioursGetResponseBehaviorsValueRiskLevel.pipe( T.Body("risk_level"), ), }), ).annotate({ identifier: "RiskScoringBehavioursGetResponseBehaviorsValue", }) as any as S.Schema; export type RiskScoringBehavioursGetResponseBehaviorsMap = { [key: string]: RiskScoringBehavioursGetResponseBehaviorsValue | undefined; }; export const RiskScoringBehavioursGetResponseBehaviorsMap = /*@__PURE__*/ S.Record( S.String, RiskScoringBehavioursGetResponseBehaviorsValue, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetRiskScoringBehaviourResponse { behaviors: RiskScoringBehavioursGetResponseBehaviorsMap; } export const GetRiskScoringBehaviourResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ behaviors: RiskScoringBehavioursGetResponseBehaviorsMap, }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetRiskScoringBehaviourResponse", }) as any as S.Schema; export interface GetRiskScoringIntegrationRequest { accountId: string; integrationId: string; } export const GetRiskScoringIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), integrationId: S.String.pipe(T.Label("integration_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/zt_risk_scoring/integrations/{integration_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetRiskScoringIntegrationRequest", }) as any as S.Schema; export type RiskScoringIntegrationsGetResponseIntegrationType = "Okta"; export const RiskScoringIntegrationsGetResponseIntegrationType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetRiskScoringIntegrationResponse { /** The id of the integration, a UUIDv4. */ id: string; /** The Cloudflare account tag. */ accountTag: string; /** Whether this integration is enabled and should export changes in risk score. */ active: boolean; /** When the integration was created in RFC3339 format. */ createdAt: string; integrationType: RiskScoringIntegrationsGetResponseIntegrationType; /** A reference ID defined by the client. */ referenceId: string; /** The base URL for the tenant. E.g. "https://tenant.okta.com". */ tenantUrl: string; /** The URL for the Shared Signals Framework configuration, e.g. "/.well-known/sse-configuration/{integration_uuid}/". https://openid.net/specs/openid-sse-framework-1_0.html#rfc.section.6.2.1. */ wellKnownUrl: string; } export const GetRiskScoringIntegrationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, accountTag: S.String.pipe(T.Body("account_tag")), active: S.Boolean, createdAt: S.String.pipe(T.Body("created_at")), integrationType: RiskScoringIntegrationsGetResponseIntegrationType.pipe( T.Body("integration_type"), ), referenceId: S.String.pipe(T.Body("reference_id")), tenantUrl: S.String.pipe(T.Body("tenant_url")), wellKnownUrl: S.String.pipe(T.Body("well_known_url")), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetRiskScoringIntegrationResponse", }) as any as S.Schema; export interface GetRiskScoringIntegrationReferenceRequest { accountId: string; referenceId: string; } export const GetRiskScoringIntegrationReferenceRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), referenceId: S.String.pipe(T.Label("reference_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/zt_risk_scoring/integrations/reference_id/{reference_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetRiskScoringIntegrationReferenceRequest", }) as any as S.Schema; export type RiskScoringIntegrationsReferencesGetResponseIntegrationType = "Okta"; export const RiskScoringIntegrationsReferencesGetResponseIntegrationType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetRiskScoringIntegrationReferenceResponse { /** The id of the integration, a UUIDv4. */ id: string; /** The Cloudflare account tag. */ accountTag: string; /** Whether this integration is enabled and should export changes in risk score. */ active: boolean; /** When the integration was created in RFC3339 format. */ createdAt: string; integrationType: RiskScoringIntegrationsReferencesGetResponseIntegrationType; /** A reference ID defined by the client. */ referenceId: string; /** The base URL for the tenant. E.g. "https://tenant.okta.com". */ tenantUrl: string; /** The URL for the Shared Signals Framework configuration, e.g. "/.well-known/sse-configuration/{integration_uuid}/". https://openid.net/specs/openid-sse-framework-1_0.html#rfc.section.6.2.1. */ wellKnownUrl: string; } export const GetRiskScoringIntegrationReferenceResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, accountTag: S.String.pipe(T.Body("account_tag")), active: S.Boolean, createdAt: S.String.pipe(T.Body("created_at")), integrationType: RiskScoringIntegrationsReferencesGetResponseIntegrationType.pipe( T.Body("integration_type"), ), referenceId: S.String.pipe(T.Body("reference_id")), tenantUrl: S.String.pipe(T.Body("tenant_url")), wellKnownUrl: S.String.pipe(T.Body("well_known_url")), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetRiskScoringIntegrationReferenceResponse", }) as any as S.Schema; export interface GetRiskScoringSummaryRequest { accountId: string; } export const GetRiskScoringSummaryRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/zt_risk_scoring/summary", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetRiskScoringSummaryRequest", }) as any as S.Schema; export type RiskScoringSummaryGetResponseUsersItemMaxRiskLevel = | "low" | "medium" | "high"; export const RiskScoringSummaryGetResponseUsersItemMaxRiskLevel = /*@__PURE__*/ S.String; export interface RiskScoringSummaryGetResponseUsersItem { email: string; eventCount: number; lastEvent: string; maxRiskLevel: RiskScoringSummaryGetResponseUsersItemMaxRiskLevel; name: string; userId: string; } export const RiskScoringSummaryGetResponseUsersItem = /*@__PURE__*/ S.suspend( () => S.Struct({ email: S.String, eventCount: S.Number.pipe(T.Body("event_count")), lastEvent: S.String.pipe(T.Body("last_event")), maxRiskLevel: RiskScoringSummaryGetResponseUsersItemMaxRiskLevel.pipe( T.Body("max_risk_level"), ), name: S.String, userId: S.String.pipe(T.Body("user_id")), }), ).annotate({ identifier: "RiskScoringSummaryGetResponseUsersItem", }) as any as S.Schema; export type RiskScoringSummaryGetResponseUsersList = Array; export const RiskScoringSummaryGetResponseUsersList = /*@__PURE__*/ S.Array( RiskScoringSummaryGetResponseUsersItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetRiskScoringSummaryResponse { users: RiskScoringSummaryGetResponseUsersList; } export const GetRiskScoringSummaryResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ users: RiskScoringSummaryGetResponseUsersList, }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetRiskScoringSummaryResponse", }) as any as S.Schema; export interface GetTunnelCloudflaredRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; } export const GetTunnelCloudflaredRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/cfd_tunnel/{tunnel_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelCloudflaredRequest", }) as any as S.Schema; export type TunnelsCloudflaredGetResponseConfigSrc = "local" | "cloudflare"; export const TunnelsCloudflaredGetResponseConfigSrc = /*@__PURE__*/ S.String; export type TunnelsCloudflaredGetResponseConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export const TunnelsCloudflaredGetResponseConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export type TunnelsCloudflaredGetResponseConnectionsList = Array; export const TunnelsCloudflaredGetResponseConnectionsList = /*@__PURE__*/ S.Array( TunnelsCloudflaredCreateResponseConnectionsItem, ) as any as S.Schema; export type TunnelsCloudflaredGetResponseStatus = | "inactive" | "degraded" | "healthy" | "down"; export const TunnelsCloudflaredGetResponseStatus = /*@__PURE__*/ S.String; export type TunnelsCloudflaredGetResponseTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const TunnelsCloudflaredGetResponseTunType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetTunnelCloudflaredResponse { /** UUID of the tunnel. */ id?: string | null; /** Cloudflare account ID */ accountTag?: string | null; /** Indicates if this is a locally or remotely configured tunnel. If `local`, manage the tunnel using a YAML file on the origin machine. If `cloudflare`, manage the tunnel on the Zero Trust dashboard. */ configSrc?: TunnelsCloudflaredGetResponseConfigSrc | null; /** The Cloudflare Tunnel connections between your origin and Cloudflare's edge. */ connections?: TunnelsCloudflaredGetResponseConnectionsList | null; /** Timestamp of when the tunnel established at least one connection to Cloudflare's edge. If `null`, the tunnel is inactive. */ connsActiveAt?: string | null; /** Timestamp of when the tunnel became inactive (no connections to Cloudflare's edge). If `null`, the tunnel is active. */ connsInactiveAt?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** Metadata associated with the tunnel. */ metadata?: unknown | null; /** A user-friendly name for a tunnel. */ name?: string | null; /** If `true`, the tunnel can be configured remotely from the Zero Trust dashboard. If `false`, the tunnel must be configured locally on the origin machine. */ remoteConfig?: boolean | null; /** The status of the tunnel. Valid values are `inactive` (tunnel has never been run), `degraded` (tunnel is active and able to serve traffic but in an unhealthy state), `healthy` (tunnel is active and able to serve traffic), or `down` (tunnel can not serve traffic as it has no connections to the Cloudflare Edge). */ status?: TunnelsCloudflaredGetResponseStatus | null; /** The type of tunnel. */ tunType?: TunnelsCloudflaredGetResponseTunType | null; } export const GetTunnelCloudflaredResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), accountTag: S.optional(S.NullOr(S.String).pipe(T.Body("account_tag"))), configSrc: S.optional( S.NullOr(TunnelsCloudflaredGetResponseConfigSrc).pipe( T.Body("config_src"), ), ), connections: S.optional( S.NullOr(TunnelsCloudflaredGetResponseConnectionsList), ), connsActiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_active_at")), ), connsInactiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_inactive_at")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), metadata: S.optional(S.NullOr(S.Unknown)), name: S.optional(S.NullOr(S.String)), remoteConfig: S.optional(S.NullOr(S.Boolean).pipe(T.Body("remote_config"))), status: S.optional(S.NullOr(TunnelsCloudflaredGetResponseStatus)), tunType: S.optional( S.NullOr(TunnelsCloudflaredGetResponseTunType).pipe(T.Body("tun_type")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelCloudflaredResponse", }) as any as S.Schema; export interface GetTunnelCloudflaredConfigurationRequest { /** Identifier. */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; } export const GetTunnelCloudflaredConfigurationRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/cfd_tunnel/{tunnel_id}/configurations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelCloudflaredConfigurationRequest", }) as any as S.Schema; export type TunnelsCloudflaredConfigurationsGetResponseConfigIngressItemOriginRequestAccessAudTagList = Array; export const TunnelsCloudflaredConfigurationsGetResponseConfigIngressItemOriginRequestAccessAudTagList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsGetResponseConfigIngressItemOriginRequestAccess { /** Access applications that are allowed to reach this hostname for this Tunnel. Audience tags can be identified in the dashboard or via the List Access policies API. */ audTag: TunnelsCloudflaredConfigurationsGetResponseConfigIngressItemOriginRequestAccessAudTagList; teamName: string; /** Deny traffic that has not fulfilled Access authorization. */ required?: boolean | null; } export const TunnelsCloudflaredConfigurationsGetResponseConfigIngressItemOriginRequestAccess = /*@__PURE__*/ S.suspend(() => S.Struct({ audTag: TunnelsCloudflaredConfigurationsGetResponseConfigIngressItemOriginRequestAccessAudTagList, teamName: S.String, required: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsGetResponseConfigIngressItemOriginRequestAccess", }) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsGetResponseConfigIngressItemOriginRequest { /** For all L7 requests to this hostname, cloudflared will validate each request's Cf-Access-Jwt-Assertion request header. */ access?: TunnelsCloudflaredConfigurationsGetResponseConfigIngressItemOriginRequestAccess | null; /** Path to the certificate authority (CA) for the certificate of your origin. This option should be used only if your certificate is not signed by Cloudflare. */ caPool?: string | null; /** Timeout for establishing a new TCP connection to your origin server. This excludes the time taken to establish TLS, which is controlled by tlsTimeout. */ connectTimeout?: number | null; /** Disables chunked transfer encoding. Useful if you are running a WSGI server. */ disableChunkedEncoding?: boolean | null; /** Attempt to connect to origin using HTTP2. Origin must be configured as https. */ http2Origin?: boolean | null; /** Sets the HTTP Host header on requests sent to the local service. */ httpHostHeader?: string | null; /** Maximum number of idle keepalive connections between Tunnel and your origin. This does not restrict the total number of concurrent connections. */ keepAliveConnections?: number | null; /** Timeout after which an idle keepalive connection can be discarded. */ keepAliveTimeout?: number | null; /** Auto configure the Hostname on the origin server certificate. */ matchSNItoHost?: boolean | null; /** Disable the “happy eyeballs” algorithm for IPv4/IPv6 fallback if your local network has misconfigured one of the protocols. */ noHappyEyeballs?: boolean | null; /** Disables TLS verification of the certificate presented by your origin. Will allow any certificate from the origin to be accepted. */ noTLSVerify?: boolean | null; /** Hostname that cloudflared should expect from your origin server certificate. */ originServerName?: string | null; /** cloudflared starts a proxy server to translate HTTP traffic into TCP when proxying, for example, SSH or RDP. This configures what type of proxy will be started. Valid options are: "" for the regular proxy and "socks" for a SOCKS5 proxy. */ proxyType?: string | null; /** The timeout after which a TCP keepalive packet is sent on a connection between Tunnel and the origin server. */ tcpKeepAlive?: number | null; /** Timeout for completing a TLS handshake to your origin server, if you have chosen to connect Tunnel to an HTTPS server. */ tlsTimeout?: number | null; } export const TunnelsCloudflaredConfigurationsGetResponseConfigIngressItemOriginRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ access: S.optional( S.NullOr( TunnelsCloudflaredConfigurationsGetResponseConfigIngressItemOriginRequestAccess, ), ), caPool: S.optional(S.NullOr(S.String)), connectTimeout: S.optional(S.NullOr(S.Number)), disableChunkedEncoding: S.optional(S.NullOr(S.Boolean)), http2Origin: S.optional(S.NullOr(S.Boolean)), httpHostHeader: S.optional(S.NullOr(S.String)), keepAliveConnections: S.optional(S.NullOr(S.Number)), keepAliveTimeout: S.optional(S.NullOr(S.Number)), matchSNItoHost: S.optional(S.NullOr(S.Boolean)), noHappyEyeballs: S.optional(S.NullOr(S.Boolean)), noTLSVerify: S.optional(S.NullOr(S.Boolean)), originServerName: S.optional(S.NullOr(S.String)), proxyType: S.optional(S.NullOr(S.String)), tcpKeepAlive: S.optional(S.NullOr(S.Number)), tlsTimeout: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsGetResponseConfigIngressItemOriginRequest", }) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsGetResponseConfigIngressItem { /** Public hostname for this service. */ hostname?: string | null; /** Protocol and address of destination server. Supported protocols: http://, https://, unix://, tcp://, ssh://, rdp://, unix+tls://, smb://. Alternatively can return a HTTP status code http_status:[code] e.g. 'http_status:404'. */ service: string; /** Configuration parameters for the public hostname specific connection settings between cloudflared and origin server. */ originRequest?: TunnelsCloudflaredConfigurationsGetResponseConfigIngressItemOriginRequest | null; /** Requests with this path route to this public hostname. */ path?: string | null; } export const TunnelsCloudflaredConfigurationsGetResponseConfigIngressItem = /*@__PURE__*/ S.suspend(() => S.Struct({ hostname: S.optional(S.NullOr(S.String)), service: S.String, originRequest: S.optional( S.NullOr( TunnelsCloudflaredConfigurationsGetResponseConfigIngressItemOriginRequest, ), ), path: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsGetResponseConfigIngressItem", }) as any as S.Schema; export type TunnelsCloudflaredConfigurationsGetResponseConfigIngressList = Array; export const TunnelsCloudflaredConfigurationsGetResponseConfigIngressList = /*@__PURE__*/ S.Array( TunnelsCloudflaredConfigurationsGetResponseConfigIngressItem, ) as any as S.Schema; export type TunnelsCloudflaredConfigurationsGetResponseConfigOriginRequestAccessAudTagList = Array; export const TunnelsCloudflaredConfigurationsGetResponseConfigOriginRequestAccessAudTagList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsGetResponseConfigOriginRequestAccess { /** Access applications that are allowed to reach this hostname for this Tunnel. Audience tags can be identified in the dashboard or via the List Access policies API. */ audTag: TunnelsCloudflaredConfigurationsGetResponseConfigOriginRequestAccessAudTagList; teamName: string; /** Deny traffic that has not fulfilled Access authorization. */ required?: boolean | null; } export const TunnelsCloudflaredConfigurationsGetResponseConfigOriginRequestAccess = /*@__PURE__*/ S.suspend(() => S.Struct({ audTag: TunnelsCloudflaredConfigurationsGetResponseConfigOriginRequestAccessAudTagList, teamName: S.String, required: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsGetResponseConfigOriginRequestAccess", }) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsGetResponseConfigOriginRequest { /** For all L7 requests to this hostname, cloudflared will validate each request's Cf-Access-Jwt-Assertion request header. */ access?: TunnelsCloudflaredConfigurationsGetResponseConfigOriginRequestAccess | null; /** Path to the certificate authority (CA) for the certificate of your origin. This option should be used only if your certificate is not signed by Cloudflare. */ caPool?: string | null; /** Timeout for establishing a new TCP connection to your origin server. This excludes the time taken to establish TLS, which is controlled by tlsTimeout. */ connectTimeout?: number | null; /** Disables chunked transfer encoding. Useful if you are running a WSGI server. */ disableChunkedEncoding?: boolean | null; /** Attempt to connect to origin using HTTP2. Origin must be configured as https. */ http2Origin?: boolean | null; /** Sets the HTTP Host header on requests sent to the local service. */ httpHostHeader?: string | null; /** Maximum number of idle keepalive connections between Tunnel and your origin. This does not restrict the total number of concurrent connections. */ keepAliveConnections?: number | null; /** Timeout after which an idle keepalive connection can be discarded. */ keepAliveTimeout?: number | null; /** Auto configure the Hostname on the origin server certificate. */ matchSNItoHost?: boolean | null; /** Disable the “happy eyeballs” algorithm for IPv4/IPv6 fallback if your local network has misconfigured one of the protocols. */ noHappyEyeballs?: boolean | null; /** Disables TLS verification of the certificate presented by your origin. Will allow any certificate from the origin to be accepted. */ noTLSVerify?: boolean | null; /** Hostname that cloudflared should expect from your origin server certificate. */ originServerName?: string | null; /** cloudflared starts a proxy server to translate HTTP traffic into TCP when proxying, for example, SSH or RDP. This configures what type of proxy will be started. Valid options are: "" for the regular proxy and "socks" for a SOCKS5 proxy. */ proxyType?: string | null; /** The timeout after which a TCP keepalive packet is sent on a connection between Tunnel and the origin server. */ tcpKeepAlive?: number | null; /** Timeout for completing a TLS handshake to your origin server, if you have chosen to connect Tunnel to an HTTPS server. */ tlsTimeout?: number | null; } export const TunnelsCloudflaredConfigurationsGetResponseConfigOriginRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ access: S.optional( S.NullOr( TunnelsCloudflaredConfigurationsGetResponseConfigOriginRequestAccess, ), ), caPool: S.optional(S.NullOr(S.String)), connectTimeout: S.optional(S.NullOr(S.Number)), disableChunkedEncoding: S.optional(S.NullOr(S.Boolean)), http2Origin: S.optional(S.NullOr(S.Boolean)), httpHostHeader: S.optional(S.NullOr(S.String)), keepAliveConnections: S.optional(S.NullOr(S.Number)), keepAliveTimeout: S.optional(S.NullOr(S.Number)), matchSNItoHost: S.optional(S.NullOr(S.Boolean)), noHappyEyeballs: S.optional(S.NullOr(S.Boolean)), noTLSVerify: S.optional(S.NullOr(S.Boolean)), originServerName: S.optional(S.NullOr(S.String)), proxyType: S.optional(S.NullOr(S.String)), tcpKeepAlive: S.optional(S.NullOr(S.Number)), tlsTimeout: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsGetResponseConfigOriginRequest", }) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsGetResponseConfig { /** List of public hostname definitions. At least one ingress rule needs to be defined for the tunnel. */ ingress?: TunnelsCloudflaredConfigurationsGetResponseConfigIngressList | null; /** Configuration parameters for the public hostname specific connection settings between cloudflared and origin server. */ originRequest?: TunnelsCloudflaredConfigurationsGetResponseConfigOriginRequest | null; } export const TunnelsCloudflaredConfigurationsGetResponseConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ ingress: S.optional( S.NullOr(TunnelsCloudflaredConfigurationsGetResponseConfigIngressList), ), originRequest: S.optional( S.NullOr( TunnelsCloudflaredConfigurationsGetResponseConfigOriginRequest, ), ), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsGetResponseConfig", }) as any as S.Schema; export type TunnelsCloudflaredConfigurationsGetResponseSource = | "local" | "cloudflare"; export const TunnelsCloudflaredConfigurationsGetResponseSource = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetTunnelCloudflaredConfigurationResponse { /** Identifier. */ accountId?: string | null; /** The tunnel configuration and ingress rules. */ config?: TunnelsCloudflaredConfigurationsGetResponseConfig | null; createdAt?: string | null; /** Indicates if this is a locally or remotely configured tunnel. If `local`, manage the tunnel using a YAML file on the origin machine. If `cloudflare`, manage the tunnel's configuration on the Zero Trust dashboard. */ source?: TunnelsCloudflaredConfigurationsGetResponseSource | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** The version of the Tunnel Configuration. */ version?: number | null; } export const GetTunnelCloudflaredConfigurationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.optional(S.NullOr(S.String).pipe(T.Body("account_id"))), config: S.optional( S.NullOr(TunnelsCloudflaredConfigurationsGetResponseConfig), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), source: S.optional( S.NullOr(TunnelsCloudflaredConfigurationsGetResponseSource), ), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), version: S.optional(S.NullOr(S.Number)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelCloudflaredConfigurationResponse", }) as any as S.Schema; export interface GetTunnelCloudflaredConnectionRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; } export const GetTunnelCloudflaredConnectionRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/cfd_tunnel/{tunnel_id}/connections", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelCloudflaredConnectionRequest", }) as any as S.Schema; export type TunnelsCloudflaredConnectionsGetResultItemConnsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export const TunnelsCloudflaredConnectionsGetResultItemConnsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export type TunnelsCloudflaredConnectionsGetResultItemConnsList = Array; export const TunnelsCloudflaredConnectionsGetResultItemConnsList = /*@__PURE__*/ S.Array( TunnelsCloudflaredCreateResponseConnectionsItem, ) as any as S.Schema; export type TunnelsCloudflaredConnectionsGetResultItemFeaturesList = Array; export const TunnelsCloudflaredConnectionsGetResultItemFeaturesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface TunnelsCloudflaredConnectionsGetResultItem { /** UUID of the Cloudflare Tunnel connection. */ id?: string | null; /** The cloudflared OS architecture used to establish this connection. */ arch?: string | null; /** The version of the remote tunnel configuration. Used internally to sync cloudflared with the Zero Trust dashboard. */ configVersion?: number | null; /** The Cloudflare Tunnel connections between your origin and Cloudflare's edge. */ conns?: TunnelsCloudflaredConnectionsGetResultItemConnsList | null; /** Features enabled for the Cloudflare Tunnel. */ features?: TunnelsCloudflaredConnectionsGetResultItemFeaturesList | null; /** Timestamp of when the tunnel connection was started. */ runAt?: string | null; /** The cloudflared version used to establish this connection. */ version?: string | null; } export const TunnelsCloudflaredConnectionsGetResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), arch: S.optional(S.NullOr(S.String)), configVersion: S.optional( S.NullOr(S.Number).pipe(T.Body("config_version")), ), conns: S.optional( S.NullOr(TunnelsCloudflaredConnectionsGetResultItemConnsList), ), features: S.optional( S.NullOr(TunnelsCloudflaredConnectionsGetResultItemFeaturesList), ), runAt: S.optional(S.NullOr(S.String).pipe(T.Body("run_at"))), version: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "TunnelsCloudflaredConnectionsGetResultItem", }) as any as S.Schema; export type TunnelsCloudflaredConnectionsGetResultList = Array; export const TunnelsCloudflaredConnectionsGetResultList = /*@__PURE__*/ S.Array( TunnelsCloudflaredConnectionsGetResultItem, ) as any as S.Schema; export interface GetTunnelCloudflaredConnectionResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: TunnelsCloudflaredConnectionsGetResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const GetTunnelCloudflaredConnectionResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: TunnelsCloudflaredConnectionsGetResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelCloudflaredConnectionResponse", }) as any as S.Schema; export interface GetTunnelCloudflaredConnectorRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; /** UUID of the Cloudflare Tunnel connector. */ connectorId: string; } export const GetTunnelCloudflaredConnectorRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), connectorId: S.String.pipe(T.Label("connector_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/cfd_tunnel/{tunnel_id}/connectors/{connector_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelCloudflaredConnectorRequest", }) as any as S.Schema; export type TunnelsCloudflaredConnectorsGetResponseConnsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export const TunnelsCloudflaredConnectorsGetResponseConnsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export type TunnelsCloudflaredConnectorsGetResponseConnsList = Array; export const TunnelsCloudflaredConnectorsGetResponseConnsList = /*@__PURE__*/ S.Array( TunnelsCloudflaredCreateResponseConnectionsItem, ) as any as S.Schema; export type TunnelsCloudflaredConnectorsGetResponseFeaturesList = Array; export const TunnelsCloudflaredConnectorsGetResponseFeaturesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetTunnelCloudflaredConnectorResponse { /** UUID of the Cloudflare Tunnel connection. */ id?: string | null; /** The cloudflared OS architecture used to establish this connection. */ arch?: string | null; /** The version of the remote tunnel configuration. Used internally to sync cloudflared with the Zero Trust dashboard. */ configVersion?: number | null; /** The Cloudflare Tunnel connections between your origin and Cloudflare's edge. */ conns?: TunnelsCloudflaredConnectorsGetResponseConnsList | null; /** Features enabled for the Cloudflare Tunnel. */ features?: TunnelsCloudflaredConnectorsGetResponseFeaturesList | null; /** Timestamp of when the tunnel connection was started. */ runAt?: string | null; /** The cloudflared version used to establish this connection. */ version?: string | null; } export const GetTunnelCloudflaredConnectorResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), arch: S.optional(S.NullOr(S.String)), configVersion: S.optional( S.NullOr(S.Number).pipe(T.Body("config_version")), ), conns: S.optional( S.NullOr(TunnelsCloudflaredConnectorsGetResponseConnsList), ), features: S.optional( S.NullOr(TunnelsCloudflaredConnectorsGetResponseFeaturesList), ), runAt: S.optional(S.NullOr(S.String).pipe(T.Body("run_at"))), version: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelCloudflaredConnectorResponse", }) as any as S.Schema; export interface GetTunnelCloudflaredTokenRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; } export const GetTunnelCloudflaredTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/cfd_tunnel/{tunnel_id}/token", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelCloudflaredTokenRequest", }) as any as S.Schema; export type GetTunnelCloudflaredTokenResponse = string; export const GetTunnelCloudflaredTokenResponse = /*@__PURE__*/ S.suspend(() => S.String.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelCloudflaredTokenResponse", }) as any as S.Schema; export interface GetTunnelWarpConnectorRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; } export const GetTunnelWarpConnectorRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/warp_connector/{tunnel_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelWarpConnectorRequest", }) as any as S.Schema; export type TunnelsWarpConnectorGetResponseConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export const TunnelsWarpConnectorGetResponseConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export type TunnelsWarpConnectorGetResponseConnectionsList = Array; export const TunnelsWarpConnectorGetResponseConnectionsList = /*@__PURE__*/ S.Array( TunnelsCloudflaredCreateResponseConnectionsItem, ) as any as S.Schema; export type TunnelsWarpConnectorGetResponseStatus = | "inactive" | "degraded" | "healthy" | "down"; export const TunnelsWarpConnectorGetResponseStatus = /*@__PURE__*/ S.String; export type TunnelsWarpConnectorGetResponseTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const TunnelsWarpConnectorGetResponseTunType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetTunnelWarpConnectorResponse { /** UUID of the tunnel. */ id: string; /** Cloudflare account ID */ accountTag?: string | null; /** The Cloudflare Tunnel connections between your origin and Cloudflare's edge. */ connections?: TunnelsWarpConnectorGetResponseConnectionsList | null; /** Timestamp of when the tunnel established at least one connection to Cloudflare's edge. If `null`, the tunnel is inactive. */ connsActiveAt?: string | null; /** Timestamp of when the tunnel became inactive (no connections to Cloudflare's edge). If `null`, the tunnel is active. */ connsInactiveAt?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** Metadata associated with the tunnel. */ metadata?: unknown | null; /** A user-friendly name for a tunnel. */ name?: string | null; /** The status of the tunnel. Valid values are `inactive` (tunnel has never been run), `degraded` (tunnel is active and able to serve traffic but in an unhealthy state), `healthy` (tunnel is active and able to serve traffic), or `down` (tunnel can not serve traffic as it has no connections to the Cloudflare Edge). */ status?: TunnelsWarpConnectorGetResponseStatus | null; /** The type of tunnel. */ tunType?: TunnelsWarpConnectorGetResponseTunType | null; } export const GetTunnelWarpConnectorResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, accountTag: S.optional(S.NullOr(S.String).pipe(T.Body("account_tag"))), connections: S.optional( S.NullOr(TunnelsWarpConnectorGetResponseConnectionsList), ), connsActiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_active_at")), ), connsInactiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_inactive_at")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), metadata: S.optional(S.NullOr(S.Unknown)), name: S.optional(S.NullOr(S.String)), status: S.optional(S.NullOr(TunnelsWarpConnectorGetResponseStatus)), tunType: S.optional( S.NullOr(TunnelsWarpConnectorGetResponseTunType).pipe(T.Body("tun_type")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelWarpConnectorResponse", }) as any as S.Schema; export interface GetTunnelWarpConnectorConfigurationRequest { /** Identifier. */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; } export const GetTunnelWarpConnectorConfigurationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/warp_connector/{tunnel_id}/configurations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelWarpConnectorConfigurationRequest", }) as any as S.Schema; export type TunnelsWarpConnectorConfigurationsGetResponseHaMode = | "none" | "disabled" | "aws" | "local"; export const TunnelsWarpConnectorConfigurationsGetResponseHaMode = /*@__PURE__*/ S.String; export interface TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshAwsConfig { /** Floating Network Resource ID — the secondary ENI that is moved between nodes on failover. */ fnrId: string; } export const TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshAwsConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ fnrId: S.String.pipe(T.Body("fnr_id")), }), ).annotate({ identifier: "TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshAwsConfig", }) as any as S.Schema; export interface TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsItem { /** Virtual IP address (IPv4 or IPv6). */ address: string; } export const TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ address: S.String, }), ).annotate({ identifier: "TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsItem", }) as any as S.Schema; export type TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsList = Array; export const TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsList = /*@__PURE__*/ S.Array( TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsItem, ) as any as S.Schema; export type TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsPreviousItem = TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsItem; export const TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsPreviousItem = TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsItem; export type TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsPreviousList = Array; export const TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsPreviousList = /*@__PURE__*/ S.Array( TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsItem, ) as any as S.Schema; export interface TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfig { /** VIPs to assign on the CloudflareWARP interface. */ vips: TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsList; /** VIPs to clean up on demotion or version drift. */ vipsPrevious?: TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsPreviousList | null; } export const TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ vips: TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsList, vipsPrevious: S.optional( S.NullOr( TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsPreviousList, ).pipe(T.Body("vips_previous")), ), }), ).annotate({ identifier: "TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfig", }) as any as S.Schema; export type TunnelsWarpConnectorConfigurationsGetResponseConfig = | TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshAwsConfig | TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfig; export const TunnelsWarpConnectorConfigurationsGetResponseConfig = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([["fnrId"], ["vips", "vipsPrevious"]]), ); /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetTunnelWarpConnectorConfigurationResponse { /** Monotonically increasing configuration version, incremented on each PUT. */ configurationVersion: number; /** Timestamp of when the resource was created. */ createdAt: string; /** High-availability mode for the WARP Connector tunnel. `none` means HA is enabled but no provider is configured yet (newly created tunnels default to this). `disabled` means HA is explicitly turned off. `aws` uses AWS ENI move for failover. `local` uses virtual IPs (VIPs) on the local interface. */ haMode: TunnelsWarpConnectorConfigurationsGetResponseHaMode; /** UUID of the tunnel. */ tunnelId: string; /** Provider-specific configuration. Present for `aws` and `local` modes. */ config?: TunnelsWarpConnectorConfigurationsGetResponseConfig | null; /** Timestamp of the last update. Null if never updated. */ updatedAt?: string | null; } export const GetTunnelWarpConnectorConfigurationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ configurationVersion: S.Number.pipe(T.Body("configuration_version")), createdAt: S.String.pipe(T.Body("created_at")), haMode: TunnelsWarpConnectorConfigurationsGetResponseHaMode.pipe( T.Body("ha_mode"), ), tunnelId: S.String.pipe(T.Body("tunnel_id")), config: S.optional( S.NullOr(TunnelsWarpConnectorConfigurationsGetResponseConfig), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelWarpConnectorConfigurationResponse", }) as any as S.Schema; export interface GetTunnelWarpConnectorConnectionRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; } export const GetTunnelWarpConnectorConnectionRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/warp_connector/{tunnel_id}/connections", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelWarpConnectorConnectionRequest", }) as any as S.Schema; export interface TunnelsWarpConnectorConnectionsGetResultItemConnsItem { /** UUID of the Cloudflare Tunnel connection. */ id?: string | null; /** UUID of the Cloudflare Tunnel connector. */ clientId?: string | null; /** The cloudflared version used to establish this connection. */ clientVersion?: string | null; /** The Cloudflare data center used for this connection. */ coloName?: string | null; /** Timestamp of when the connection was established. */ openedAt?: string | null; /** The public IP address of the host running WARP Connector. */ originIp?: string | null; } export const TunnelsWarpConnectorConnectionsGetResultItemConnsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientVersion: S.optional( S.NullOr(S.String).pipe(T.Body("client_version")), ), coloName: S.optional(S.NullOr(S.String).pipe(T.Body("colo_name"))), openedAt: S.optional(S.NullOr(S.String).pipe(T.Body("opened_at"))), originIp: S.optional(S.NullOr(S.String).pipe(T.Body("origin_ip"))), }), ).annotate({ identifier: "TunnelsWarpConnectorConnectionsGetResultItemConnsItem", }) as any as S.Schema; export type TunnelsWarpConnectorConnectionsGetResultItemConnsList = Array; export const TunnelsWarpConnectorConnectionsGetResultItemConnsList = /*@__PURE__*/ S.Array( TunnelsWarpConnectorConnectionsGetResultItemConnsItem, ) as any as S.Schema; export type TunnelsWarpConnectorConnectionsGetResultItemFeaturesList = Array; export const TunnelsWarpConnectorConnectionsGetResultItemFeaturesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type TunnelsWarpConnectorConnectionsGetResultItemHaStatus = | "offline" | "passive" | "active"; export const TunnelsWarpConnectorConnectionsGetResultItemHaStatus = /*@__PURE__*/ S.String; export interface TunnelsWarpConnectorConnectionsGetResultItem { /** UUID of the Cloudflare Tunnel connector. */ id?: string | null; /** The cloudflared OS architecture used to establish this connection. */ arch?: string | null; /** The WARP Connector Tunnel connections between your origin and Cloudflare's edge. */ conns?: TunnelsWarpConnectorConnectionsGetResultItemConnsList | null; /** Features enabled for the Cloudflare Tunnel. */ features?: TunnelsWarpConnectorConnectionsGetResultItemFeaturesList | null; /** The HA status of a WARP Connector client. */ haStatus?: TunnelsWarpConnectorConnectionsGetResultItemHaStatus | null; /** Timestamp of when the tunnel connection was started. */ runAt?: string | null; /** The cloudflared version used to establish this connection. */ version?: string | null; } export const TunnelsWarpConnectorConnectionsGetResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), arch: S.optional(S.NullOr(S.String)), conns: S.optional( S.NullOr(TunnelsWarpConnectorConnectionsGetResultItemConnsList), ), features: S.optional( S.NullOr(TunnelsWarpConnectorConnectionsGetResultItemFeaturesList), ), haStatus: S.optional( S.NullOr(TunnelsWarpConnectorConnectionsGetResultItemHaStatus).pipe( T.Body("ha_status"), ), ), runAt: S.optional(S.NullOr(S.String).pipe(T.Body("run_at"))), version: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "TunnelsWarpConnectorConnectionsGetResultItem", }) as any as S.Schema; export type TunnelsWarpConnectorConnectionsGetResultList = Array; export const TunnelsWarpConnectorConnectionsGetResultList = /*@__PURE__*/ S.Array( TunnelsWarpConnectorConnectionsGetResultItem, ) as any as S.Schema; export interface GetTunnelWarpConnectorConnectionResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: TunnelsWarpConnectorConnectionsGetResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const GetTunnelWarpConnectorConnectionResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: TunnelsWarpConnectorConnectionsGetResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelWarpConnectorConnectionResponse", }) as any as S.Schema; export interface GetTunnelWarpConnectorConnectorRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; /** UUID of the Cloudflare Tunnel connector. */ connectorId: string; } export const GetTunnelWarpConnectorConnectorRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), connectorId: S.String.pipe(T.Label("connector_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/warp_connector/{tunnel_id}/connectors/{connector_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelWarpConnectorConnectorRequest", }) as any as S.Schema; export type TunnelsWarpConnectorConnectorsGetResponseConnsItem = TunnelsWarpConnectorConnectionsGetResultItemConnsItem; export const TunnelsWarpConnectorConnectorsGetResponseConnsItem = TunnelsWarpConnectorConnectionsGetResultItemConnsItem; export type TunnelsWarpConnectorConnectorsGetResponseConnsList = Array; export const TunnelsWarpConnectorConnectorsGetResponseConnsList = /*@__PURE__*/ S.Array( TunnelsWarpConnectorConnectionsGetResultItemConnsItem, ) as any as S.Schema; export type TunnelsWarpConnectorConnectorsGetResponseFeaturesList = Array; export const TunnelsWarpConnectorConnectorsGetResponseFeaturesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type TunnelsWarpConnectorConnectorsGetResponseHaStatus = | "offline" | "passive" | "active"; export const TunnelsWarpConnectorConnectorsGetResponseHaStatus = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface GetTunnelWarpConnectorConnectorResponse { /** UUID of the Cloudflare Tunnel connector. */ id?: string | null; /** The cloudflared OS architecture used to establish this connection. */ arch?: string | null; /** The WARP Connector Tunnel connections between your origin and Cloudflare's edge. */ conns?: TunnelsWarpConnectorConnectorsGetResponseConnsList | null; /** Features enabled for the Cloudflare Tunnel. */ features?: TunnelsWarpConnectorConnectorsGetResponseFeaturesList | null; /** The HA status of a WARP Connector client. */ haStatus?: TunnelsWarpConnectorConnectorsGetResponseHaStatus | null; /** Timestamp of when the tunnel connection was started. */ runAt?: string | null; /** The cloudflared version used to establish this connection. */ version?: string | null; } export const GetTunnelWarpConnectorConnectorResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), arch: S.optional(S.NullOr(S.String)), conns: S.optional( S.NullOr(TunnelsWarpConnectorConnectorsGetResponseConnsList), ), features: S.optional( S.NullOr(TunnelsWarpConnectorConnectorsGetResponseFeaturesList), ), haStatus: S.optional( S.NullOr(TunnelsWarpConnectorConnectorsGetResponseHaStatus).pipe( T.Body("ha_status"), ), ), runAt: S.optional(S.NullOr(S.String).pipe(T.Body("run_at"))), version: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelWarpConnectorConnectorResponse", }) as any as S.Schema; export interface GetTunnelWarpConnectorTokenRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; } export const GetTunnelWarpConnectorTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/warp_connector/{tunnel_id}/token", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelWarpConnectorTokenRequest", }) as any as S.Schema; export type GetTunnelWarpConnectorTokenResponse = string; export const GetTunnelWarpConnectorTokenResponse = /*@__PURE__*/ S.suspend(() => S.String.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "GetTunnelWarpConnectorTokenResponse", }) as any as S.Schema; export interface ListAccessAiControlMcpPortalsRequest { accountId: string; page?: number; perPage?: number; /** Search by id, name, hostname */ search?: string; } export const ListAccessAiControlMcpPortalsRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), search: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/ai-controls/mcp/portals", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessAiControlMcpPortalsRequest", }) as any as S.Schema; export type AccessAiControlsMcpPortalsListResultItemServersItemAuthType = | "oauth" | "bearer" | "unauthenticated"; export const AccessAiControlsMcpPortalsListResultItemServersItemAuthType = /*@__PURE__*/ S.String; export type AccessAiControlsMcpPortalsListResultItemServersItemPromptsItemMap = { [key: string]: unknown | undefined }; export const AccessAiControlsMcpPortalsListResultItemServersItemPromptsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpPortalsListResultItemServersItemPromptsList = Array; export const AccessAiControlsMcpPortalsListResultItemServersItemPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsListResultItemServersItemPromptsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpPortalsListResultItemServersItemToolsItemMap = { [key: string]: unknown | undefined; }; export const AccessAiControlsMcpPortalsListResultItemServersItemToolsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpPortalsListResultItemServersItemToolsList = Array; export const AccessAiControlsMcpPortalsListResultItemServersItemToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsListResultItemServersItemToolsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpPortalsListResultItemServersItemErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export const AccessAiControlsMcpPortalsListResultItemServersItemErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export type AccessAiControlsMcpPortalsListResultItemServersItemUpdatedPromptsItem = AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem; export const AccessAiControlsMcpPortalsListResultItemServersItemUpdatedPromptsItem = AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem; export type AccessAiControlsMcpPortalsListResultItemServersItemUpdatedPromptsList = Array; export const AccessAiControlsMcpPortalsListResultItemServersItemUpdatedPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem, ) as any as S.Schema; export type AccessAiControlsMcpPortalsListResultItemServersItemUpdatedToolsItem = AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem; export const AccessAiControlsMcpPortalsListResultItemServersItemUpdatedToolsItem = AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem; export type AccessAiControlsMcpPortalsListResultItemServersItemUpdatedToolsList = Array; export const AccessAiControlsMcpPortalsListResultItemServersItemUpdatedToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem, ) as any as S.Schema; export interface AccessAiControlsMcpPortalsListResultItemServersItem { /** server id */ id: string; authType: AccessAiControlsMcpPortalsListResultItemServersItemAuthType; hostname: string; name: string; prompts: AccessAiControlsMcpPortalsListResultItemServersItemPromptsList; /** server id */ serverId: string; tools: AccessAiControlsMcpPortalsListResultItemServersItemToolsList; createdAt?: string | null; createdBy?: string | null; defaultDisabled?: boolean | null; description?: string | null; error?: string | null; errorDetails?: AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails | null; /** When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true. Effective behavior is gated by the gateway worker's per-env rollout mode KV key. */ isSharedOauthCallbackEnabled?: boolean | null; lastSuccessfulSync?: string | null; lastSynced?: string | null; modifiedAt?: string | null; modifiedBy?: string | null; onBehalf?: boolean | null; /** Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean | null; status?: string | null; updatedPrompts?: AccessAiControlsMcpPortalsListResultItemServersItemUpdatedPromptsList | null; updatedTools?: AccessAiControlsMcpPortalsListResultItemServersItemUpdatedToolsList | null; } export const AccessAiControlsMcpPortalsListResultItemServersItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, authType: AccessAiControlsMcpPortalsListResultItemServersItemAuthType.pipe( T.Body("auth_type"), ), hostname: S.String, name: S.String, prompts: AccessAiControlsMcpPortalsListResultItemServersItemPromptsList, serverId: S.String.pipe(T.Body("server_id")), tools: AccessAiControlsMcpPortalsListResultItemServersItemToolsList, createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), createdBy: S.optional(S.NullOr(S.String).pipe(T.Body("created_by"))), defaultDisabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("default_disabled")), ), description: S.optional(S.NullOr(S.String)), error: S.optional(S.NullOr(S.String)), errorDetails: S.optional( S.NullOr( AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails, ).pipe(T.Body("error_details")), ), isSharedOauthCallbackEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_shared_oauth_callback_enabled")), ), lastSuccessfulSync: S.optional( S.NullOr(S.String).pipe(T.Body("last_successful_sync")), ), lastSynced: S.optional(S.NullOr(S.String).pipe(T.Body("last_synced"))), modifiedAt: S.optional(S.NullOr(S.String).pipe(T.Body("modified_at"))), modifiedBy: S.optional(S.NullOr(S.String).pipe(T.Body("modified_by"))), onBehalf: S.optional(S.NullOr(S.Boolean).pipe(T.Body("on_behalf"))), secureWebGateway: S.optional( S.NullOr(S.Boolean).pipe(T.Body("secure_web_gateway")), ), status: S.optional(S.NullOr(S.String)), updatedPrompts: S.optional( S.NullOr( AccessAiControlsMcpPortalsListResultItemServersItemUpdatedPromptsList, ).pipe(T.Body("updated_prompts")), ), updatedTools: S.optional( S.NullOr( AccessAiControlsMcpPortalsListResultItemServersItemUpdatedToolsList, ).pipe(T.Body("updated_tools")), ), }), ).annotate({ identifier: "AccessAiControlsMcpPortalsListResultItemServersItem", }) as any as S.Schema; export type AccessAiControlsMcpPortalsListResultItemServersList = Array; export const AccessAiControlsMcpPortalsListResultItemServersList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsListResultItemServersItem, ) as any as S.Schema; export interface AccessAiControlsMcpPortalsListResultItem { /** portal id */ id: string; hostname: string; name: string; servers: AccessAiControlsMcpPortalsListResultItemServersList; /** Allow remote code execution in Dynamic Workers (beta) */ allowCodeMode?: boolean | null; createdAt?: string | null; createdBy?: string | null; description?: string | null; modifiedAt?: string | null; modifiedBy?: string | null; /** Route outbound MCP traffic through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean | null; } export const AccessAiControlsMcpPortalsListResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, hostname: S.String, name: S.String, servers: AccessAiControlsMcpPortalsListResultItemServersList, allowCodeMode: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_code_mode")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), createdBy: S.optional(S.NullOr(S.String).pipe(T.Body("created_by"))), description: S.optional(S.NullOr(S.String)), modifiedAt: S.optional(S.NullOr(S.String).pipe(T.Body("modified_at"))), modifiedBy: S.optional(S.NullOr(S.String).pipe(T.Body("modified_by"))), secureWebGateway: S.optional( S.NullOr(S.Boolean).pipe(T.Body("secure_web_gateway")), ), }), ).annotate({ identifier: "AccessAiControlsMcpPortalsListResultItem", }) as any as S.Schema; export type AccessAiControlsMcpPortalsListResultList = Array; export const AccessAiControlsMcpPortalsListResultList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsListResultItem, ) as any as S.Schema; export interface ListAccessAiControlMcpPortalsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessAiControlsMcpPortalsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessAiControlMcpPortalsResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: AccessAiControlsMcpPortalsListResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessAiControlMcpPortalsResponse", }) as any as S.Schema; export interface ListAccessAiControlMcpServersRequest { accountId: string; page?: number; perPage?: number; /** Search by id, name */ search?: string; } export const ListAccessAiControlMcpServersRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), search: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/ai-controls/mcp/servers", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessAiControlMcpServersRequest", }) as any as S.Schema; export type AccessAiControlsMcpServersListResultItemAuthType = | "oauth" | "bearer" | "unauthenticated"; export const AccessAiControlsMcpServersListResultItemAuthType = /*@__PURE__*/ S.String; export type AccessAiControlsMcpServersListResultItemPromptsItemMap = { [key: string]: unknown | undefined; }; export const AccessAiControlsMcpServersListResultItemPromptsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpServersListResultItemPromptsList = Array; export const AccessAiControlsMcpServersListResultItemPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersListResultItemPromptsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpServersListResultItemToolsItemMap = { [key: string]: unknown | undefined; }; export const AccessAiControlsMcpServersListResultItemToolsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpServersListResultItemToolsList = Array; export const AccessAiControlsMcpServersListResultItemToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersListResultItemToolsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpServersListResultItemErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export const AccessAiControlsMcpServersListResultItemErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export type AccessAiControlsMcpServersListResultItemUpdatedPromptsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export const AccessAiControlsMcpServersListResultItemUpdatedPromptsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export type AccessAiControlsMcpServersListResultItemUpdatedPromptsList = Array; export const AccessAiControlsMcpServersListResultItemUpdatedPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem, ) as any as S.Schema; export type AccessAiControlsMcpServersListResultItemUpdatedToolsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export const AccessAiControlsMcpServersListResultItemUpdatedToolsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export type AccessAiControlsMcpServersListResultItemUpdatedToolsList = Array; export const AccessAiControlsMcpServersListResultItemUpdatedToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem, ) as any as S.Schema; export interface AccessAiControlsMcpServersListResultItem { /** server id */ id: string; authType: AccessAiControlsMcpServersListResultItemAuthType; hostname: string; name: string; prompts: AccessAiControlsMcpServersListResultItemPromptsList; tools: AccessAiControlsMcpServersListResultItemToolsList; createdAt?: string | null; createdBy?: string | null; description?: string | null; error?: string | null; errorDetails?: AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails | null; /** When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true. Effective behavior is gated by the gateway worker's per-env rollout mode KV key. */ isSharedOauthCallbackEnabled?: boolean | null; lastSuccessfulSync?: string | null; lastSynced?: string | null; modifiedAt?: string | null; modifiedBy?: string | null; /** Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean | null; status?: string | null; updatedPrompts?: AccessAiControlsMcpServersListResultItemUpdatedPromptsList | null; updatedTools?: AccessAiControlsMcpServersListResultItemUpdatedToolsList | null; } export const AccessAiControlsMcpServersListResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, authType: AccessAiControlsMcpServersListResultItemAuthType.pipe( T.Body("auth_type"), ), hostname: S.String, name: S.String, prompts: AccessAiControlsMcpServersListResultItemPromptsList, tools: AccessAiControlsMcpServersListResultItemToolsList, createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), createdBy: S.optional(S.NullOr(S.String).pipe(T.Body("created_by"))), description: S.optional(S.NullOr(S.String)), error: S.optional(S.NullOr(S.String)), errorDetails: S.optional( S.NullOr( AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails, ).pipe(T.Body("error_details")), ), isSharedOauthCallbackEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_shared_oauth_callback_enabled")), ), lastSuccessfulSync: S.optional( S.NullOr(S.String).pipe(T.Body("last_successful_sync")), ), lastSynced: S.optional(S.NullOr(S.String).pipe(T.Body("last_synced"))), modifiedAt: S.optional(S.NullOr(S.String).pipe(T.Body("modified_at"))), modifiedBy: S.optional(S.NullOr(S.String).pipe(T.Body("modified_by"))), secureWebGateway: S.optional( S.NullOr(S.Boolean).pipe(T.Body("secure_web_gateway")), ), status: S.optional(S.NullOr(S.String)), updatedPrompts: S.optional( S.NullOr( AccessAiControlsMcpServersListResultItemUpdatedPromptsList, ).pipe(T.Body("updated_prompts")), ), updatedTools: S.optional( S.NullOr(AccessAiControlsMcpServersListResultItemUpdatedToolsList).pipe( T.Body("updated_tools"), ), ), }), ).annotate({ identifier: "AccessAiControlsMcpServersListResultItem", }) as any as S.Schema; export type AccessAiControlsMcpServersListResultList = Array; export const AccessAiControlsMcpServersListResultList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersListResultItem, ) as any as S.Schema; export interface ListAccessAiControlMcpServersResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessAiControlsMcpServersListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessAiControlMcpServersResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: AccessAiControlsMcpServersListResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessAiControlMcpServersResponse", }) as any as S.Schema; export interface ListAccessApplicationCasForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; } export const ListAccessApplicationCasForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/apps/ca", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessApplicationCasForAccountRequest", }) as any as S.Schema; export interface AccessApplicationsCasListResultItem { /** The ID of the CA. */ id?: string | null; /** The Application Audience (AUD) tag. Identifies the application associated with the CA. */ aud?: string | null; /** The public key to add to your SSH server configuration. */ publicKey?: string | null; } export const AccessApplicationsCasListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), aud: S.optional(S.NullOr(S.String)), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), }), ).annotate({ identifier: "AccessApplicationsCasListResultItem", }) as any as S.Schema; export type AccessApplicationsCasListResultList = Array; export const AccessApplicationsCasListResultList = /*@__PURE__*/ S.Array( AccessApplicationsCasListResultItem, ) as any as S.Schema; export interface ListAccessApplicationCasResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessApplicationsCasListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessApplicationCasResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessApplicationsCasListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessApplicationCasResponse", }) as any as S.Schema; export interface ListAccessApplicationCasForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; } export const ListAccessApplicationCasForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/apps/ca", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessApplicationCasForZoneRequest", }) as any as S.Schema; export interface ListAccessApplicationPoliciesForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ appId: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; } export const ListAccessApplicationPoliciesForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), appId: S.String.pipe(T.Label("app_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/apps/{app_id}/policies", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessApplicationPoliciesForAccountRequest", }) as any as S.Schema; export type AccessApplicationsPoliciesListResultItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsPoliciesListResultItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsPoliciesListResultItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsPoliciesListResultItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsPoliciesListResultItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsPoliciesListResultItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesListResultItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsPoliciesListResultItemApprovalGroupsList = Array; export const AccessApplicationsPoliciesListResultItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesListResultItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsPoliciesListResultItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsPoliciesListResultItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesListResultItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsPoliciesListResultItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesListResultItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsPoliciesListResultItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsPoliciesListResultItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesListResultItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsPoliciesListResultItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesListResultItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesListResultItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsPoliciesListResultItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsPoliciesListResultItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsPoliciesListResultItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsPoliciesListResultItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsPoliciesListResultItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesListResultItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsPoliciesListResultItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsPoliciesListResultItemConnectionRulesRdp | null; } export const AccessApplicationsPoliciesListResultItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr(AccessApplicationsPoliciesListResultItemConnectionRulesRdp), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesListResultItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsPoliciesListResultItemDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessApplicationsPoliciesListResultItemDecision = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesListResultItemExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessApplicationsPoliciesListResultItemExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessApplicationsPoliciesListResultItemExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessApplicationsPoliciesListResultItemExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessApplicationsPoliciesListResultItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsPoliciesListResultItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessApplicationsPoliciesListResultItemExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessApplicationsPoliciesListResultItemExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessApplicationsPoliciesListResultItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessApplicationsPoliciesListResultItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessApplicationsPoliciesListResultItemExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessApplicationsPoliciesListResultItemExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessApplicationsPoliciesListResultItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessApplicationsPoliciesListResultItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessApplicationsPoliciesListResultItemExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessApplicationsPoliciesListResultItemExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessApplicationsPoliciesListResultItemExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessApplicationsPoliciesListResultItemExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessApplicationsPoliciesListResultItemExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessApplicationsPoliciesListResultItemExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessApplicationsPoliciesListResultItemExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessApplicationsPoliciesListResultItemExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessApplicationsPoliciesListResultItemExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessApplicationsPoliciesListResultItemExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessApplicationsPoliciesListResultItemExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessApplicationsPoliciesListResultItemExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessApplicationsPoliciesListResultItemExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessApplicationsPoliciesListResultItemExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessApplicationsPoliciesListResultItemExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessApplicationsPoliciesListResultItemExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessApplicationsPoliciesListResultItemExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessApplicationsPoliciesListResultItemExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessApplicationsPoliciesListResultItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessApplicationsPoliciesListResultItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessApplicationsPoliciesListResultItemExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessApplicationsPoliciesListResultItemExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessApplicationsPoliciesListResultItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessApplicationsPoliciesListResultItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessApplicationsPoliciesListResultItemExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export const AccessApplicationsPoliciesListResultItemExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export type AccessApplicationsPoliciesListResultItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export const AccessApplicationsPoliciesListResultItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export type AccessApplicationsPoliciesListResultItemExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessApplicationsPoliciesListResultItemExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessApplicationsPoliciesListResultItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessApplicationsPoliciesListResultItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessApplicationsPoliciesListResultItemExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessApplicationsPoliciesListResultItemExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessApplicationsPoliciesListResultItemExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessApplicationsPoliciesListResultItemExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessApplicationsPoliciesListResultItemExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessApplicationsPoliciesListResultItemExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessApplicationsPoliciesListResultItemExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessApplicationsPoliciesListResultItemExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessApplicationsPoliciesListResultItemExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessApplicationsPoliciesListResultItemExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessApplicationsPoliciesListResultItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessApplicationsPoliciesListResultItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessApplicationsPoliciesListResultItemExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessApplicationsPoliciesListResultItemExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessApplicationsPoliciesListResultItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessApplicationsPoliciesListResultItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessApplicationsPoliciesListResultItemExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessApplicationsPoliciesListResultItemExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessApplicationsPoliciesListResultItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessApplicationsPoliciesListResultItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessApplicationsPoliciesListResultItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesListResultItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsPoliciesListResultItemExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessApplicationsPoliciesListResultItemExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesListResultItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsPoliciesListResultItemExcludeList = Array; export const AccessApplicationsPoliciesListResultItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesListResultItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsPoliciesListResultItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsPoliciesListResultItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsPoliciesListResultItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsPoliciesListResultItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsPoliciesListResultItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsPoliciesListResultItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsPoliciesListResultItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsPoliciesListResultItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsPoliciesListResultItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsPoliciesListResultItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsPoliciesListResultItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsPoliciesListResultItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsPoliciesListResultItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsPoliciesListResultItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsPoliciesListResultItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsPoliciesListResultItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsPoliciesListResultItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsPoliciesListResultItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsPoliciesListResultItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsPoliciesListResultItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsPoliciesListResultItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsPoliciesListResultItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsPoliciesListResultItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsPoliciesListResultItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsPoliciesListResultItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsPoliciesListResultItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsPoliciesListResultItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsPoliciesListResultItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsPoliciesListResultItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsPoliciesListResultItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsPoliciesListResultItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsPoliciesListResultItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsPoliciesListResultItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsPoliciesListResultItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsPoliciesListResultItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsPoliciesListResultItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsPoliciesListResultItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsPoliciesListResultItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsPoliciesListResultItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsPoliciesListResultItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsPoliciesListResultItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsPoliciesListResultItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsPoliciesListResultItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsPoliciesListResultItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsPoliciesListResultItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsPoliciesListResultItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsPoliciesListResultItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsPoliciesListResultItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsPoliciesListResultItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsPoliciesListResultItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsPoliciesListResultItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesListResultItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsPoliciesListResultItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesListResultItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsPoliciesListResultItemIncludeList = Array; export const AccessApplicationsPoliciesListResultItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesListResultItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsPoliciesListResultItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsPoliciesListResultItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesListResultItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsPoliciesListResultItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesListResultItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesListResultItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsPoliciesListResultItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsPoliciesListResultItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsPoliciesListResultItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesListResultItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsPoliciesListResultItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsPoliciesListResultItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsPoliciesListResultItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsPoliciesListResultItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsPoliciesListResultItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsPoliciesListResultItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsPoliciesListResultItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsPoliciesListResultItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsPoliciesListResultItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsPoliciesListResultItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsPoliciesListResultItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsPoliciesListResultItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsPoliciesListResultItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsPoliciesListResultItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsPoliciesListResultItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsPoliciesListResultItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsPoliciesListResultItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsPoliciesListResultItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsPoliciesListResultItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsPoliciesListResultItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsPoliciesListResultItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsPoliciesListResultItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsPoliciesListResultItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsPoliciesListResultItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsPoliciesListResultItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsPoliciesListResultItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsPoliciesListResultItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsPoliciesListResultItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsPoliciesListResultItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsPoliciesListResultItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsPoliciesListResultItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsPoliciesListResultItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsPoliciesListResultItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsPoliciesListResultItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsPoliciesListResultItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsPoliciesListResultItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsPoliciesListResultItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsPoliciesListResultItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsPoliciesListResultItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsPoliciesListResultItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsPoliciesListResultItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsPoliciesListResultItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsPoliciesListResultItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsPoliciesListResultItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsPoliciesListResultItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsPoliciesListResultItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsPoliciesListResultItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsPoliciesListResultItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsPoliciesListResultItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsPoliciesListResultItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsPoliciesListResultItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesListResultItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsPoliciesListResultItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesListResultItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsPoliciesListResultItemRequireList = Array; export const AccessApplicationsPoliciesListResultItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesListResultItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesListResultItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsPoliciesListResultItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsPoliciesListResultItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsPoliciesListResultItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsPoliciesListResultItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsPoliciesListResultItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsPoliciesListResultItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsPoliciesListResultItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsPoliciesListResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsPoliciesListResultItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr(AccessApplicationsPoliciesListResultItemConnectionRules).pipe( T.Body("connection_rules"), ), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr(AccessApplicationsPoliciesListResultItemDecision), ), exclude: S.optional( S.NullOr(AccessApplicationsPoliciesListResultItemExcludeList), ), include: S.optional( S.NullOr(AccessApplicationsPoliciesListResultItemIncludeList), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr(AccessApplicationsPoliciesListResultItemMfaConfig).pipe( T.Body("mfa_config"), ), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr(AccessApplicationsPoliciesListResultItemRequireList), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsPoliciesListResultItem", }) as any as S.Schema; export type AccessApplicationsPoliciesListResultList = Array; export const AccessApplicationsPoliciesListResultList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesListResultItem, ) as any as S.Schema; export interface ListAccessApplicationPoliciesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessApplicationsPoliciesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessApplicationPoliciesResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: AccessApplicationsPoliciesListResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessApplicationPoliciesResponse", }) as any as S.Schema; export interface ListAccessApplicationPoliciesForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ appId: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; } export const ListAccessApplicationPoliciesForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), appId: S.String.pipe(T.Label("app_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/apps/{app_id}/policies", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessApplicationPoliciesForZoneRequest", }) as any as S.Schema; export type AccessApplicationsPolicyTestsUsersListRequestStatus = | "success" | "fail" | "error"; export const AccessApplicationsPolicyTestsUsersListRequestStatus = /*@__PURE__*/ S.String; export interface ListAccessApplicationPolicyTestUsersRequest { /** Identifier. */ accountId: string; /** The UUID of the policy test. */ policyTestId: string; /** Page number of results. */ page?: number; perPage?: number; /** Filter users by their policy evaluation status. */ status?: AccessApplicationsPolicyTestsUsersListRequestStatus | (string & {}); } export const ListAccessApplicationPolicyTestUsersRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), policyTestId: S.String.pipe(T.Label("policy_test_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), status: S.optional( AccessApplicationsPolicyTestsUsersListRequestStatus.pipe(T.Query()), ), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/policy-tests/{policy_test_id}/users", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessApplicationPolicyTestUsersRequest", }) as any as S.Schema; export type AccessApplicationsPolicyTestsUsersListResultItemStatus = | "approved" | "blocked" | "error"; export const AccessApplicationsPolicyTestsUsersListResultItemStatus = /*@__PURE__*/ S.String; export interface AccessApplicationsPolicyTestsUsersListResultItem { /** UUID. */ id?: string | null; /** The email of the user. */ email?: string | null; /** The name of the user. */ name?: string | null; /** Policy evaluation result for an individual user. */ status?: AccessApplicationsPolicyTestsUsersListResultItemStatus | null; } export const AccessApplicationsPolicyTestsUsersListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), email: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), status: S.optional( S.NullOr(AccessApplicationsPolicyTestsUsersListResultItemStatus), ), }), ).annotate({ identifier: "AccessApplicationsPolicyTestsUsersListResultItem", }) as any as S.Schema; export type AccessApplicationsPolicyTestsUsersListResultList = Array; export const AccessApplicationsPolicyTestsUsersListResultList = /*@__PURE__*/ S.Array( AccessApplicationsPolicyTestsUsersListResultItem, ) as any as S.Schema; export interface ListAccessApplicationPolicyTestUsersResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessApplicationsPolicyTestsUsersListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessApplicationPolicyTestUsersResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessApplicationsPolicyTestsUsersListResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessApplicationPolicyTestUsersResponse", }) as any as S.Schema; export interface ListAccessApplicationsForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** The aud of the app. */ aud?: string; /** The domain of the app. */ domain?: string; /** True for only exact string matches against passed name/domain query parameters. */ exact?: boolean; /** The name of the app. */ name?: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; /** Search for apps by other listed query parameters. */ search?: string; /** Target Criteria attributes in key=value format. */ targetAttributes?: string; } export const ListAccessApplicationsForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), aud: S.optional(S.String.pipe(T.Query())), domain: S.optional(S.String.pipe(T.Query())), exact: S.optional(S.Boolean.pipe(T.Query())), name: S.optional(S.String.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), search: S.optional(S.String.pipe(T.Query())), targetAttributes: S.optional(S.String.pipe(T.Query("target_attributes"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/apps", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessApplicationsForAccountRequest", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsListResultItemSelfHostedApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSelfHostedApplicationAllowedIdpsList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationCorsHeadersAllowedHeadersList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationCorsHeadersAllowedHeadersList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationCorsHeadersAllowedMethodsItem = | "GET" | "POST" | "HEAD" | "PUT" | "DELETE" | "CONNECT" | "OPTIONS" | "TRACE" | "PATCH"; export const AccessApplicationsListResultItemSelfHostedApplicationCorsHeadersAllowedMethodsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSelfHostedApplicationCorsHeadersAllowedMethodsList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationCorsHeadersAllowedMethodsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSelfHostedApplicationCorsHeadersAllowedMethodsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationCorsHeadersAllowedOriginsList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationCorsHeadersAllowedOriginsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export interface AccessApplicationsListResultItemSelfHostedApplicationCorsHeaders { /** Allows all HTTP request headers. */ allowAllHeaders?: boolean | null; /** Allows all HTTP request methods. */ allowAllMethods?: boolean | null; /** Allows all origins. */ allowAllOrigins?: boolean | null; /** When set to `true`, includes credentials (cookies, authorization headers, or TLS client certificates) with requests. */ allowCredentials?: boolean | null; /** Allowed HTTP request headers. */ allowedHeaders?: AccessApplicationsListResultItemSelfHostedApplicationCorsHeadersAllowedHeadersList | null; /** Allowed HTTP request methods. */ allowedMethods?: AccessApplicationsListResultItemSelfHostedApplicationCorsHeadersAllowedMethodsList | null; /** Allowed origins. */ allowedOrigins?: AccessApplicationsListResultItemSelfHostedApplicationCorsHeadersAllowedOriginsList | null; /** The maximum number of seconds the results of a preflight request can be cached. */ maxAge?: number | null; } export const AccessApplicationsListResultItemSelfHostedApplicationCorsHeaders = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAllHeaders: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_all_headers")), ), allowAllMethods: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_all_methods")), ), allowAllOrigins: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_all_origins")), ), allowCredentials: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_credentials")), ), allowedHeaders: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationCorsHeadersAllowedHeadersList, ).pipe(T.Body("allowed_headers")), ), allowedMethods: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationCorsHeadersAllowedMethodsList, ).pipe(T.Body("allowed_methods")), ), allowedOrigins: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationCorsHeadersAllowedOriginsList, ).pipe(T.Body("allowed_origins")), ), maxAge: S.optional(S.NullOr(S.Number).pipe(T.Body("max_age"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationCorsHeaders", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationCustomPagesList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPublicDestination { type?: AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemWorkerDestination { type: AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationDestinationsItem = | AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPublicDestination | AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPrivateDestination | AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemWorkerDestination | AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllWorkersDestination | AccessApplicationsListResultItemSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsListResultItemSelfHostedApplicationDestinationsList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSelfHostedApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemSelfHostedApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSelfHostedApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSelfHostedApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemSelfHostedApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemSelfHostedApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemSelfHostedApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemSelfHostedApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsListResultItemSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsListResultItemSelfHostedApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsListResultItemSelfHostedApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsListResultItemSelfHostedApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsListResultItemSelfHostedApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsListResultItemSelfHostedApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemSelfHostedApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationPoliciesList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme = "httpbasic"; export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic { /** Password used to authenticate with the remote SCIM service. */ password: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme; /** User name used to authenticate with the remote SCIM service. */ user: string; } export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = /*@__PURE__*/ S.suspend(() => S.Struct({ password: S.String, scheme: AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme, user: S.String, }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme = "oauthbearertoken"; export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken { /** Token used to authenticate with the remote SCIM service. */ token: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme; } export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = /*@__PURE__*/ S.suspend(() => S.Struct({ token: S.String, scheme: AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme, }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme = "oauth2"; export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 { /** URL used to generate the auth code used during token generation. */ authorizationUrl: string; /** Client ID used to authenticate when generating a token for authenticating with the remote SCIM service. */ clientId: string; /** Secret used to authenticate when generating a token for authenticating with the remove SCIM service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme; /** URL used to generate the token used to authenticate with the remote SCIM service. */ tokenUrl: string; /** The authorization scopes to request when generating the token used to authenticate with the remove SCIM service. */ scopes?: AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList | null; } export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = /*@__PURE__*/ S.suspend(() => S.Struct({ authorizationUrl: S.String.pipe(T.Body("authorization_url")), clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme, tokenUrl: S.String.pipe(T.Body("token_url")), scopes: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthentication = | AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic | AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 | AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], [ "authorizationUrl", "clientId", "clientSecret", "scheme", "tokenUrl", "scopes", ], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsListResultItemSelfHostedApplicationScimConfigMappingsItemOperations = AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations; export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigMappingsItemOperations = AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations; export type AccessApplicationsListResultItemSelfHostedApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSelfHostedApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsListResultItemSelfHostedApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations, ), ), strictness: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationScimConfigMappingsList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSelfHostedApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemSelfHostedApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsListResultItemSelfHostedApplicationScimConfigMappingsList | null; } export const AccessApplicationsListResultItemSelfHostedApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationSelfHostedDomainsList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemSelfHostedApplicationTagsList = Array; export const AccessApplicationsListResultItemSelfHostedApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemSelfHostedApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; /** The application type. */ type: AccessApplicationsListResultItemSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsListResultItemSelfHostedApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsListResultItemSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsListResultItemSelfHostedApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsListResultItemSelfHostedApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemSelfHostedApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsListResultItemSelfHostedApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsListResultItemSelfHostedApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsListResultItemSelfHostedApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsListResultItemSelfHostedApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsListResultItemSelfHostedApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, type: AccessApplicationsListResultItemSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesList, ), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsListResultItemSelfHostedApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSelfHostedApplication", }) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationAllowedIdpsList = Array; export const AccessApplicationsListResultItemSaaSApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationCustomPagesList = Array; export const AccessApplicationsListResultItemSaaSApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemSaaSApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsListResultItemSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSaaSApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemSaaSApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireList = Array; export const AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemSaaSApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsListResultItemSaaSApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemSaaSApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsListResultItemSaaSApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationPoliciesList = Array; export const AccessApplicationsListResultItemSaaSApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSaaSApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppAuthType = | "saml" | "oidc"; export const AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppAuthType = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat = | "urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" | "urn:oasis:names:tc:SAML:2.0:attrname-format:basic" | "urn:oasis:names:tc:SAML:2.0:attrname-format:uri"; export const AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem = AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem; export const AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem = AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem; export type AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList = Array; export const AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource { /** The name of the IdP attribute. */ name?: string | null; /** A mapping from IdP ID to attribute name. */ nameByIdp?: AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList | null; } export const AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.NullOr(S.String)), nameByIdp: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList, ).pipe(T.Body("name_by_idp")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource", }) as any as S.Schema; export interface AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem { /** The SAML FriendlyName of the attribute. */ friendlyName?: string | null; /** The name of the attribute. */ name?: string | null; /** A globally unique name for an identity or service provider. */ nameFormat?: AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat | null; /** If the attribute is required when building a SAML assertion. */ required?: boolean | null; source?: AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource | null; } export const AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ friendlyName: S.optional( S.NullOr(S.String).pipe(T.Body("friendly_name")), ), name: S.optional(S.NullOr(S.String)), nameFormat: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat, ).pipe(T.Body("name_format")), ), required: S.optional(S.NullOr(S.Boolean)), source: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem", }) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList = Array; export const AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat = | "id" | "email"; export const AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSApp { /** Optional identifier indicating the authentication protocol used for the saas app. Required for OIDC. Default if unset is "saml" */ authType?: AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppAuthType | null; /** The service provider's endpoint that is responsible for receiving and parsing a SAML assertion. */ consumerServiceUrl?: string | null; customAttributes?: AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList | null; /** The URL that the user will be redirected to after a successful login for IDP initiated logins. */ defaultRelayState?: string | null; /** The unique identifier for your SaaS application. */ idpEntityId?: string | null; /** The format of the name identifier sent to the SaaS application. */ nameIdFormat?: AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat | null; /** A [JSONata](https://jsonata.org/) expression that transforms an application's user identities into a NameID value for its SAML assertion. This expression should evaluate to a singular string. The output of this expression can override the `name_id_format` setting. */ nameIdTransformJsonata?: string | null; /** The Access public certificate that will be used to verify your identity. */ publicKey?: string | null; /** A [JSONata] (https://jsonata.org/) expression that transforms an application's user identities into attribute assertions in the SAML response. The expression can transform id, email, name, and groups values. It can also transform fields listed in the saml_attributes or oidc_fields of the identity provider used to authenticate. The output of this expression must be a JSON object. */ samlAttributeTransformJsonata?: string | null; /** A globally unique name for an identity or service provider. */ spEntityId?: string | null; /** The endpoint where your SaaS application will send login requests. */ ssoEndpoint?: string | null; } export const AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSApp = /*@__PURE__*/ S.suspend(() => S.Struct({ authType: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppAuthType, ).pipe(T.Body("auth_type")), ), consumerServiceUrl: S.optional( S.NullOr(S.String).pipe(T.Body("consumer_service_url")), ), customAttributes: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList, ).pipe(T.Body("custom_attributes")), ), defaultRelayState: S.optional( S.NullOr(S.String).pipe(T.Body("default_relay_state")), ), idpEntityId: S.optional(S.NullOr(S.String).pipe(T.Body("idp_entity_id"))), nameIdFormat: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat, ).pipe(T.Body("name_id_format")), ), nameIdTransformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("name_id_transform_jsonata")), ), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), samlAttributeTransformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("saml_attribute_transform_jsonata")), ), spEntityId: S.optional(S.NullOr(S.String).pipe(T.Body("sp_entity_id"))), ssoEndpoint: S.optional(S.NullOr(S.String).pipe(T.Body("sso_endpoint"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSApp", }) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppAuthType = | "saml" | "oidc"; export const AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppAuthType = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope = | "groups" | "profile" | "email" | "openid"; export const AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap = { [key: string]: string | undefined }; export const AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource { /** The name of the IdP claim. */ name?: string | null; /** A mapping from IdP ID to claim name. */ nameByIdp?: AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap | null; } export const AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.NullOr(S.String)), nameByIdp: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap, ).pipe(T.Body("name_by_idp")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource", }) as any as S.Schema; export interface AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem { /** The name of the claim. */ name?: string | null; /** If the claim is required when building an OIDC token. */ required?: boolean | null; /** The scope of the claim. */ scope?: AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope | null; source?: AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource | null; } export const AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.NullOr(S.String)), required: S.optional(S.NullOr(S.Boolean)), scope: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope, ), ), source: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList = Array; export const AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppGrantTypesItem = | "authorization_code" | "authorization_code_with_pkce" | "refresh_tokens" | "hybrid" | "implicit"; export const AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppGrantTypesItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList = Array; export const AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppGrantTypesItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions = AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions; export const AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions = AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions; export type AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList = Array; export const AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions = AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions; export const AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions = AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions; export type AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppScopesItem = | "openid" | "groups" | "email" | "profile"; export const AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppScopesItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppScopesList = Array; export const AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppScopesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppScopesItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSApp { /** The lifetime of the OIDC Access Token after creation. Valid units are m,h. Must be greater than or equal to 1m and less than or equal to 24h. */ accessTokenLifetime?: string | null; /** If client secret should be required on the token endpoint when authorization_code_with_pkce grant is used. */ allowPkceWithoutClientSecret?: boolean | null; /** The URL where this applications tile redirects users */ appLauncherUrl?: string | null; /** Identifier of the authentication protocol used for the saas app. Required for OIDC. */ authType?: AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppAuthType | null; /** The application client id */ clientId?: string | null; /** The application client secret, only returned on POST request. */ clientSecret?: string | null; customClaims?: AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList | null; /** The OIDC flows supported by this application */ grantTypes?: AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList | null; /** A regex to filter Cloudflare groups returned in ID token and userinfo endpoint */ groupFilterRegex?: string | null; hybridAndImplicitOptions?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions | null; /** The Access public certificate that will be used to verify your identity. */ publicKey?: string | null; /** The permitted URL's for Cloudflare to return Authorization codes and Access/ID tokens */ redirectUris?: AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList | null; refreshTokenOptions?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions | null; /** Define the user information shared with access, "offline_access" scope will be automatically enabled if refresh tokens are enabled */ scopes?: AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppScopesList | null; } export const AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSApp = /*@__PURE__*/ S.suspend(() => S.Struct({ accessTokenLifetime: S.optional( S.NullOr(S.String).pipe(T.Body("access_token_lifetime")), ), allowPkceWithoutClientSecret: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_pkce_without_client_secret")), ), appLauncherUrl: S.optional( S.NullOr(S.String).pipe(T.Body("app_launcher_url")), ), authType: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppAuthType, ).pipe(T.Body("auth_type")), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), customClaims: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList, ).pipe(T.Body("custom_claims")), ), grantTypes: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList, ).pipe(T.Body("grant_types")), ), groupFilterRegex: S.optional( S.NullOr(S.String).pipe(T.Body("group_filter_regex")), ), hybridAndImplicitOptions: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions, ).pipe(T.Body("hybrid_and_implicit_options")), ), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), redirectUris: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList, ).pipe(T.Body("redirect_uris")), ), refreshTokenOptions: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions, ).pipe(T.Body("refresh_token_options")), ), scopes: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSAppScopesList, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSApp", }) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationSaasApp = | AccessApplicationsListResultItemSaaSApplicationSaasAppSAMLSaaSApp | AccessApplicationsListResultItemSaaSApplicationSaasAppOIDCSaaSApp; export const AccessApplicationsListResultItemSaaSApplicationSaasApp = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "authType", "consumerServiceUrl", "customAttributes", "defaultRelayState", "idpEntityId", "nameIdFormat", "nameIdTransformJsonata", "publicKey", "samlAttributeTransformJsonata", "spEntityId", "ssoEndpoint", ], [ "accessTokenLifetime", "allowPkceWithoutClientSecret", "appLauncherUrl", "authType", "clientId", "clientSecret", "customClaims", "grantTypes", "groupFilterRegex", "hybridAndImplicitOptions", "publicKey", "redirectUris", "refreshTokenOptions", "scopes", ], ]), ); export type AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsListResultItemSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsListResultItemSaaSApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsListResultItemSaaSApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsListResultItemSaaSApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemSaaSApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsListResultItemSaaSApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsListResultItemSaaSApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationScimConfigMappingsList = Array; export const AccessApplicationsListResultItemSaaSApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemSaaSApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemSaaSApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsListResultItemSaaSApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsListResultItemSaaSApplicationScimConfigMappingsList | null; } export const AccessApplicationsListResultItemSaaSApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemSaaSApplicationTagsList = Array; export const AccessApplicationsListResultItemSaaSApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemSaaSApplication { /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsListResultItemSaaSApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsListResultItemSaaSApplicationCustomPagesList | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsListResultItemSaaSApplicationPoliciesList | null; saasApp?: AccessApplicationsListResultItemSaaSApplicationSaasApp | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsListResultItemSaaSApplicationScimConfig | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsListResultItemSaaSApplicationTagsList | null; /** The application type. */ type?: AccessApplicationsListResultItemSelfHostedApplicationType | null; } export const AccessApplicationsListResultItemSaaSApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customPages: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr(AccessApplicationsListResultItemSaaSApplicationPoliciesList), ), saasApp: S.optional( S.NullOr(AccessApplicationsListResultItemSaaSApplicationSaasApp).pipe( T.Body("saas_app"), ), ), scimConfig: S.optional( S.NullOr( AccessApplicationsListResultItemSaaSApplicationScimConfig, ).pipe(T.Body("scim_config")), ), tags: S.optional( S.NullOr(AccessApplicationsListResultItemSaaSApplicationTagsList), ), type: S.optional( S.NullOr(AccessApplicationsListResultItemSelfHostedApplicationType), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemSaaSApplication", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsListResultItemBrowserSSHApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserSSHApplicationAllowedIdpsList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationCustomPagesList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPublicDestination { type?: AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemWorkerDestination { type: AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItem = | AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPublicDestination | AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPrivateDestination | AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemWorkerDestination | AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllWorkersDestination | AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsListResultItemBrowserSSHApplicationDestinationsList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserSSHApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemBrowserSSHApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserSSHApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserSSHApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemBrowserSSHApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserSSHApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsListResultItemBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsListResultItemBrowserSSHApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsListResultItemBrowserSSHApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsListResultItemBrowserSSHApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsListResultItemBrowserSSHApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsListResultItemBrowserSSHApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationPoliciesList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsListResultItemBrowserSSHApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserSSHApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsListResultItemBrowserSSHApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationScimConfigMappingsList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserSSHApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserSSHApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsListResultItemBrowserSSHApplicationScimConfigMappingsList | null; } export const AccessApplicationsListResultItemBrowserSSHApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationSelfHostedDomainsList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserSSHApplicationTagsList = Array; export const AccessApplicationsListResultItemBrowserSSHApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserSSHApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; /** The application type. */ type: AccessApplicationsListResultItemBrowserSSHApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsListResultItemBrowserSSHApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsListResultItemSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsListResultItemBrowserSSHApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsListResultItemBrowserSSHApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemBrowserSSHApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsListResultItemBrowserSSHApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsListResultItemBrowserSSHApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsListResultItemBrowserSSHApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsListResultItemBrowserSSHApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsListResultItemBrowserSSHApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsListResultItemBrowserSSHApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, type: AccessApplicationsListResultItemBrowserSSHApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationPoliciesList, ), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserSSHApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsListResultItemBrowserSSHApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserSSHApplication", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsListResultItemBrowserVNCApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserVNCApplicationAllowedIdpsList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationCustomPagesList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPublicDestination { type?: AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemWorkerDestination { type: AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItem = | AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPublicDestination | AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPrivateDestination | AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemWorkerDestination | AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllWorkersDestination | AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsListResultItemBrowserVNCApplicationDestinationsList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserVNCApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemBrowserVNCApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserVNCApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserVNCApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemBrowserVNCApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserVNCApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsListResultItemBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsListResultItemBrowserVNCApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsListResultItemBrowserVNCApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsListResultItemBrowserVNCApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsListResultItemBrowserVNCApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsListResultItemBrowserVNCApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationPoliciesList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsListResultItemBrowserVNCApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserVNCApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsListResultItemBrowserVNCApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationScimConfigMappingsList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserVNCApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserVNCApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsListResultItemBrowserVNCApplicationScimConfigMappingsList | null; } export const AccessApplicationsListResultItemBrowserVNCApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationSelfHostedDomainsList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserVNCApplicationTagsList = Array; export const AccessApplicationsListResultItemBrowserVNCApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserVNCApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; /** The application type. */ type: AccessApplicationsListResultItemBrowserVNCApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsListResultItemBrowserVNCApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsListResultItemSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsListResultItemBrowserVNCApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsListResultItemBrowserVNCApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemBrowserVNCApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsListResultItemBrowserVNCApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsListResultItemBrowserVNCApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsListResultItemBrowserVNCApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsListResultItemBrowserVNCApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsListResultItemBrowserVNCApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsListResultItemBrowserVNCApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, type: AccessApplicationsListResultItemBrowserVNCApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationPoliciesList, ), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserVNCApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsListResultItemBrowserVNCApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserVNCApplication", }) as any as S.Schema; export type AccessApplicationsListResultItemAppLauncherApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsListResultItemAppLauncherApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemAppLauncherApplicationAllowedIdpsList = Array; export const AccessApplicationsListResultItemAppLauncherApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemAppLauncherApplicationCustomPagesList = Array; export const AccessApplicationsListResultItemAppLauncherApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsListResultItemAppLauncherApplicationFooterLinksItem = AccessApplicationsCreateRequestFooterLinksItem; export const AccessApplicationsListResultItemAppLauncherApplicationFooterLinksItem = AccessApplicationsCreateRequestFooterLinksItem; export type AccessApplicationsListResultItemAppLauncherApplicationFooterLinksList = Array; export const AccessApplicationsListResultItemAppLauncherApplicationFooterLinksList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestFooterLinksItem, ) as any as S.Schema; export type AccessApplicationsListResultItemAppLauncherApplicationLandingPageDesign = AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign; export const AccessApplicationsListResultItemAppLauncherApplicationLandingPageDesign = AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireList = Array; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemAppLauncherApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemAppLauncherApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsListResultItemAppLauncherApplicationPoliciesList = Array; export const AccessApplicationsListResultItemAppLauncherApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemAppLauncherApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemAppLauncherApplication { /** The application type. */ type: AccessApplicationsListResultItemAppLauncherApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsListResultItemAppLauncherApplicationAllowedIdpsList | null; /** The image URL of the logo shown in the App Launcher header. */ appLauncherLogoUrl?: string | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The background color of the App Launcher page. */ bgColor?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsListResultItemAppLauncherApplicationCustomPagesList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** The links in the App Launcher footer. */ footerLinks?: AccessApplicationsListResultItemAppLauncherApplicationFooterLinksList | null; /** The background color of the App Launcher header. */ headerBgColor?: string | null; /** The design of the App Launcher landing page shown to users when they log in. */ landingPageDesign?: AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsListResultItemAppLauncherApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Determines when to skip the App Launcher landing page. */ skipAppLauncherLoginPage?: boolean | null; } export const AccessApplicationsListResultItemAppLauncherApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemAppLauncherApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsListResultItemAppLauncherApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherLogoUrl: S.optional( S.NullOr(S.String).pipe(T.Body("app_launcher_logo_url")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), bgColor: S.optional(S.NullOr(S.String).pipe(T.Body("bg_color"))), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsListResultItemAppLauncherApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), footerLinks: S.optional( S.NullOr( AccessApplicationsListResultItemAppLauncherApplicationFooterLinksList, ).pipe(T.Body("footer_links")), ), headerBgColor: S.optional( S.NullOr(S.String).pipe(T.Body("header_bg_color")), ), landingPageDesign: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign, ).pipe(T.Body("landing_page_design")), ), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsListResultItemAppLauncherApplicationPoliciesList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipAppLauncherLoginPage: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_app_launcher_login_page")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemAppLauncherApplication", }) as any as S.Schema; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationAllowedIdpsList = Array; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationCustomPagesList = Array; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList = Array; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesList = Array; export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplication { /** The application type. */ type: AccessApplicationsListResultItemSelfHostedApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationCustomPagesList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplication", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationAllowedIdpsList = Array; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationCustomPagesList = Array; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireList = Array; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesList = Array; export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserIsolationPermissionsApplication { /** The application type. */ type: AccessApplicationsListResultItemSelfHostedApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationCustomPagesList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemBrowserIsolationPermissionsApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserIsolationPermissionsApplication", }) as any as S.Schema; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationAllowedIdpsList = Array; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationCustomPagesList = Array; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList = Array; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesList = Array; export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplication { /** The application type. */ type: AccessApplicationsListResultItemSelfHostedApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationCustomPagesList | null; /** The proxy endpoint domain in the format: 10 alphanumeric characters followed by .proxy.cloudflare-gateway.com */ domain?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplication", }) as any as S.Schema; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemBookmarkApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsListResultItemBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBookmarkApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBookmarkApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBookmarkApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireList = Array; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBookmarkApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsListResultItemBookmarkApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemBookmarkApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsListResultItemBookmarkApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsListResultItemBookmarkApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemBookmarkApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsListResultItemBookmarkApplicationPoliciesList = Array; export const AccessApplicationsListResultItemBookmarkApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBookmarkApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBookmarkApplicationTagsList = Array; export const AccessApplicationsListResultItemBookmarkApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemBookmarkApplication { /** UUID. */ id?: string | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** The URL or domain of the bookmark. */ domain?: string | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsListResultItemBookmarkApplicationPoliciesList | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsListResultItemBookmarkApplicationTagsList | null; /** The application type. */ type?: AccessApplicationsListResultItemSelfHostedApplicationType | null; } export const AccessApplicationsListResultItemBookmarkApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), domain: S.optional(S.NullOr(S.String)), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsListResultItemBookmarkApplicationPoliciesList, ), ), tags: S.optional( S.NullOr(AccessApplicationsListResultItemBookmarkApplicationTagsList), ), type: S.optional( S.NullOr(AccessApplicationsListResultItemSelfHostedApplicationType), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBookmarkApplication", }) as any as S.Schema; export type AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItemProtocol = "SSH"; export const AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItemProtocol = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList = Array; export const AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItemTargetAttributesMap = { [key: string]: | AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList | undefined; }; export const AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItemTargetAttributesMap = /*@__PURE__*/ S.Record( S.String, AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList, ) as any as S.Schema; export interface AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItem { /** The port that the targets use for the chosen communication protocol. A port cannot be assigned to multiple protocols. */ port: number; /** The communication protocol your application secures. */ protocol: AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItemProtocol; /** Contains a map of target attribute keys to target attribute values. */ targetAttributes: AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItemTargetAttributesMap; } export const AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItem = /*@__PURE__*/ S.suspend(() => S.Struct({ port: S.Number, protocol: AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItemProtocol, targetAttributes: AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItemTargetAttributesMap.pipe( T.Body("target_attributes"), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItem", }) as any as S.Schema; export type AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaList = Array; export const AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItem, ) as any as S.Schema; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList = Array; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemConnectionRulesSsh { /** Contains the Unix usernames that may be used when connecting over SSH. */ usernames: AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList; /** Enables using Identity Provider email alias as SSH username. */ allowEmailAlias?: boolean | null; } export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemConnectionRulesSsh = /*@__PURE__*/ S.suspend(() => S.Struct({ usernames: AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList, allowEmailAlias: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_email_alias")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemConnectionRulesSsh", }) as any as S.Schema; export interface AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemConnectionRules { /** The SSH-specific rules that define how users may connect to the targets secured by your application. */ ssh?: AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemConnectionRulesSsh | null; } export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ ssh: S.optional( S.NullOr( AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemConnectionRulesSsh, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = "piv_key"; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. For infrastructure applications, only `piv_key` is supported. */ allowedAuthenticators?: AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireList = Array; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemInfrastructureApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** The rules that define how users may connect to the targets secured by your application. */ connectionRules?: AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeList | null; /** Configures multi-factor authentication (MFA) settings for infrastructure applications. */ mfaConfig?: AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireList | null; updatedAt?: string | null; } export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), connectionRules: S.optional( S.NullOr( AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemIncludeList, ), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), require: S.optional( S.NullOr( AccessApplicationsListResultItemInfrastructureApplicationPoliciesItemRequireList, ), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemInfrastructureApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsListResultItemInfrastructureApplicationPoliciesList = Array; export const AccessApplicationsListResultItemInfrastructureApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemInfrastructureApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemInfrastructureApplication { targetCriteria: AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaList; /** The application type. */ type: AccessApplicationsListResultItemSelfHostedApplicationType; /** UUID. */ id?: string | null; /** Audience tag. */ aud?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsListResultItemInfrastructureApplicationPoliciesList | null; } export const AccessApplicationsListResultItemInfrastructureApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ targetCriteria: AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaList.pipe( T.Body("target_criteria"), ), type: AccessApplicationsListResultItemSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), aud: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsListResultItemInfrastructureApplicationPoliciesList, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemInfrastructureApplication", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItemProtocol = "RDP"; export const AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItemProtocol = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap = { [key: string]: | AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList | undefined; }; export const AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap = /*@__PURE__*/ S.Record( S.String, AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItem { /** The port that the targets use for the chosen communication protocol. A port cannot be assigned to multiple protocols. */ port: number; /** The communication protocol your application secures. */ protocol: AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItemProtocol; /** Contains a map of target attribute keys to target attribute values. */ targetAttributes: AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap; } export const AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItem = /*@__PURE__*/ S.suspend(() => S.Struct({ port: S.Number, protocol: AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItemProtocol, targetAttributes: AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap.pipe( T.Body("target_attributes"), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItem", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationAllowedIdpsList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationCustomPagesList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPublicDestination { type?: AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemWorkerDestination { type: AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItem = | AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPublicDestination | AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPrivateDestination | AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemWorkerDestination | AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllWorkersDestination | AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsListResultItemBrowserRDPApplicationDestinationsList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserRDPApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemBrowserRDPApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserRDPApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserRDPApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemBrowserRDPApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserRDPApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsListResultItemBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsListResultItemBrowserRDPApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsListResultItemBrowserRDPApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsListResultItemBrowserRDPApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsListResultItemBrowserRDPApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsListResultItemBrowserRDPApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationPoliciesList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsListResultItemBrowserRDPApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemBrowserRDPApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsListResultItemBrowserRDPApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationScimConfigMappingsList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemBrowserRDPApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserRDPApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsListResultItemBrowserRDPApplicationScimConfigMappingsList | null; } export const AccessApplicationsListResultItemBrowserRDPApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationSelfHostedDomainsList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemBrowserRDPApplicationTagsList = Array; export const AccessApplicationsListResultItemBrowserRDPApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemBrowserRDPApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; targetCriteria: AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaList; /** The application type. */ type: AccessApplicationsListResultItemSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsListResultItemBrowserRDPApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsListResultItemSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsListResultItemBrowserRDPApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsListResultItemBrowserRDPApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemBrowserRDPApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsListResultItemBrowserRDPApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsListResultItemBrowserRDPApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsListResultItemBrowserRDPApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsListResultItemBrowserRDPApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsListResultItemBrowserRDPApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsListResultItemBrowserRDPApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, targetCriteria: AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaList.pipe( T.Body("target_criteria"), ), type: AccessApplicationsListResultItemSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationPoliciesList, ), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsListResultItemBrowserRDPApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsListResultItemBrowserRDPApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemBrowserRDPApplication", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationAllowedIdpsList = Array; export const AccessApplicationsListResultItemMcpServerApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationCustomPagesList = Array; export const AccessApplicationsListResultItemMcpServerApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPublicDestination { type?: AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsListResultItemMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerApplicationDestinationsItemWorkerDestination { type: AccessApplicationsListResultItemMcpServerApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemMcpServerApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationDestinationsItem = | AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPublicDestination | AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPrivateDestination | AccessApplicationsListResultItemMcpServerApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsListResultItemMcpServerApplicationDestinationsItemWorkerDestination | AccessApplicationsListResultItemMcpServerApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllWorkersDestination | AccessApplicationsListResultItemMcpServerApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsListResultItemMcpServerApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsListResultItemMcpServerApplicationDestinationsList = Array; export const AccessApplicationsListResultItemMcpServerApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsListResultItemMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsListResultItemMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsListResultItemMcpServerApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsListResultItemMcpServerApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsListResultItemMcpServerApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsListResultItemMcpServerApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsListResultItemMcpServerApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsListResultItemMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireList = Array; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsListResultItemMcpServerApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemMcpServerApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsListResultItemMcpServerApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationPoliciesList = Array; export const AccessApplicationsListResultItemMcpServerApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsListResultItemMcpServerApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsListResultItemMcpServerApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsListResultItemMcpServerApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsListResultItemMcpServerApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationScimConfigMappingsList = Array; export const AccessApplicationsListResultItemMcpServerApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsListResultItemMcpServerApplicationScimConfigMappingsList | null; } export const AccessApplicationsListResultItemMcpServerApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerApplicationTagsList = Array; export const AccessApplicationsListResultItemMcpServerApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerApplication { /** The application type. */ type: AccessApplicationsListResultItemSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsListResultItemMcpServerApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsListResultItemMcpServerApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsListResultItemMcpServerApplicationDestinationsList | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsListResultItemMcpServerApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; policies?: AccessApplicationsListResultItemMcpServerApplicationPoliciesList | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsListResultItemMcpServerApplicationScimConfig | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsListResultItemMcpServerApplicationTagsList | null; } export const AccessApplicationsListResultItemMcpServerApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowedIdps: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationDestinationsList, ), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), policies: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationPoliciesList, ), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerApplicationScimConfig, ).pipe(T.Body("scim_config")), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), tags: S.optional( S.NullOr(AccessApplicationsListResultItemMcpServerApplicationTagsList), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerApplication", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationAllowedIdpsList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationCustomPagesList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPublicDestination { type?: AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemWorkerDestination { type: AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItem = | AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPublicDestination | AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPrivateDestination | AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemWorkerDestination | AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllWorkersDestination | AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsListResultItemSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigMappingsList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerPortalApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigMappingsList | null; } export const AccessApplicationsListResultItemMcpServerPortalApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsListResultItemMcpServerPortalApplicationTagsList = Array; export const AccessApplicationsListResultItemMcpServerPortalApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsListResultItemMcpServerPortalApplication { /** The application type. */ type: AccessApplicationsListResultItemSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsListResultItemMcpServerPortalApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsListResultItemMcpServerPortalApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; policies?: AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesList | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsListResultItemMcpServerPortalApplicationScimConfig | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsListResultItemMcpServerPortalApplicationTagsList | null; } export const AccessApplicationsListResultItemMcpServerPortalApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsListResultItemSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowedIdps: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationDestinationsList, ), ), domain: S.optional(S.NullOr(S.String)), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), policies: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationPoliciesList, ), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationScimConfig, ).pipe(T.Body("scim_config")), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), tags: S.optional( S.NullOr( AccessApplicationsListResultItemMcpServerPortalApplicationTagsList, ), ), }), ).annotate({ identifier: "AccessApplicationsListResultItemMcpServerPortalApplication", }) as any as S.Schema; export type AccessApplicationsListResultItem = | AccessApplicationsListResultItemSelfHostedApplication | AccessApplicationsListResultItemSaaSApplication | AccessApplicationsListResultItemBrowserSSHApplication | AccessApplicationsListResultItemBrowserVNCApplication | AccessApplicationsListResultItemAppLauncherApplication | AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplication | AccessApplicationsListResultItemBrowserIsolationPermissionsApplication | AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplication | AccessApplicationsListResultItemBookmarkApplication | AccessApplicationsListResultItemInfrastructureApplication | AccessApplicationsListResultItemBrowserRDPApplication | AccessApplicationsListResultItemMcpServerApplication | AccessApplicationsListResultItemMcpServerPortalApplication; export const AccessApplicationsListResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "domain", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "id", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "customPages", "logoUrl", "name", "policies", "saasApp", "scimConfig", "tags", "type", ], [ "domain", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "domain", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "type", "id", "allowedIdps", "appLauncherLogoUrl", "aud", "autoRedirectToIdentity", "bgColor", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "footerLinks", "headerBgColor", "landingPageDesign", "name", "policies", "sessionDuration", "skipAppLauncherLoginPage", ], [ "type", "id", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "name", "policies", "sessionDuration", ], [ "type", "id", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "name", "policies", "sessionDuration", ], [ "type", "id", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "name", "policies", "sessionDuration", ], [ "id", "appLauncherVisible", "aud", "domain", "logoUrl", "name", "policies", "tags", "type", ], ["targetCriteria", "type", "id", "aud", "name", "policies"], [ "domain", "targetCriteria", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "type", "id", "allowAuthenticateViaWarp", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "httpOnlyCookieAttribute", "logoUrl", "name", "oauthConfiguration", "optionsPreflightBypass", "policies", "sameSiteCookieAttribute", "scimConfig", "sessionDuration", "tags", ], [ "type", "id", "allowAuthenticateViaWarp", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "domain", "httpOnlyCookieAttribute", "logoUrl", "name", "oauthConfiguration", "optionsPreflightBypass", "policies", "sameSiteCookieAttribute", "scimConfig", "sessionDuration", "tags", ], ]), ); export type AccessApplicationsListResultList = Array; export const AccessApplicationsListResultList = /*@__PURE__*/ S.Array( AccessApplicationsListResultItem, ) as any as S.Schema; export interface ListAccessApplicationsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessApplicationsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessApplicationsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessApplicationsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessApplicationsResponse", }) as any as S.Schema; export interface ListAccessApplicationsForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** The aud of the app. */ aud?: string; /** The domain of the app. */ domain?: string; /** True for only exact string matches against passed name/domain query parameters. */ exact?: boolean; /** The name of the app. */ name?: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; /** Search for apps by other listed query parameters. */ search?: string; /** Target Criteria attributes in key=value format. */ targetAttributes?: string; } export const ListAccessApplicationsForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), aud: S.optional(S.String.pipe(T.Query())), domain: S.optional(S.String.pipe(T.Query())), exact: S.optional(S.Boolean.pipe(T.Query())), name: S.optional(S.String.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), search: S.optional(S.String.pipe(T.Query())), targetAttributes: S.optional(S.String.pipe(T.Query("target_attributes"))), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/apps", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessApplicationsForZoneRequest", }) as any as S.Schema; export interface ListAccessApplicationUserPolicyChecksForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** Identifier. */ appId: string; } export const ListAccessApplicationUserPolicyChecksForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), appId: S.String.pipe(T.Label("app_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/apps/{app_id}/user_policy_checks", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessApplicationUserPolicyChecksForAccountRequest", }) as any as S.Schema; export type AccessApplicationsUserPolicyChecksListResponseAppStatePoliciesList = Array; export const AccessApplicationsUserPolicyChecksListResponseAppStatePoliciesList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export interface AccessApplicationsUserPolicyChecksListResponseAppState { /** UUID. */ appUid?: string | null; aud?: string | null; hostname?: string | null; name?: string | null; policies?: AccessApplicationsUserPolicyChecksListResponseAppStatePoliciesList | null; status?: string | null; } export const AccessApplicationsUserPolicyChecksListResponseAppState = /*@__PURE__*/ S.suspend(() => S.Struct({ appUid: S.optional(S.NullOr(S.String).pipe(T.Body("app_uid"))), aud: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsUserPolicyChecksListResponseAppStatePoliciesList, ), ), status: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsUserPolicyChecksListResponseAppState", }) as any as S.Schema; export type AccessApplicationsUserPolicyChecksListResponseUserIdentityGeo = AccessUsersActiveSessionsGetResponseGeo; export const AccessApplicationsUserPolicyChecksListResponseUserIdentityGeo = AccessUsersActiveSessionsGetResponseGeo; export interface AccessApplicationsUserPolicyChecksListResponseUserIdentity { id?: string | null; accountId?: string | null; deviceSessions?: unknown | null; email?: string | null; geo?: AccessUsersActiveSessionsGetResponseGeo | null; iat?: number | null; isGateway?: boolean | null; isWarp?: boolean | null; name?: string | null; /** UUID. */ userUuid?: string | null; version?: number | null; } export const AccessApplicationsUserPolicyChecksListResponseUserIdentity = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), accountId: S.optional(S.NullOr(S.String).pipe(T.Body("account_id"))), deviceSessions: S.optional( S.NullOr(S.Unknown).pipe(T.Body("device_sessions")), ), email: S.optional(S.NullOr(S.String)), geo: S.optional(S.NullOr(AccessUsersActiveSessionsGetResponseGeo)), iat: S.optional(S.NullOr(S.Number)), isGateway: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_gateway"))), isWarp: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_warp"))), name: S.optional(S.NullOr(S.String)), userUuid: S.optional(S.NullOr(S.String).pipe(T.Body("user_uuid"))), version: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "AccessApplicationsUserPolicyChecksListResponseUserIdentity", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ListAccessApplicationUserPolicyChecksResponse { appState?: AccessApplicationsUserPolicyChecksListResponseAppState | null; userIdentity?: AccessApplicationsUserPolicyChecksListResponseUserIdentity | null; } export const ListAccessApplicationUserPolicyChecksResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ appState: S.optional( S.NullOr(AccessApplicationsUserPolicyChecksListResponseAppState).pipe( T.Body("app_state"), ), ), userIdentity: S.optional( S.NullOr( AccessApplicationsUserPolicyChecksListResponseUserIdentity, ).pipe(T.Body("user_identity")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessApplicationUserPolicyChecksResponse", }) as any as S.Schema; export interface ListAccessApplicationUserPolicyChecksForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** Identifier. */ appId: string; } export const ListAccessApplicationUserPolicyChecksForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), appId: S.String.pipe(T.Label("app_id")), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/apps/{app_id}/user_policy_checks", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessApplicationUserPolicyChecksForZoneRequest", }) as any as S.Schema; export interface ListAccessBookmarksRequest { accountId: string; } export const ListAccessBookmarksRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/bookmarks", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessBookmarksRequest", }) as any as S.Schema; export interface AccessBookmarksListResultItem { /** The unique identifier for the Bookmark application. */ id?: string | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** The domain of the Bookmark application. */ domain?: string | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the Bookmark application. */ name?: string | null; } export const AccessBookmarksListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), domain: S.optional(S.NullOr(S.String)), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessBookmarksListResultItem", }) as any as S.Schema; export type AccessBookmarksListResultList = Array; export const AccessBookmarksListResultList = /*@__PURE__*/ S.Array( AccessBookmarksListResultItem, ) as any as S.Schema; export interface ListAccessBookmarksResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessBookmarksListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessBookmarksResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessBookmarksListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessBookmarksResponse", }) as any as S.Schema; export interface ListAccessCertificatesForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; } export const ListAccessCertificatesForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/certificates", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessCertificatesForAccountRequest", }) as any as S.Schema; export type AccessCertificatesListResultItemAssociatedHostnamesList = Array; export const AccessCertificatesListResultItemAssociatedHostnamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessCertificatesListResultItem { /** The ID of the application that will use this certificate. */ id?: string | null; /** The hostnames of the applications that will use this certificate. */ associatedHostnames?: AccessCertificatesListResultItemAssociatedHostnamesList | null; expiresOn?: string | null; /** The MD5 fingerprint of the certificate. */ fingerprint?: string | null; /** The name of the certificate. */ name?: string | null; } export const AccessCertificatesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), associatedHostnames: S.optional( S.NullOr(AccessCertificatesListResultItemAssociatedHostnamesList).pipe( T.Body("associated_hostnames"), ), ), expiresOn: S.optional(S.NullOr(S.String).pipe(T.Body("expires_on"))), fingerprint: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessCertificatesListResultItem", }) as any as S.Schema; export type AccessCertificatesListResultList = Array; export const AccessCertificatesListResultList = /*@__PURE__*/ S.Array( AccessCertificatesListResultItem, ) as any as S.Schema; export interface ListAccessCertificatesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessCertificatesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessCertificatesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessCertificatesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessCertificatesResponse", }) as any as S.Schema; export interface ListAccessCertificatesForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; } export const ListAccessCertificatesForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/certificates", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessCertificatesForZoneRequest", }) as any as S.Schema; export interface ListAccessCustomPagesRequest { /** Identifier. */ accountId: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; } export const ListAccessCustomPagesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/custom_pages", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessCustomPagesRequest", }) as any as S.Schema; export type AccessCustomPagesListResultItemType = | "identity_denied" | "forbidden"; export const AccessCustomPagesListResultItemType = /*@__PURE__*/ S.String; export interface AccessCustomPagesListResultItem { /** Custom page name. */ name: string; /** Custom page type. */ type: AccessCustomPagesListResultItemType; /** UUID. */ uid?: string | null; } export const AccessCustomPagesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.String, type: AccessCustomPagesListResultItemType, uid: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessCustomPagesListResultItem", }) as any as S.Schema; export type AccessCustomPagesListResultList = Array; export const AccessCustomPagesListResultList = /*@__PURE__*/ S.Array( AccessCustomPagesListResultItem, ) as any as S.Schema; export interface ListAccessCustomPagesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessCustomPagesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessCustomPagesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessCustomPagesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessCustomPagesResponse", }) as any as S.Schema; export interface ListAccessGatewayCasRequest { /** Identifier. */ accountId: string; } export const ListAccessGatewayCasRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/gateway_ca", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessGatewayCasRequest", }) as any as S.Schema; export interface AccessGatewayCaListResultItem { /** The key ID of this certificate. */ id?: string | null; /** The public key of this certificate. */ publicKey?: string | null; } export const AccessGatewayCaListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), }), ).annotate({ identifier: "AccessGatewayCaListResultItem", }) as any as S.Schema; export type AccessGatewayCaListResultList = Array; export const AccessGatewayCaListResultList = /*@__PURE__*/ S.Array( AccessGatewayCaListResultItem, ) as any as S.Schema; export interface ListAccessGatewayCasResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessGatewayCaListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessGatewayCasResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessGatewayCaListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessGatewayCasResponse", }) as any as S.Schema; export interface ListAccessGroupsForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** The name of the group. */ name?: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; /** Search for groups by other listed query parameters. */ search?: string; } export const ListAccessGroupsForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.optional(S.String.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), search: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/groups", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessGroupsForAccountRequest", }) as any as S.Schema; export type AccessGroupsListResultItemExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessGroupsListResultItemExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessGroupsListResultItemExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessGroupsListResultItemExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessGroupsListResultItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessGroupsListResultItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessGroupsListResultItemExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessGroupsListResultItemExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessGroupsListResultItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessGroupsListResultItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessGroupsListResultItemExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessGroupsListResultItemExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessGroupsListResultItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessGroupsListResultItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessGroupsListResultItemExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessGroupsListResultItemExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessGroupsListResultItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessGroupsListResultItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessGroupsListResultItemExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessGroupsListResultItemExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessGroupsListResultItemExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessGroupsListResultItemExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessGroupsListResultItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessGroupsListResultItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessGroupsListResultItemExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessGroupsListResultItemExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessGroupsListResultItemExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessGroupsListResultItemExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessGroupsListResultItemExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessGroupsListResultItemExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessGroupsListResultItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessGroupsListResultItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessGroupsListResultItemExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessGroupsListResultItemExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessGroupsListResultItemExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessGroupsListResultItemExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessGroupsListResultItemExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessGroupsListResultItemExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessGroupsListResultItemExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessGroupsListResultItemExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessGroupsListResultItemExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessGroupsListResultItemExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessGroupsListResultItemExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessGroupsListResultItemExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessGroupsListResultItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessGroupsListResultItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessGroupsListResultItemExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessGroupsListResultItemExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessGroupsListResultItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessGroupsListResultItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessGroupsListResultItemExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export const AccessGroupsListResultItemExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export type AccessGroupsListResultItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export const AccessGroupsListResultItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export type AccessGroupsListResultItemExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessGroupsListResultItemExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessGroupsListResultItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessGroupsListResultItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessGroupsListResultItemExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessGroupsListResultItemExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessGroupsListResultItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessGroupsListResultItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessGroupsListResultItemExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessGroupsListResultItemExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessGroupsListResultItemExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessGroupsListResultItemExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessGroupsListResultItemExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessGroupsListResultItemExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessGroupsListResultItemExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessGroupsListResultItemExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessGroupsListResultItemExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessGroupsListResultItemExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessGroupsListResultItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessGroupsListResultItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessGroupsListResultItemExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessGroupsListResultItemExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessGroupsListResultItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessGroupsListResultItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessGroupsListResultItemExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessGroupsListResultItemExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessGroupsListResultItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessGroupsListResultItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessGroupsListResultItemExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessGroupsListResultItemExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessGroupsListResultItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessGroupsListResultItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessGroupsListResultItemExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessGroupsListResultItemExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessGroupsListResultItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessGroupsListResultItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessGroupsListResultItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessGroupsListResultItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessGroupsListResultItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsListResultItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export type AccessGroupsListResultItemExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessGroupsListResultItemExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsListResultItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessGroupsListResultItemExcludeList = Array; export const AccessGroupsListResultItemExcludeList = /*@__PURE__*/ S.Array( AccessGroupsListResultItemExcludeItem, ) as any as S.Schema; export type AccessGroupsListResultItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessGroupsListResultItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessGroupsListResultItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessGroupsListResultItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessGroupsListResultItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessGroupsListResultItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessGroupsListResultItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessGroupsListResultItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessGroupsListResultItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessGroupsListResultItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessGroupsListResultItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessGroupsListResultItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessGroupsListResultItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessGroupsListResultItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessGroupsListResultItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessGroupsListResultItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessGroupsListResultItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessGroupsListResultItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessGroupsListResultItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessGroupsListResultItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessGroupsListResultItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessGroupsListResultItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessGroupsListResultItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessGroupsListResultItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessGroupsListResultItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessGroupsListResultItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessGroupsListResultItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessGroupsListResultItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessGroupsListResultItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessGroupsListResultItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessGroupsListResultItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessGroupsListResultItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessGroupsListResultItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessGroupsListResultItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessGroupsListResultItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessGroupsListResultItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessGroupsListResultItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessGroupsListResultItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessGroupsListResultItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessGroupsListResultItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessGroupsListResultItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessGroupsListResultItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessGroupsListResultItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessGroupsListResultItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessGroupsListResultItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessGroupsListResultItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessGroupsListResultItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessGroupsListResultItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessGroupsListResultItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessGroupsListResultItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessGroupsListResultItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsListResultItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessGroupsListResultItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsListResultItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessGroupsListResultItemIncludeList = Array; export const AccessGroupsListResultItemIncludeList = /*@__PURE__*/ S.Array( AccessGroupsListResultItemIncludeItem, ) as any as S.Schema; export type AccessGroupsListResultItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessGroupsListResultItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessGroupsListResultItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessGroupsListResultItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessGroupsListResultItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessGroupsListResultItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessGroupsListResultItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessGroupsListResultItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessGroupsListResultItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessGroupsListResultItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessGroupsListResultItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessGroupsListResultItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessGroupsListResultItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessGroupsListResultItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessGroupsListResultItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessGroupsListResultItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessGroupsListResultItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessGroupsListResultItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessGroupsListResultItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessGroupsListResultItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessGroupsListResultItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessGroupsListResultItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessGroupsListResultItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessGroupsListResultItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessGroupsListResultItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessGroupsListResultItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessGroupsListResultItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessGroupsListResultItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessGroupsListResultItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessGroupsListResultItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessGroupsListResultItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessGroupsListResultItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessGroupsListResultItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessGroupsListResultItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessGroupsListResultItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessGroupsListResultItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessGroupsListResultItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessGroupsListResultItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessGroupsListResultItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessGroupsListResultItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessGroupsListResultItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessGroupsListResultItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessGroupsListResultItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessGroupsListResultItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessGroupsListResultItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessGroupsListResultItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessGroupsListResultItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessGroupsListResultItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessGroupsListResultItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessGroupsListResultItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessGroupsListResultItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsListResultItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessGroupsListResultItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsListResultItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessGroupsListResultItemRequireList = Array; export const AccessGroupsListResultItemRequireList = /*@__PURE__*/ S.Array( AccessGroupsListResultItemRequireItem, ) as any as S.Schema; export interface AccessGroupsListResultItem { /** UUID. */ id?: string | null; /** Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessGroupsListResultItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessGroupsListResultItemIncludeList | null; /** Whether this is the default group */ isDefault?: boolean | null; /** The name of the Access group. */ name?: string | null; /** Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules. */ require?: AccessGroupsListResultItemRequireList | null; } export const AccessGroupsListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), exclude: S.optional(S.NullOr(AccessGroupsListResultItemExcludeList)), include: S.optional(S.NullOr(AccessGroupsListResultItemIncludeList)), isDefault: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_default"))), name: S.optional(S.NullOr(S.String)), require: S.optional(S.NullOr(AccessGroupsListResultItemRequireList)), }), ).annotate({ identifier: "AccessGroupsListResultItem", }) as any as S.Schema; export type AccessGroupsListResultList = Array; export const AccessGroupsListResultList = /*@__PURE__*/ S.Array( AccessGroupsListResultItem, ) as any as S.Schema; export interface ListAccessGroupsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessGroupsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessGroupsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessGroupsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessGroupsResponse", }) as any as S.Schema; export interface ListAccessGroupsForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** The name of the group. */ name?: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; /** Search for groups by other listed query parameters. */ search?: string; } export const ListAccessGroupsForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), name: S.optional(S.String.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), search: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/groups", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessGroupsForZoneRequest", }) as any as S.Schema; export interface ListAccessIdpFederationGrantsRequest { /** Identifier. */ accountId: string; } export const ListAccessIdpFederationGrantsRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/idp_federation_grants", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessIdpFederationGrantsRequest", }) as any as S.Schema; export interface AccessIdpFederationGrantsListResultItem { /** UID of the IdP federation grant. */ id: string; /** UID of the identity provider being federated. */ idpId: string; } export const AccessIdpFederationGrantsListResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, idpId: S.String.pipe(T.Body("idp_id")), }), ).annotate({ identifier: "AccessIdpFederationGrantsListResultItem", }) as any as S.Schema; export type AccessIdpFederationGrantsListResultList = Array; export const AccessIdpFederationGrantsListResultList = /*@__PURE__*/ S.Array( AccessIdpFederationGrantsListResultItem, ) as any as S.Schema; export type ListAccessIdpFederationGrantsResponse = AccessIdpFederationGrantsListResultList; export const ListAccessIdpFederationGrantsResponse = /*@__PURE__*/ S.suspend( () => AccessIdpFederationGrantsListResultList.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "ListAccessIdpFederationGrantsResponse", }) as any as S.Schema; export type AccessInfrastructureTargetsListRequestDirection = "asc" | "desc"; export const AccessInfrastructureTargetsListRequestDirection = /*@__PURE__*/ S.String; export type AccessInfrastructureTargetsListRequestIpsList = Array; export const AccessInfrastructureTargetsListRequestIpsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessInfrastructureTargetsListRequestOrder = | "hostname" | "created_at"; export const AccessInfrastructureTargetsListRequestOrder = /*@__PURE__*/ S.String; export type AccessInfrastructureTargetsListRequestTargetIdsList = Array; export const AccessInfrastructureTargetsListRequestTargetIdsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface ListAccessInfrastructureTargetsRequest { /** Account identifier */ accountId: string; /** Date and time at which the target was created after (inclusive) */ createdAfter?: string; /** Date and time at which the target was created before (inclusive) */ createdBefore?: string; /** The sorting direction. */ direction?: AccessInfrastructureTargetsListRequestDirection | (string & {}); /** Hostname of a target */ hostname?: string; /** Partial match to the hostname of a target */ hostnameContains?: string; /** Filters for targets whose IP addresses look like the specified string. */ ipLike?: string; /** IPv4 address of the target */ ipV4?: string; /** IPv6 address of the target */ ipV6?: string; /** Filters for targets that have any of the following IP addresses. Specify */ ips?: AccessInfrastructureTargetsListRequestIpsList; /** Defines an IPv4 filter range's ending value (inclusive). Requires */ ipv4End?: string; /** Defines an IPv4 filter range's starting value (inclusive). Requires */ ipv4Start?: string; /** Defines an IPv6 filter range's ending value (inclusive). Requires */ ipv6End?: string; /** Defines an IPv6 filter range's starting value (inclusive). Requires */ ipv6Start?: string; /** Date and time at which the target was modified after (inclusive) */ modifiedAfter?: string; /** Date and time at which the target was modified before (inclusive) */ modifiedBefore?: string; /** The field to sort by. */ order?: AccessInfrastructureTargetsListRequestOrder | (string & {}); /** Current page in the response */ page?: number; /** Max amount of entries returned per page */ perPage?: number; /** Filters for targets that have any of the following UUIDs. Specify */ targetIds?: AccessInfrastructureTargetsListRequestTargetIdsList; /** Private virtual network identifier of the target */ virtualNetworkId?: string; } export const ListAccessInfrastructureTargetsRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), createdAfter: S.optional(S.String.pipe(T.Query("created_after"))), createdBefore: S.optional(S.String.pipe(T.Query("created_before"))), direction: S.optional( AccessInfrastructureTargetsListRequestDirection.pipe(T.Query()), ), hostname: S.optional(S.String.pipe(T.Query())), hostnameContains: S.optional(S.String.pipe(T.Query("hostname_contains"))), ipLike: S.optional(S.String.pipe(T.Query("ip_like"))), ipV4: S.optional(S.String.pipe(T.Query("ip_v4"))), ipV6: S.optional(S.String.pipe(T.Query("ip_v6"))), ips: S.optional( AccessInfrastructureTargetsListRequestIpsList.pipe(T.Query()), ), ipv4End: S.optional(S.String.pipe(T.Query("ipv4_end"))), ipv4Start: S.optional(S.String.pipe(T.Query("ipv4_start"))), ipv6End: S.optional(S.String.pipe(T.Query("ipv6_end"))), ipv6Start: S.optional(S.String.pipe(T.Query("ipv6_start"))), modifiedAfter: S.optional(S.String.pipe(T.Query("modified_after"))), modifiedBefore: S.optional(S.String.pipe(T.Query("modified_before"))), order: S.optional( AccessInfrastructureTargetsListRequestOrder.pipe(T.Query()), ), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), targetIds: S.optional( AccessInfrastructureTargetsListRequestTargetIdsList.pipe( T.Query("target_ids"), ), ), virtualNetworkId: S.optional( S.String.pipe(T.Query("virtual_network_id")), ), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/infrastructure/targets", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessInfrastructureTargetsRequest", }) as any as S.Schema; export type AccessInfrastructureTargetsListResultItemIpIpv4 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export const AccessInfrastructureTargetsListResultItemIpIpv4 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export type AccessInfrastructureTargetsListResultItemIpIpv6 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export const AccessInfrastructureTargetsListResultItemIpIpv6 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export type AccessInfrastructureTargetsListResultItemIp = AccessInfrastructureTargetsBulkUpdateResultItemIp; export const AccessInfrastructureTargetsListResultItemIp = AccessInfrastructureTargetsBulkUpdateResultItemIp; export type AccessInfrastructureTargetsListResultItem = AccessInfrastructureTargetsBulkUpdateResultItem; export const AccessInfrastructureTargetsListResultItem = AccessInfrastructureTargetsBulkUpdateResultItem; export type AccessInfrastructureTargetsListResultList = Array; export const AccessInfrastructureTargetsListResultList = /*@__PURE__*/ S.Array( AccessInfrastructureTargetsBulkUpdateResultItem, ) as any as S.Schema; export interface ListAccessInfrastructureTargetsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessInfrastructureTargetsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessInfrastructureTargetsResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: AccessInfrastructureTargetsListResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessInfrastructureTargetsResponse", }) as any as S.Schema; export type AccessLogsAccessRequestsListRequestAllowedOp = "eq" | "neq"; export const AccessLogsAccessRequestsListRequestAllowedOp = /*@__PURE__*/ S.String; export type AccessLogsAccessRequestsListRequestAppTypeOp = "eq" | "neq"; export const AccessLogsAccessRequestsListRequestAppTypeOp = /*@__PURE__*/ S.String; export type AccessLogsAccessRequestsListRequestAppUidOp = "eq" | "neq"; export const AccessLogsAccessRequestsListRequestAppUidOp = /*@__PURE__*/ S.String; export type AccessLogsAccessRequestsListRequestCountryCodeOp = "eq" | "neq"; export const AccessLogsAccessRequestsListRequestCountryCodeOp = /*@__PURE__*/ S.String; export type AccessLogsAccessRequestsListRequestDirection = "desc" | "asc"; export const AccessLogsAccessRequestsListRequestDirection = /*@__PURE__*/ S.String; export type AccessLogsAccessRequestsListRequestEmailOp = | "eq" | "neq" | "contains"; export const AccessLogsAccessRequestsListRequestEmailOp = /*@__PURE__*/ S.String; export type AccessLogsAccessRequestsListRequestIdpOp = "eq" | "neq"; export const AccessLogsAccessRequestsListRequestIdpOp = /*@__PURE__*/ S.String; export type AccessLogsAccessRequestsListRequestNonIdentityOp = "eq" | "neq"; export const AccessLogsAccessRequestsListRequestNonIdentityOp = /*@__PURE__*/ S.String; export type AccessLogsAccessRequestsListRequestRayIdOp = "eq" | "neq"; export const AccessLogsAccessRequestsListRequestRayIdOp = /*@__PURE__*/ S.String; export type AccessLogsAccessRequestsListRequestUserIdOp = "eq" | "neq"; export const AccessLogsAccessRequestsListRequestUserIdOp = /*@__PURE__*/ S.String; export interface ListAccessLogAccessRequestsRequest { /** Identifier. */ accountId: string; /** Operator for the `allowed` filter. */ allowedOp?: AccessLogsAccessRequestsListRequestAllowedOp | (string & {}); /** Operator for the `app_type` filter. */ appTypeOp?: AccessLogsAccessRequestsListRequestAppTypeOp | (string & {}); /** Operator for the `app_uid` filter. */ appUidOp?: AccessLogsAccessRequestsListRequestAppUidOp | (string & {}); /** Operator for the `country_code` filter. */ countryCodeOp?: | AccessLogsAccessRequestsListRequestCountryCodeOp | (string & {}); /** The chronological sorting order for the logs. */ direction?: AccessLogsAccessRequestsListRequestDirection | (string & {}); /** Filter by user email. Match mode is controlled by `emailOp` (preferred) or the legacy `email_exact` flag. */ email?: string; /** When true, `email` is matched exactly instead of substring matching. */ emailExact?: boolean; /** Operator for the `email` filter. */ emailOp?: AccessLogsAccessRequestsListRequestEmailOp | (string & {}); /** Comma-separated list of fields to include in the response. */ fields?: string; /** Operator for the `idp` filter. */ idpOp?: AccessLogsAccessRequestsListRequestIdpOp | (string & {}); /** The maximum number of log entries to retrieve. */ limit?: number; /** Operator for the `non_identity` filter. */ nonIdentityOp?: | AccessLogsAccessRequestsListRequestNonIdentityOp | (string & {}); /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; /** Operator for the `ray_id` filter. */ rayIdOp?: AccessLogsAccessRequestsListRequestRayIdOp | (string & {}); /** The earliest event timestamp to query. */ since?: string; /** The latest event timestamp to query. */ until?: string; /** Deprecated. Accepted for backward compatibility but no longer applied */ userId?: string; /** Deprecated. Accepted for backward compatibility but no longer applied */ userIdOp?: AccessLogsAccessRequestsListRequestUserIdOp | (string & {}); } export const ListAccessLogAccessRequestsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), allowedOp: S.optional( AccessLogsAccessRequestsListRequestAllowedOp.pipe(T.Query()), ), appTypeOp: S.optional( AccessLogsAccessRequestsListRequestAppTypeOp.pipe(T.Query("app_typeOp")), ), appUidOp: S.optional( AccessLogsAccessRequestsListRequestAppUidOp.pipe(T.Query("app_uidOp")), ), countryCodeOp: S.optional( AccessLogsAccessRequestsListRequestCountryCodeOp.pipe( T.Query("country_codeOp"), ), ), direction: S.optional( AccessLogsAccessRequestsListRequestDirection.pipe(T.Query()), ), email: S.optional(S.String.pipe(T.Query())), emailExact: S.optional(S.Boolean.pipe(T.Query("email_exact"))), emailOp: S.optional( AccessLogsAccessRequestsListRequestEmailOp.pipe(T.Query()), ), fields: S.optional(S.String.pipe(T.Query())), idpOp: S.optional(AccessLogsAccessRequestsListRequestIdpOp.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), nonIdentityOp: S.optional( AccessLogsAccessRequestsListRequestNonIdentityOp.pipe( T.Query("non_identityOp"), ), ), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), rayIdOp: S.optional( AccessLogsAccessRequestsListRequestRayIdOp.pipe(T.Query("ray_idOp")), ), since: S.optional(S.String.pipe(T.Query())), until: S.optional(S.String.pipe(T.Query())), userId: S.optional(S.String.pipe(T.Query("user_id"))), userIdOp: S.optional( AccessLogsAccessRequestsListRequestUserIdOp.pipe(T.Query("user_idOp")), ), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/logs/access_requests", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessLogAccessRequestsRequest", }) as any as S.Schema; export interface AccessLogsAccessRequestsListResultItem { /** The event that occurred, such as a login attempt. */ action?: string | null; /** The result of the authentication event. */ allowed?: boolean | null; /** The URL of the Access application. */ appDomain?: string | null; /** The unique identifier for the Access application. */ appUid?: string | null; /** The IdP used to authenticate. */ connection?: string | null; createdAt?: string | null; /** The IP address of the authenticating user. */ ipAddress?: string | null; /** The unique identifier for the request to Cloudflare. */ rayId?: string | null; /** The email address of the authenticating user. */ userEmail?: string | null; } export const AccessLogsAccessRequestsListResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ action: S.optional(S.NullOr(S.String)), allowed: S.optional(S.NullOr(S.Boolean)), appDomain: S.optional(S.NullOr(S.String).pipe(T.Body("app_domain"))), appUid: S.optional(S.NullOr(S.String).pipe(T.Body("app_uid"))), connection: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), ipAddress: S.optional(S.NullOr(S.String).pipe(T.Body("ip_address"))), rayId: S.optional(S.NullOr(S.String).pipe(T.Body("ray_id"))), userEmail: S.optional(S.NullOr(S.String).pipe(T.Body("user_email"))), }), ).annotate({ identifier: "AccessLogsAccessRequestsListResultItem", }) as any as S.Schema; export type AccessLogsAccessRequestsListResultList = Array; export const AccessLogsAccessRequestsListResultList = /*@__PURE__*/ S.Array( AccessLogsAccessRequestsListResultItem, ) as any as S.Schema; export type ListAccessLogAccessRequestsResponse = AccessLogsAccessRequestsListResultList; export const ListAccessLogAccessRequestsResponse = /*@__PURE__*/ S.suspend(() => AccessLogsAccessRequestsListResultList.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "ListAccessLogAccessRequestsResponse", }) as any as S.Schema; export type AccessLogsScimUpdatesListRequestIdpIdList = Array; export const AccessLogsScimUpdatesListRequestIdpIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessLogsScimUpdatesListRequestCfResourceIdList = Array; export const AccessLogsScimUpdatesListRequestCfResourceIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessLogsScimUpdatesListRequestDirection = "desc" | "asc"; export const AccessLogsScimUpdatesListRequestDirection = /*@__PURE__*/ S.String; export type AccessLogsScimUpdatesListRequestIdpResourceIdList = Array; export const AccessLogsScimUpdatesListRequestIdpResourceIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessLogsScimUpdatesListRequestRequestMethod = | "DELETE" | "PATCH" | "POST" | "PUT"; export const AccessLogsScimUpdatesListRequestRequestMethod = /*@__PURE__*/ S.String; export type AccessLogsScimUpdatesListRequestRequestMethodList = Array< AccessLogsScimUpdatesListRequestRequestMethod | (string & {}) >; export const AccessLogsScimUpdatesListRequestRequestMethodList = /*@__PURE__*/ S.Array( AccessLogsScimUpdatesListRequestRequestMethod, ) as any as S.Schema; export type AccessLogsScimUpdatesListRequestResourceGroupNameList = Array; export const AccessLogsScimUpdatesListRequestResourceGroupNameList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessLogsScimUpdatesListRequestResourceType = "USER" | "GROUP"; export const AccessLogsScimUpdatesListRequestResourceType = /*@__PURE__*/ S.String; export type AccessLogsScimUpdatesListRequestResourceTypeList = Array< AccessLogsScimUpdatesListRequestResourceType | (string & {}) >; export const AccessLogsScimUpdatesListRequestResourceTypeList = /*@__PURE__*/ S.Array( AccessLogsScimUpdatesListRequestResourceType, ) as any as S.Schema; export type AccessLogsScimUpdatesListRequestResourceUserEmailList = Array; export const AccessLogsScimUpdatesListRequestResourceUserEmailList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessLogsScimUpdatesListRequestStatus = "FAILURE" | "SUCCESS"; export const AccessLogsScimUpdatesListRequestStatus = /*@__PURE__*/ S.String; export type AccessLogsScimUpdatesListRequestStatusList = Array< AccessLogsScimUpdatesListRequestStatus | (string & {}) >; export const AccessLogsScimUpdatesListRequestStatusList = /*@__PURE__*/ S.Array( AccessLogsScimUpdatesListRequestStatus, ) as any as S.Schema; export interface ListAccessLogScimUpdatesRequest { /** Identifier. */ accountId: string; /** The unique Id of the IdP that has SCIM enabled. */ idpId: AccessLogsScimUpdatesListRequestIdpIdList; /** The unique Cloudflare-generated Id of the SCIM resource. Pass once for */ cfResourceId?: AccessLogsScimUpdatesListRequestCfResourceIdList; /** The chronological order used to sort the logs. */ direction?: AccessLogsScimUpdatesListRequestDirection | (string & {}); /** The IdP-generated Id of the SCIM resource. Pass once for a single */ idpResourceId?: AccessLogsScimUpdatesListRequestIdpResourceIdList; /** The maximum number of update logs to retrieve. */ limit?: number; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; /** The request method of the SCIM request. */ requestMethod?: AccessLogsScimUpdatesListRequestRequestMethodList; /** The display name of the SCIM Group resource. Pass once for a single */ resourceGroupName?: AccessLogsScimUpdatesListRequestResourceGroupNameList; /** The resource type of the SCIM request. */ resourceType?: AccessLogsScimUpdatesListRequestResourceTypeList; /** The email address of the SCIM User resource. Pass once for a single */ resourceUserEmail?: AccessLogsScimUpdatesListRequestResourceUserEmailList; /** the timestamp of the earliest update log. */ since?: string; /** The status of the SCIM request. */ status?: AccessLogsScimUpdatesListRequestStatusList; /** the timestamp of the most-recent update log. */ until?: string; } export const ListAccessLogScimUpdatesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), idpId: AccessLogsScimUpdatesListRequestIdpIdList.pipe(T.Query("idp_id")), cfResourceId: S.optional( AccessLogsScimUpdatesListRequestCfResourceIdList.pipe( T.Query("cf_resource_id"), ), ), direction: S.optional( AccessLogsScimUpdatesListRequestDirection.pipe(T.Query()), ), idpResourceId: S.optional( AccessLogsScimUpdatesListRequestIdpResourceIdList.pipe( T.Query("idp_resource_id"), ), ), limit: S.optional(S.Number.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), requestMethod: S.optional( AccessLogsScimUpdatesListRequestRequestMethodList.pipe( T.Query("request_method"), ), ), resourceGroupName: S.optional( AccessLogsScimUpdatesListRequestResourceGroupNameList.pipe( T.Query("resource_group_name"), ), ), resourceType: S.optional( AccessLogsScimUpdatesListRequestResourceTypeList.pipe( T.Query("resource_type"), ), ), resourceUserEmail: S.optional( AccessLogsScimUpdatesListRequestResourceUserEmailList.pipe( T.Query("resource_user_email"), ), ), since: S.optional(S.String.pipe(T.Query())), status: S.optional( AccessLogsScimUpdatesListRequestStatusList.pipe(T.Query()), ), until: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/logs/scim/updates", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessLogScimUpdatesRequest", }) as any as S.Schema; export interface AccessLogsScimUpdatesListResultItem { /** The unique Cloudflare-generated Id of the SCIM resource. */ cfResourceId?: string | null; /** The error message which is generated when the status of the SCIM request is 'FAILURE'. */ errorDescription?: string | null; /** The unique Id of the IdP that has SCIM enabled. */ idpId?: string | null; /** The IdP-generated Id of the SCIM resource. */ idpResourceId?: string | null; loggedAt?: string | null; /** The JSON-encoded string body of the SCIM request. */ requestBody?: string | null; /** The request method of the SCIM request. */ requestMethod?: string | null; /** The display name of the SCIM Group resource if it exists. */ resourceGroupName?: string | null; /** The resource type of the SCIM request. */ resourceType?: string | null; /** The email address of the SCIM User resource if it exists. */ resourceUserEmail?: string | null; /** The status of the SCIM request. */ status?: string | null; } export const AccessLogsScimUpdatesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ cfResourceId: S.optional(S.NullOr(S.String).pipe(T.Body("cf_resource_id"))), errorDescription: S.optional( S.NullOr(S.String).pipe(T.Body("error_description")), ), idpId: S.optional(S.NullOr(S.String).pipe(T.Body("idp_id"))), idpResourceId: S.optional( S.NullOr(S.String).pipe(T.Body("idp_resource_id")), ), loggedAt: S.optional(S.NullOr(S.String).pipe(T.Body("logged_at"))), requestBody: S.optional(S.NullOr(S.String).pipe(T.Body("request_body"))), requestMethod: S.optional( S.NullOr(S.String).pipe(T.Body("request_method")), ), resourceGroupName: S.optional( S.NullOr(S.String).pipe(T.Body("resource_group_name")), ), resourceType: S.optional(S.NullOr(S.String).pipe(T.Body("resource_type"))), resourceUserEmail: S.optional( S.NullOr(S.String).pipe(T.Body("resource_user_email")), ), status: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessLogsScimUpdatesListResultItem", }) as any as S.Schema; export type AccessLogsScimUpdatesListResultList = Array; export const AccessLogsScimUpdatesListResultList = /*@__PURE__*/ S.Array( AccessLogsScimUpdatesListResultItem, ) as any as S.Schema; export interface ListAccessLogScimUpdatesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessLogsScimUpdatesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessLogScimUpdatesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessLogsScimUpdatesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessLogScimUpdatesResponse", }) as any as S.Schema; export interface ListAccessPoliciesRequest { /** Identifier. */ accountId: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; } export const ListAccessPoliciesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/policies", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessPoliciesRequest", }) as any as S.Schema; export type AccessPoliciesListResultItemApprovalGroupsItemEmailAddressesList = Array; export const AccessPoliciesListResultItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessPoliciesListResultItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessPoliciesListResultItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessPoliciesListResultItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessPoliciesListResultItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessPoliciesListResultItemApprovalGroupsItem", }) as any as S.Schema; export type AccessPoliciesListResultItemApprovalGroupsList = Array; export const AccessPoliciesListResultItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessPoliciesListResultItemApprovalGroupsItem, ) as any as S.Schema; export type AccessPoliciesListResultItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessPoliciesListResultItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessPoliciesListResultItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessPoliciesListResultItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessPoliciesListResultItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessPoliciesListResultItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessPoliciesListResultItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessPoliciesListResultItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessPoliciesListResultItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessPoliciesListResultItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessPoliciesListResultItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessPoliciesListResultItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessPoliciesListResultItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessPoliciesListResultItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessPoliciesListResultItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessPoliciesListResultItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessPoliciesListResultItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessPoliciesListResultItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessPoliciesListResultItemConnectionRulesRdp | null; } export const AccessPoliciesListResultItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional(S.NullOr(AccessPoliciesListResultItemConnectionRulesRdp)), }), ).annotate({ identifier: "AccessPoliciesListResultItemConnectionRules", }) as any as S.Schema; export type AccessPoliciesListResultItemDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessPoliciesListResultItemDecision = /*@__PURE__*/ S.String; export type AccessPoliciesListResultItemExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessPoliciesListResultItemExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessPoliciesListResultItemExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessPoliciesListResultItemExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessPoliciesListResultItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessPoliciesListResultItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessPoliciesListResultItemExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessPoliciesListResultItemExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessPoliciesListResultItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessPoliciesListResultItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessPoliciesListResultItemExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessPoliciesListResultItemExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessPoliciesListResultItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessPoliciesListResultItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessPoliciesListResultItemExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessPoliciesListResultItemExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessPoliciesListResultItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessPoliciesListResultItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessPoliciesListResultItemExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessPoliciesListResultItemExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessPoliciesListResultItemExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessPoliciesListResultItemExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessPoliciesListResultItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessPoliciesListResultItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessPoliciesListResultItemExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessPoliciesListResultItemExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessPoliciesListResultItemExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessPoliciesListResultItemExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessPoliciesListResultItemExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessPoliciesListResultItemExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessPoliciesListResultItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessPoliciesListResultItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessPoliciesListResultItemExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessPoliciesListResultItemExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessPoliciesListResultItemExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessPoliciesListResultItemExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessPoliciesListResultItemExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessPoliciesListResultItemExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessPoliciesListResultItemExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessPoliciesListResultItemExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessPoliciesListResultItemExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessPoliciesListResultItemExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessPoliciesListResultItemExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessPoliciesListResultItemExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessPoliciesListResultItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessPoliciesListResultItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessPoliciesListResultItemExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessPoliciesListResultItemExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessPoliciesListResultItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessPoliciesListResultItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessPoliciesListResultItemExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export const AccessPoliciesListResultItemExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export type AccessPoliciesListResultItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export const AccessPoliciesListResultItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export type AccessPoliciesListResultItemExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessPoliciesListResultItemExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessPoliciesListResultItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessPoliciesListResultItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessPoliciesListResultItemExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessPoliciesListResultItemExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessPoliciesListResultItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessPoliciesListResultItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessPoliciesListResultItemExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessPoliciesListResultItemExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessPoliciesListResultItemExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessPoliciesListResultItemExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessPoliciesListResultItemExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessPoliciesListResultItemExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessPoliciesListResultItemExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessPoliciesListResultItemExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessPoliciesListResultItemExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessPoliciesListResultItemExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessPoliciesListResultItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessPoliciesListResultItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessPoliciesListResultItemExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessPoliciesListResultItemExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessPoliciesListResultItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessPoliciesListResultItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessPoliciesListResultItemExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessPoliciesListResultItemExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessPoliciesListResultItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessPoliciesListResultItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessPoliciesListResultItemExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessPoliciesListResultItemExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessPoliciesListResultItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessPoliciesListResultItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessPoliciesListResultItemExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessPoliciesListResultItemExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessPoliciesListResultItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessPoliciesListResultItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessPoliciesListResultItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessPoliciesListResultItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessPoliciesListResultItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesListResultItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export type AccessPoliciesListResultItemExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessPoliciesListResultItemExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesListResultItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesListResultItemExcludeList = Array; export const AccessPoliciesListResultItemExcludeList = /*@__PURE__*/ S.Array( AccessPoliciesListResultItemExcludeItem, ) as any as S.Schema; export type AccessPoliciesListResultItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessPoliciesListResultItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessPoliciesListResultItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessPoliciesListResultItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessPoliciesListResultItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessPoliciesListResultItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessPoliciesListResultItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessPoliciesListResultItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessPoliciesListResultItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessPoliciesListResultItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessPoliciesListResultItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessPoliciesListResultItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessPoliciesListResultItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessPoliciesListResultItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessPoliciesListResultItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessPoliciesListResultItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessPoliciesListResultItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessPoliciesListResultItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessPoliciesListResultItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessPoliciesListResultItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessPoliciesListResultItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessPoliciesListResultItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessPoliciesListResultItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessPoliciesListResultItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessPoliciesListResultItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessPoliciesListResultItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessPoliciesListResultItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessPoliciesListResultItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessPoliciesListResultItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessPoliciesListResultItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessPoliciesListResultItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessPoliciesListResultItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessPoliciesListResultItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessPoliciesListResultItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessPoliciesListResultItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessPoliciesListResultItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessPoliciesListResultItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessPoliciesListResultItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessPoliciesListResultItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessPoliciesListResultItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessPoliciesListResultItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessPoliciesListResultItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessPoliciesListResultItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessPoliciesListResultItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessPoliciesListResultItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessPoliciesListResultItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessPoliciesListResultItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessPoliciesListResultItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessPoliciesListResultItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessPoliciesListResultItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessPoliciesListResultItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesListResultItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessPoliciesListResultItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesListResultItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesListResultItemIncludeList = Array; export const AccessPoliciesListResultItemIncludeList = /*@__PURE__*/ S.Array( AccessPoliciesListResultItemIncludeItem, ) as any as S.Schema; export type AccessPoliciesListResultItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessPoliciesListResultItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessPoliciesListResultItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessPoliciesListResultItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessPoliciesListResultItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessPoliciesListResultItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessPoliciesListResultItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessPoliciesListResultItemMfaConfig = /*@__PURE__*/ S.suspend( () => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessPoliciesListResultItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessPoliciesListResultItemMfaConfig", }) as any as S.Schema; export type AccessPoliciesListResultItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessPoliciesListResultItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessPoliciesListResultItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessPoliciesListResultItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessPoliciesListResultItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessPoliciesListResultItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessPoliciesListResultItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessPoliciesListResultItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessPoliciesListResultItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessPoliciesListResultItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessPoliciesListResultItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessPoliciesListResultItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessPoliciesListResultItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessPoliciesListResultItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessPoliciesListResultItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessPoliciesListResultItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessPoliciesListResultItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessPoliciesListResultItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessPoliciesListResultItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessPoliciesListResultItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessPoliciesListResultItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessPoliciesListResultItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessPoliciesListResultItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessPoliciesListResultItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessPoliciesListResultItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessPoliciesListResultItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessPoliciesListResultItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessPoliciesListResultItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessPoliciesListResultItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessPoliciesListResultItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessPoliciesListResultItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessPoliciesListResultItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessPoliciesListResultItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessPoliciesListResultItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessPoliciesListResultItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessPoliciesListResultItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessPoliciesListResultItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessPoliciesListResultItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessPoliciesListResultItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessPoliciesListResultItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessPoliciesListResultItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessPoliciesListResultItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessPoliciesListResultItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessPoliciesListResultItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessPoliciesListResultItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessPoliciesListResultItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessPoliciesListResultItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessPoliciesListResultItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessPoliciesListResultItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessPoliciesListResultItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessPoliciesListResultItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesListResultItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessPoliciesListResultItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesListResultItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesListResultItemRequireList = Array; export const AccessPoliciesListResultItemRequireList = /*@__PURE__*/ S.Array( AccessPoliciesListResultItemRequireItem, ) as any as S.Schema; export interface AccessPoliciesListResultItem { /** The UUID of the policy */ id?: string | null; /** Number of access applications currently using this policy. */ appCount?: number | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessPoliciesListResultItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessPoliciesListResultItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessPoliciesListResultItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessPoliciesListResultItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessPoliciesListResultItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessPoliciesListResultItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessPoliciesListResultItemRequireList | null; reusable?: boolean | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessPoliciesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), appCount: S.optional(S.NullOr(S.Number).pipe(T.Body("app_count"))), approvalGroups: S.optional( S.NullOr(AccessPoliciesListResultItemApprovalGroupsList).pipe( T.Body("approval_groups"), ), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr(AccessPoliciesListResultItemConnectionRules).pipe( T.Body("connection_rules"), ), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional(S.NullOr(AccessPoliciesListResultItemDecision)), exclude: S.optional(S.NullOr(AccessPoliciesListResultItemExcludeList)), include: S.optional(S.NullOr(AccessPoliciesListResultItemIncludeList)), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr(AccessPoliciesListResultItemMfaConfig).pipe( T.Body("mfa_config"), ), ), name: S.optional(S.NullOr(S.String)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional(S.NullOr(AccessPoliciesListResultItemRequireList)), reusable: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessPoliciesListResultItem", }) as any as S.Schema; export type AccessPoliciesListResultList = Array; export const AccessPoliciesListResultList = /*@__PURE__*/ S.Array( AccessPoliciesListResultItem, ) as any as S.Schema; export interface ListAccessPoliciesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessPoliciesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessPoliciesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessPoliciesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessPoliciesResponse", }) as any as S.Schema; export interface ListAccessSamlCertificatesRequest { /** Identifier. */ accountId: string; /** Filter by SAML certificate set UID. Accepts a comma-separated list of UIDs. */ id?: string; /** Page number of paginated results. */ page?: number; /** Maximum number of results per page. */ perPage?: number; } export const ListAccessSamlCertificatesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.optional(S.String.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/saml_certificates", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessSamlCertificatesRequest", }) as any as S.Schema; export type AccessSamlCertificatesListResultItemCurrentCertificate = AccessSamlCertificatesGetResponseCurrentCertificate; export const AccessSamlCertificatesListResultItemCurrentCertificate = AccessSamlCertificatesGetResponseCurrentCertificate; export interface AccessSamlCertificatesListResultItem { /** When the certificate set was created */ createdAt: string; /** Unique identifier for the certificate set */ uid: string; /** When the certificate set was last updated */ updatedAt: string; /** The current active certificate */ currentCertificate?: AccessSamlCertificatesGetResponseCurrentCertificate | null; /** The previous certificate (maintained during rotation period). May be null when no rotation has occurred. Mirrors the structure of `saml_certificate`. */ previousCertificate?: unknown | null; } export const AccessSamlCertificatesListResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ createdAt: S.String.pipe(T.Body("created_at")), uid: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), currentCertificate: S.optional( S.NullOr(AccessSamlCertificatesGetResponseCurrentCertificate).pipe( T.Body("current_certificate"), ), ), previousCertificate: S.optional( S.NullOr(S.Unknown).pipe(T.Body("previous_certificate")), ), }), ).annotate({ identifier: "AccessSamlCertificatesListResultItem", }) as any as S.Schema; export type AccessSamlCertificatesListResultList = Array; export const AccessSamlCertificatesListResultList = /*@__PURE__*/ S.Array( AccessSamlCertificatesListResultItem, ) as any as S.Schema; export interface ListAccessSamlCertificatesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessSamlCertificatesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessSamlCertificatesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessSamlCertificatesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessSamlCertificatesResponse", }) as any as S.Schema; export interface ListAccessServiceTokensForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** The name of the service token. */ name?: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; /** Search for service tokens by other listed query parameters. */ search?: string; } export const ListAccessServiceTokensForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), name: S.optional(S.String.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), search: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/service_tokens", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessServiceTokensForAccountRequest", }) as any as S.Schema; export interface AccessServiceTokensListResultItem { /** The ID of the service token. */ id?: string | null; /** The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header. */ clientId?: string | null; /** The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h). */ duration?: string | null; expiresAt?: string | null; /** The name of the service token. */ name?: string | null; } export const AccessServiceTokensListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), duration: S.optional(S.NullOr(S.String)), expiresAt: S.optional(S.NullOr(S.String).pipe(T.Body("expires_at"))), name: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessServiceTokensListResultItem", }) as any as S.Schema; export type AccessServiceTokensListResultList = Array; export const AccessServiceTokensListResultList = /*@__PURE__*/ S.Array( AccessServiceTokensListResultItem, ) as any as S.Schema; export interface ListAccessServiceTokensResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessServiceTokensListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessServiceTokensResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessServiceTokensListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessServiceTokensResponse", }) as any as S.Schema; export interface ListAccessServiceTokensForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** The name of the service token. */ name?: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; /** Search for service tokens by other listed query parameters. */ search?: string; } export const ListAccessServiceTokensForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), name: S.optional(S.String.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), search: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/service_tokens", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessServiceTokensForZoneRequest", }) as any as S.Schema; export interface ListAccessTagsRequest { /** Identifier. */ accountId: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; } export const ListAccessTagsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/tags", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessTagsRequest", }) as any as S.Schema; export interface AccessTagsListResultItem { /** The name of the tag */ name: string; } export const AccessTagsListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.String, }), ).annotate({ identifier: "AccessTagsListResultItem", }) as any as S.Schema; export type AccessTagsListResultList = Array; export const AccessTagsListResultList = /*@__PURE__*/ S.Array( AccessTagsListResultItem, ) as any as S.Schema; export interface ListAccessTagsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessTagsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessTagsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessTagsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessTagsResponse", }) as any as S.Schema; export interface ListAccessUserActiveSessionsRequest { /** Identifier. */ accountId: string; /** UUID. */ userId: string; } export const ListAccessUserActiveSessionsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), userId: S.String.pipe(T.Label("user_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/users/{user_id}/active_sessions", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessUserActiveSessionsRequest", }) as any as S.Schema; export interface AccessUsersActiveSessionsListResultItemMetadataAppsValue { hostname?: string | null; name?: string | null; type?: string | null; uid?: string | null; } export const AccessUsersActiveSessionsListResultItemMetadataAppsValue = /*@__PURE__*/ S.suspend(() => S.Struct({ hostname: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(S.String)), uid: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessUsersActiveSessionsListResultItemMetadataAppsValue", }) as any as S.Schema; export type AccessUsersActiveSessionsListResultItemMetadataAppsMap = { [key: string]: | AccessUsersActiveSessionsListResultItemMetadataAppsValue | undefined; }; export const AccessUsersActiveSessionsListResultItemMetadataAppsMap = /*@__PURE__*/ S.Record( S.String, AccessUsersActiveSessionsListResultItemMetadataAppsValue, ) as any as S.Schema; export interface AccessUsersActiveSessionsListResultItemMetadata { apps?: AccessUsersActiveSessionsListResultItemMetadataAppsMap | null; expires?: number | null; iat?: number | null; nonce?: string | null; ttl?: number | null; } export const AccessUsersActiveSessionsListResultItemMetadata = /*@__PURE__*/ S.suspend(() => S.Struct({ apps: S.optional( S.NullOr(AccessUsersActiveSessionsListResultItemMetadataAppsMap), ), expires: S.optional(S.NullOr(S.Number)), iat: S.optional(S.NullOr(S.Number)), nonce: S.optional(S.NullOr(S.String)), ttl: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "AccessUsersActiveSessionsListResultItemMetadata", }) as any as S.Schema; export interface AccessUsersActiveSessionsListResultItem { expiration?: number | null; metadata?: AccessUsersActiveSessionsListResultItemMetadata | null; name?: string | null; } export const AccessUsersActiveSessionsListResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ expiration: S.optional(S.NullOr(S.Number)), metadata: S.optional( S.NullOr(AccessUsersActiveSessionsListResultItemMetadata), ), name: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessUsersActiveSessionsListResultItem", }) as any as S.Schema; export type AccessUsersActiveSessionsListResultList = Array; export const AccessUsersActiveSessionsListResultList = /*@__PURE__*/ S.Array( AccessUsersActiveSessionsListResultItem, ) as any as S.Schema; export interface ListAccessUserActiveSessionsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessUsersActiveSessionsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessUserActiveSessionsResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: AccessUsersActiveSessionsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessUserActiveSessionsResponse", }) as any as S.Schema; export interface ListAccessUserFailedLoginsRequest { /** Identifier. */ accountId: string; /** UUID. */ userId: string; } export const ListAccessUserFailedLoginsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), userId: S.String.pipe(T.Label("user_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/users/{user_id}/failed_logins", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessUserFailedLoginsRequest", }) as any as S.Schema; export interface AccessUsersFailedLoginsListResultItem { expiration?: number | null; metadata?: unknown | null; } export const AccessUsersFailedLoginsListResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ expiration: S.optional(S.NullOr(S.Number)), metadata: S.optional(S.NullOr(S.Unknown)), }), ).annotate({ identifier: "AccessUsersFailedLoginsListResultItem", }) as any as S.Schema; export type AccessUsersFailedLoginsListResultList = Array; export const AccessUsersFailedLoginsListResultList = /*@__PURE__*/ S.Array( AccessUsersFailedLoginsListResultItem, ) as any as S.Schema; export interface ListAccessUserFailedLoginsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessUsersFailedLoginsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessUserFailedLoginsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessUsersFailedLoginsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessUserFailedLoginsResponse", }) as any as S.Schema; export interface ListAccessUsersRequest { /** Identifier. */ accountId: string; /** The email of the user. */ email?: string; /** The name of the user. */ name?: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; /** Search for users by other listed query parameters. */ search?: string; } export const ListAccessUsersRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), email: S.optional(S.String.pipe(T.Query())), name: S.optional(S.String.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), search: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/users", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessUsersRequest", }) as any as S.Schema; export interface AccessUsersListResultItem { /** UUID. */ id?: string | null; /** True if the user has authenticated with Cloudflare Access. */ accessSeat?: boolean | null; /** The number of active devices registered to the user. */ activeDeviceCount?: number | null; createdAt?: string | null; /** The email of the user. */ email?: string | null; /** True if the user has logged into the WARP client. */ gatewaySeat?: boolean | null; /** The time at which the user last successfully logged in. */ lastSuccessfulLogin?: string | null; /** The name of the user. */ name?: string | null; /** The unique API identifier for the Zero Trust seat. */ seatUid?: string | null; /** The unique API identifier for the user. */ uid?: string | null; updatedAt?: string | null; } export const AccessUsersListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), accessSeat: S.optional(S.NullOr(S.Boolean).pipe(T.Body("access_seat"))), activeDeviceCount: S.optional( S.NullOr(S.Number).pipe(T.Body("active_device_count")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), email: S.optional(S.NullOr(S.String)), gatewaySeat: S.optional(S.NullOr(S.Boolean).pipe(T.Body("gateway_seat"))), lastSuccessfulLogin: S.optional( S.NullOr(S.String).pipe(T.Body("last_successful_login")), ), name: S.optional(S.NullOr(S.String)), seatUid: S.optional(S.NullOr(S.String).pipe(T.Body("seat_uid"))), uid: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessUsersListResultItem", }) as any as S.Schema; export type AccessUsersListResultList = Array; export const AccessUsersListResultList = /*@__PURE__*/ S.Array( AccessUsersListResultItem, ) as any as S.Schema; export interface ListAccessUsersResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessUsersListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListAccessUsersResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessUsersListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListAccessUsersResponse", }) as any as S.Schema; export interface ListCasbApplicationsRequest { accountId: string; /** Filter by supported environment (standard, fedramp). */ environment?: string; } export const ListCasbApplicationsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), environment: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/one/applications", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListCasbApplicationsRequest", }) as any as S.Schema; export interface ListCasbApplicationsResponseAuthMethodsItem { /** Human-readable auth method name. */ displayName: string; /** Auth method identifier. */ slug: string; } export const ListCasbApplicationsResponseAuthMethodsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ displayName: S.String.pipe(T.Body("display_name")), slug: S.String, }), ).annotate({ identifier: "ListCasbApplicationsResponseAuthMethodsItem", }) as any as S.Schema; export type ListCasbApplicationsResponseAuthMethodsList = Array; export const ListCasbApplicationsResponseAuthMethodsList = /*@__PURE__*/ S.Array( ListCasbApplicationsResponseAuthMethodsItem, ) as any as S.Schema; export type ListCasbApplicationsResponsePermissionsItemSeverity = | "low" | "medium" | "high" | "critical"; export const ListCasbApplicationsResponsePermissionsItemSeverity = /*@__PURE__*/ S.String; export interface ListCasbApplicationsResponsePermissionsItem { /** Human-readable permission name. */ displayName: string; /** Vendor-native scope identifier. */ scope: string; /** Permission sensitivity level. */ severity: ListCasbApplicationsResponsePermissionsItemSeverity; } export const ListCasbApplicationsResponsePermissionsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ displayName: S.String.pipe(T.Body("display_name")), scope: S.String, severity: ListCasbApplicationsResponsePermissionsItemSeverity, }), ).annotate({ identifier: "ListCasbApplicationsResponsePermissionsItem", }) as any as S.Schema; export type ListCasbApplicationsResponsePermissionsList = Array; export const ListCasbApplicationsResponsePermissionsList = /*@__PURE__*/ S.Array( ListCasbApplicationsResponsePermissionsItem, ) as any as S.Schema; export type ListCasbApplicationsResponseSlug = | "GITHUB" | "GOOGLE_WORKSPACE" | "MICROSOFT_INTERNAL" | "SALESFORCE" | "SLACK"; export const ListCasbApplicationsResponseSlug = /*@__PURE__*/ S.String; export type ListCasbApplicationsResponseSupportedEnvironmentsList = Array; export const ListCasbApplicationsResponseSupportedEnvironmentsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface ListCasbApplicationsResponseUseCasesItem { /** Human-readable use case name. */ displayName: string; /** Use case identifier (e.g. casb, ces). */ slug: string; } export const ListCasbApplicationsResponseUseCasesItem = /*@__PURE__*/ S.suspend( () => S.Struct({ displayName: S.String.pipe(T.Body("display_name")), slug: S.String, }), ).annotate({ identifier: "ListCasbApplicationsResponseUseCasesItem", }) as any as S.Schema; export type ListCasbApplicationsResponseUseCasesList = Array; export const ListCasbApplicationsResponseUseCasesList = /*@__PURE__*/ S.Array( ListCasbApplicationsResponseUseCasesItem, ) as any as S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface ListCasbApplicationsResponse { /** Available auth methods. */ authMethods: ListCasbApplicationsResponseAuthMethodsList; /** Vendor category (e.g. Productivity, AI). */ category: string; /** Brief description of the integration. */ description: string; /** Human-readable vendor name. */ displayName: string; /** Whether DLP scanning is supported. */ dlpEnabled: boolean; /** Logo path. */ logo: string; /** All permissions with severity. */ permissions: ListCasbApplicationsResponsePermissionsList; /** Vendor identifier (e.g. microsoft_internal, google_workspace). */ slug: ListCasbApplicationsResponseSlug; /** Environments this vendor supports (standard, fedramp). */ supportedEnvironments: ListCasbApplicationsResponseSupportedEnvironmentsList; /** Supported use cases. */ useCases: ListCasbApplicationsResponseUseCasesList; } export const ListCasbApplicationsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ authMethods: ListCasbApplicationsResponseAuthMethodsList.pipe( T.Body("auth_methods"), ), category: S.String, description: S.String, displayName: S.String.pipe(T.Body("display_name")), dlpEnabled: S.Boolean.pipe(T.Body("dlp_enabled")), logo: S.String, permissions: ListCasbApplicationsResponsePermissionsList, slug: ListCasbApplicationsResponseSlug, supportedEnvironments: ListCasbApplicationsResponseSupportedEnvironmentsList.pipe( T.Body("supported_environments"), ), useCases: ListCasbApplicationsResponseUseCasesList.pipe( T.Body("use_cases"), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListCasbApplicationsResponse", }) as any as S.Schema; export type ListCasbApplicationsSetupFlowsRequestEnvironment = | "fedramp" | "standard"; export const ListCasbApplicationsSetupFlowsRequestEnvironment = /*@__PURE__*/ S.String; export interface ListCasbApplicationsSetupFlowsRequest { accountId: string; slug: string; /** Filter by auth method slug. Get available slugs from GET /v2/applications. */ authMethod?: string; /** Filter by environment. */ environment?: | ListCasbApplicationsSetupFlowsRequestEnvironment | (string & {}); } export const ListCasbApplicationsSetupFlowsRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), slug: S.String.pipe(T.Label()), authMethod: S.optional(S.String.pipe(T.Query("auth_method"))), environment: S.optional( ListCasbApplicationsSetupFlowsRequestEnvironment.pipe(T.Query()), ), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/one/applications/{slug}/setup-flows", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListCasbApplicationsSetupFlowsRequest", }) as any as S.Schema; export type ListCasbApplicationsSetupFlowsResponseStepsItemType = | "component" | "instruction" | "form_input" | "oauth_redirect"; export const ListCasbApplicationsSetupFlowsResponseStepsItemType = /*@__PURE__*/ S.String; export type ListCasbApplicationsSetupFlowsResponseStepsItemDynamicContentItemType = | "copy_block" | "external_link"; export const ListCasbApplicationsSetupFlowsResponseStepsItemDynamicContentItemType = /*@__PURE__*/ S.String; export interface ListCasbApplicationsSetupFlowsResponseStepsItemDynamicContentItem { /** Display label. */ label: string; /** Content type. */ type: ListCasbApplicationsSetupFlowsResponseStepsItemDynamicContentItemType; /** URL template with {{ variable }} interpolation (for external_link). */ urlTemplate?: string | null; /** Field path to get value from (for copy_block). */ valueFrom?: string | null; } export const ListCasbApplicationsSetupFlowsResponseStepsItemDynamicContentItem = /*@__PURE__*/ S.suspend(() => S.Struct({ label: S.String, type: ListCasbApplicationsSetupFlowsResponseStepsItemDynamicContentItemType, urlTemplate: S.optional(S.NullOr(S.String).pipe(T.Body("url_template"))), valueFrom: S.optional(S.NullOr(S.String).pipe(T.Body("value_from"))), }), ).annotate({ identifier: "ListCasbApplicationsSetupFlowsResponseStepsItemDynamicContentItem", }) as any as S.Schema; export type ListCasbApplicationsSetupFlowsResponseStepsItemDynamicContentList = Array; export const ListCasbApplicationsSetupFlowsResponseStepsItemDynamicContentList = /*@__PURE__*/ S.Array( ListCasbApplicationsSetupFlowsResponseStepsItemDynamicContentItem, ) as any as S.Schema; export type ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsItemSupportedFileTypesList = Array; export const ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsItemSupportedFileTypesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsItemType = | "text" | "password" | "email" | "file_upload"; export const ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsItemType = /*@__PURE__*/ S.String; export interface ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsItem { /** Human-readable field label. */ label: string; /** Field identifier (maps to credentials key). */ name: string; /** Placeholder text. */ placeholder: string; /** Whether field is required. */ required: boolean; /** Allowed file extensions for file_upload type. */ supportedFileTypes: ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsItemSupportedFileTypesList; /** Field input type. */ type: ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsItemType; } export const ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ label: S.String, name: S.String, placeholder: S.String, required: S.Boolean, supportedFileTypes: ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsItemSupportedFileTypesList.pipe( T.Body("supported_file_types"), ), type: ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsItemType, }), ).annotate({ identifier: "ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsItem", }) as any as S.Schema; export type ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsList = Array; export const ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsList = /*@__PURE__*/ S.Array( ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsItem, ) as any as S.Schema; export type ListCasbApplicationsSetupFlowsResponseStepsItemParametersMap = { [key: string]: string | undefined; }; export const ListCasbApplicationsSetupFlowsResponseStepsItemParametersMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export interface ListCasbApplicationsSetupFlowsResponseStepsItem { /** Step type. */ type: ListCasbApplicationsSetupFlowsResponseStepsItemType; /** Component identifier (for component type). */ componentId?: string | null; /** Step description with markdown support. */ description?: string | null; /** Dynamic content blocks (for instruction/form_input). */ dynamicContent?: ListCasbApplicationsSetupFlowsResponseStepsItemDynamicContentList | null; /** Form fields (for form_input). */ formFields?: ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsList | null; /** Whether step is required (for form_input). */ isRequired?: boolean | null; /** Component parameters (for component type). */ parameters?: ListCasbApplicationsSetupFlowsResponseStepsItemParametersMap | null; /** Step title (for instruction/form_input/oauth_redirect). */ title?: string | null; } export const ListCasbApplicationsSetupFlowsResponseStepsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ type: ListCasbApplicationsSetupFlowsResponseStepsItemType, componentId: S.optional(S.NullOr(S.String).pipe(T.Body("component_id"))), description: S.optional(S.NullOr(S.String)), dynamicContent: S.optional( S.NullOr( ListCasbApplicationsSetupFlowsResponseStepsItemDynamicContentList, ).pipe(T.Body("dynamic_content")), ), formFields: S.optional( S.NullOr( ListCasbApplicationsSetupFlowsResponseStepsItemFormFieldsList, ).pipe(T.Body("form_fields")), ), isRequired: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_required"))), parameters: S.optional( S.NullOr(ListCasbApplicationsSetupFlowsResponseStepsItemParametersMap), ), title: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "ListCasbApplicationsSetupFlowsResponseStepsItem", }) as any as S.Schema; export type ListCasbApplicationsSetupFlowsResponseStepsList = Array; export const ListCasbApplicationsSetupFlowsResponseStepsList = /*@__PURE__*/ S.Array( ListCasbApplicationsSetupFlowsResponseStepsItem, ) as any as S.Schema; export type ListCasbApplicationsSetupFlowsResponseSupportedEnvironmentsList = Array; export const ListCasbApplicationsSetupFlowsResponseSupportedEnvironmentsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type ListCasbApplicationsSetupFlowsResponseAuthConfigScopesList = Array; export const ListCasbApplicationsSetupFlowsResponseAuthConfigScopesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type ListCasbApplicationsSetupFlowsResponseAuthConfigUrlPlaceholdersList = Array; export const ListCasbApplicationsSetupFlowsResponseAuthConfigUrlPlaceholdersList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface ListCasbApplicationsSetupFlowsResponseAuthConfig { /** Authorization URL for the requested environment. */ authorizationUrl: string; /** OAuth client ID. */ clientId: string; /** Whether PKCE is required. */ requiresPkce: boolean; /** OAuth scopes to request. */ scopes: ListCasbApplicationsSetupFlowsResponseAuthConfigScopesList; /** Placeholders in authorization URL that frontend must fill. */ urlPlaceholders: ListCasbApplicationsSetupFlowsResponseAuthConfigUrlPlaceholdersList; } export const ListCasbApplicationsSetupFlowsResponseAuthConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ authorizationUrl: S.String.pipe(T.Body("authorization_url")), clientId: S.String.pipe(T.Body("client_id")), requiresPkce: S.Boolean.pipe(T.Body("requires_pkce")), scopes: ListCasbApplicationsSetupFlowsResponseAuthConfigScopesList, urlPlaceholders: ListCasbApplicationsSetupFlowsResponseAuthConfigUrlPlaceholdersList.pipe( T.Body("url_placeholders"), ), }), ).annotate({ identifier: "ListCasbApplicationsSetupFlowsResponseAuthConfig", }) as any as S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface ListCasbApplicationsSetupFlowsResponse { /** Setup flow identifier. */ id: string; /** Whether this is the default auth method. */ default: boolean; /** Flow description. */ description: string; /** Human-readable flow name. */ name: string; /** Ordered list of setup steps. */ steps: ListCasbApplicationsSetupFlowsResponseStepsList; /** Environments this auth method supports (standard, fedramp). */ supportedEnvironments: ListCasbApplicationsSetupFlowsResponseSupportedEnvironmentsList; /** OAuth configuration (present for OAuth-based flows). */ authConfig?: ListCasbApplicationsSetupFlowsResponseAuthConfig | null; } export const ListCasbApplicationsSetupFlowsResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, default: S.Boolean, description: S.String, name: S.String, steps: ListCasbApplicationsSetupFlowsResponseStepsList, supportedEnvironments: ListCasbApplicationsSetupFlowsResponseSupportedEnvironmentsList.pipe( T.Body("supported_environments"), ), authConfig: S.optional( S.NullOr(ListCasbApplicationsSetupFlowsResponseAuthConfig).pipe( T.Body("auth_config"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListCasbApplicationsSetupFlowsResponse", }) as any as S.Schema; export type ListCasbIntegrationsRequestDirection = "asc" | "desc"; export const ListCasbIntegrationsRequestDirection = /*@__PURE__*/ S.String; export type ListCasbIntegrationsRequestOrder = | "application" | "created" | "name" | "status"; export const ListCasbIntegrationsRequestOrder = /*@__PURE__*/ S.String; export type ListCasbIntegrationsRequestStatus = | "Healthy" | "Initializing" | "Offline" | "Unhealthy"; export const ListCasbIntegrationsRequestStatus = /*@__PURE__*/ S.String; export interface ListCasbIntegrationsRequest { accountId: string; /** Filter by application/vendor (e.g., GOOGLE_WORKSPACE, MICROSOFT_INTERNAL). */ application?: string; /** Direction to order results. */ direction?: ListCasbIntegrationsRequestDirection | (string & {}); /** Filter by DLP enabled status (true/false). */ dlpEnabled?: boolean; /** Field to order results by. */ order?: ListCasbIntegrationsRequestOrder | (string & {}); /** Page number within the paginated result set. */ page?: number; /** Number of results per page. */ pageSize?: number; /** Search integrations by name or application. */ search?: string; /** Filter by integration status. */ status?: ListCasbIntegrationsRequestStatus | (string & {}); /** Filter by enabled use cases (e.g., casb, ces). Matches integrations enrolled in any of the specified values. Can be specified multiple times. */ useCases?: string; } export const ListCasbIntegrationsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), application: S.optional(S.String.pipe(T.Query())), direction: S.optional(ListCasbIntegrationsRequestDirection.pipe(T.Query())), dlpEnabled: S.optional(S.Boolean.pipe(T.Query("dlp_enabled"))), order: S.optional(ListCasbIntegrationsRequestOrder.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), pageSize: S.optional(S.Number.pipe(T.Query("page_size"))), search: S.optional(S.String.pipe(T.Query())), status: S.optional(ListCasbIntegrationsRequestStatus.pipe(T.Query())), useCases: S.optional(S.String.pipe(T.Query("use_cases"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/one/integrations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListCasbIntegrationsRequest", }) as any as S.Schema; export interface ListCasbIntegrationsResponse {} export const ListCasbIntegrationsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({}).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListCasbIntegrationsResponse", }) as any as S.Schema; export interface ListDeviceDeploymentGroupsRequest { accountId: string; /** The page number to return. */ page?: number; /** The maximum number of deployment groups to return per page. */ perPage?: number; } export const ListDeviceDeploymentGroupsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/deployment-groups", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDeviceDeploymentGroupsRequest", }) as any as S.Schema; export type DevicesDeploymentGroupsListResultItemVersionConfigItem = DevicesDeploymentGroupsCreateRequestVersionConfigItem; export const DevicesDeploymentGroupsListResultItemVersionConfigItem = DevicesDeploymentGroupsCreateRequestVersionConfigItem; export type DevicesDeploymentGroupsListResultItemVersionConfigList = Array; export const DevicesDeploymentGroupsListResultItemVersionConfigList = /*@__PURE__*/ S.Array( DevicesDeploymentGroupsCreateRequestVersionConfigItem, ) as any as S.Schema; export type DevicesDeploymentGroupsListResultItemPolicyIdsList = Array; export const DevicesDeploymentGroupsListResultItemPolicyIdsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesDeploymentGroupsListResultItem { /** The ID of the deployment group. */ id: string; /** The RFC3339Nano timestamp when the deployment group was created. */ createdAt: string; /** A user-friendly name for the deployment group. */ name: string; /** The RFC3339Nano timestamp when the deployment group was last updated. */ updatedAt: string; /** Contains version configurations for different target environments. */ versionConfig: DevicesDeploymentGroupsListResultItemVersionConfigList; /** Contains a list of policy IDs assigned to this deployment group. */ policyIds?: DevicesDeploymentGroupsListResultItemPolicyIdsList | null; } export const DevicesDeploymentGroupsListResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), versionConfig: DevicesDeploymentGroupsListResultItemVersionConfigList.pipe( T.Body("version_config"), ), policyIds: S.optional( S.NullOr(DevicesDeploymentGroupsListResultItemPolicyIdsList).pipe( T.Body("policy_ids"), ), ), }), ).annotate({ identifier: "DevicesDeploymentGroupsListResultItem", }) as any as S.Schema; export type DevicesDeploymentGroupsListResultList = Array; export const DevicesDeploymentGroupsListResultList = /*@__PURE__*/ S.Array( DevicesDeploymentGroupsListResultItem, ) as any as S.Schema; export interface ListDeviceDeploymentGroupsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesDeploymentGroupsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDeviceDeploymentGroupsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesDeploymentGroupsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDeviceDeploymentGroupsResponse", }) as any as S.Schema; export type DevicesDevicesListRequestIdList = Array; export const DevicesDevicesListRequestIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesDevicesListRequestActiveRegistrations = | "include" | "only" | "exclude"; export const DevicesDevicesListRequestActiveRegistrations = /*@__PURE__*/ S.String; export interface DevicesDevicesListRequestLastSeenUser { /** Filter by the last seen user's email. */ email?: string; } export const DevicesDevicesListRequestLastSeenUser = /*@__PURE__*/ S.suspend( () => S.Struct({ email: S.optional(S.String), }), ).annotate({ identifier: "DevicesDevicesListRequestLastSeenUser", }) as any as S.Schema; export type DevicesDevicesListRequestSortBy = | "name" | "id" | "client_version" | "last_seen_user.email" | "last_seen_at" | "active_registrations" | "created_at"; export const DevicesDevicesListRequestSortBy = /*@__PURE__*/ S.String; export type DevicesDevicesListRequestSortOrder = "asc" | "desc"; export const DevicesDevicesListRequestSortOrder = /*@__PURE__*/ S.String; export interface ListDeviceDevicesRequest { accountId: string; /** Filter by a one or more device IDs. */ id?: DevicesDevicesListRequestIdList; /** Include or exclude devices with active registrations. The default is "only" - return only devices with active registrations. */ activeRegistrations?: | DevicesDevicesListRequestActiveRegistrations | (string & {}); /** Opaque token indicating the starting position when requesting the next set of records. A cursor value can be obtained from the result_info.cursor field in the response. */ cursor?: string; /** Comma-separated list of additional information that should be included in the device response. Supported values are: "last_seen_registration.policy". */ include?: string; lastSeenUser?: DevicesDevicesListRequestLastSeenUser; /** The maximum number of devices to return in a single response. */ perPage?: number; /** Search by device details. */ search?: string; /** Filter by the last_seen timestamp - returns only devices last seen after this timestamp. */ seenAfter?: string; /** Filter by the last_seen timestamp - returns only devices last seen before this timestamp. */ seenBefore?: string; /** The device field to order results by. */ sortBy?: DevicesDevicesListRequestSortBy | (string & {}); /** Sort direction. */ sortOrder?: DevicesDevicesListRequestSortOrder | (string & {}); } export const ListDeviceDevicesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.optional(DevicesDevicesListRequestIdList.pipe(T.Query())), activeRegistrations: S.optional( DevicesDevicesListRequestActiveRegistrations.pipe( T.Query("active_registrations"), ), ), cursor: S.optional(S.String.pipe(T.Query())), include: S.optional(S.String.pipe(T.Query())), lastSeenUser: S.optional( DevicesDevicesListRequestLastSeenUser.pipe( T.Body("last_seen_user"), T.DeepQuery("last_seen_user"), ), ), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), search: S.optional(S.String.pipe(T.Query())), seenAfter: S.optional(S.String.pipe(T.Query("seen_after"))), seenBefore: S.optional(S.String.pipe(T.Query("seen_before"))), sortBy: S.optional( DevicesDevicesListRequestSortBy.pipe(T.Query("sort_by")), ), sortOrder: S.optional( DevicesDevicesListRequestSortOrder.pipe(T.Query("sort_order")), ), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/physical-devices", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDeviceDevicesRequest", }) as any as S.Schema; export type DevicesDevicesListResultItemLastSeenRegistrationPolicy = DevicesDevicesGetResponseLastSeenRegistrationPolicy; export const DevicesDevicesListResultItemLastSeenRegistrationPolicy = DevicesDevicesGetResponseLastSeenRegistrationPolicy; export type DevicesDevicesListResultItemLastSeenRegistration = DevicesDevicesGetResponseLastSeenRegistration; export const DevicesDevicesListResultItemLastSeenRegistration = DevicesDevicesGetResponseLastSeenRegistration; export type DevicesDevicesListResultItemLastSeenUser = DevicesGetResponseUser; export const DevicesDevicesListResultItemLastSeenUser = DevicesGetResponseUser; export interface DevicesDevicesListResultItem { /** The unique ID of the device. */ id: string; /** The number of active registrations for the device. Active registrations are those which haven't been revoked or deleted. */ activeRegistrations: number; /** The RFC3339 timestamp when the device was created. */ createdAt: string; /** The RFC3339 timestamp when the device was last seen. */ lastSeenAt: string; /** The name of the device. */ name: string; /** The RFC3339 timestamp when the device was last updated. */ updatedAt: string; /** Version of the WARP client. */ clientVersion?: string | null; /** The RFC3339 timestamp when the device was deleted. */ deletedAt?: string | null; /** The device operating system. */ deviceType?: string | null; /** A string that uniquely identifies the hardware or virtual machine (VM). */ hardwareId?: string | null; /** The last seen registration for the device. */ lastSeenRegistration?: DevicesDevicesGetResponseLastSeenRegistration | null; /** The last user to use the WARP device. */ lastSeenUser?: DevicesGetResponseUser | null; /** The device MAC address. */ macAddress?: string | null; /** The device manufacturer. */ manufacturer?: string | null; /** The model name of the device. */ model?: string | null; /** The device operating system version number. */ osVersion?: string | null; /** Additional operating system version details. For Windows, the UBR (Update Build Revision). For Mac or iOS, the Product Version Extra. For Linux, the distribution name and version. */ osVersionExtra?: string | null; /** **Deprecated**: IP information is provided by DEX - see https://developers.cloudflare.com/api/resources/zero_trust/subresources/dex/subresources/fleet_status/subresources/devices/methods/list/ */ publicIp?: string | null; /** The device serial number. */ serialNumber?: string | null; } export const DevicesDevicesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, activeRegistrations: S.Number.pipe(T.Body("active_registrations")), createdAt: S.String.pipe(T.Body("created_at")), lastSeenAt: S.String.pipe(T.Body("last_seen_at")), name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), clientVersion: S.optional( S.NullOr(S.String).pipe(T.Body("client_version")), ), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), deviceType: S.optional(S.NullOr(S.String).pipe(T.Body("device_type"))), hardwareId: S.optional(S.NullOr(S.String).pipe(T.Body("hardware_id"))), lastSeenRegistration: S.optional( S.NullOr(DevicesDevicesGetResponseLastSeenRegistration).pipe( T.Body("last_seen_registration"), ), ), lastSeenUser: S.optional( S.NullOr(DevicesGetResponseUser).pipe(T.Body("last_seen_user")), ), macAddress: S.optional(S.NullOr(S.String).pipe(T.Body("mac_address"))), manufacturer: S.optional(S.NullOr(S.String)), model: S.optional(S.NullOr(S.String)), osVersion: S.optional(S.NullOr(S.String).pipe(T.Body("os_version"))), osVersionExtra: S.optional( S.NullOr(S.String).pipe(T.Body("os_version_extra")), ), publicIp: S.optional(S.NullOr(S.String).pipe(T.Body("public_ip"))), serialNumber: S.optional(S.NullOr(S.String).pipe(T.Body("serial_number"))), }), ).annotate({ identifier: "DevicesDevicesListResultItem", }) as any as S.Schema; export type DevicesDevicesListResultList = Array; export const DevicesDevicesListResultList = /*@__PURE__*/ S.Array( DevicesDevicesListResultItem, ) as any as S.Schema; export interface ListDeviceDevicesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesDevicesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDeviceDevicesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesDevicesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDeviceDevicesResponse", }) as any as S.Schema; export type DevicesDexTestsListRequestKind = "http" | "traceroute"; export const DevicesDexTestsListRequestKind = /*@__PURE__*/ S.String; export interface ListDeviceDexTestsRequest { /** Unique identifier linked to an account. */ accountId: string; /** Filter by test type. */ kind?: DevicesDexTestsListRequestKind | (string & {}); /** Page number of paginated results. */ page?: number; /** Number of results per page. */ perPage?: number; /** Filter by test name. */ testName?: string; } export const ListDeviceDexTestsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), kind: S.optional(DevicesDexTestsListRequestKind.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), testName: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/devices/dex_tests", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDeviceDexTestsRequest", }) as any as S.Schema; export type DevicesDexTestsListResultItemDataKind = "http" | "traceroute"; export const DevicesDexTestsListResultItemDataKind = /*@__PURE__*/ S.String; export type DevicesDexTestsListResultItemDataMethod = "GET"; export const DevicesDexTestsListResultItemDataMethod = /*@__PURE__*/ S.String; export interface DevicesDexTestsListResultItemData { /** The desired endpoint to test. */ host: string; /** The type of test. */ kind: DevicesDexTestsListResultItemDataKind; /** The HTTP request method type. */ method?: DevicesDexTestsListResultItemDataMethod | null; } export const DevicesDexTestsListResultItemData = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.String, kind: DevicesDexTestsListResultItemDataKind, method: S.optional(S.NullOr(DevicesDexTestsListResultItemDataMethod)), }), ).annotate({ identifier: "DevicesDexTestsListResultItemData", }) as any as S.Schema; export type DevicesDexTestsListResultItemTargetPoliciesItem = DevicesDexTestsCreateResponseTargetPoliciesItem; export const DevicesDexTestsListResultItemTargetPoliciesItem = DevicesDexTestsCreateResponseTargetPoliciesItem; export type DevicesDexTestsListResultItemTargetPoliciesList = Array; export const DevicesDexTestsListResultItemTargetPoliciesList = /*@__PURE__*/ S.Array( DevicesDexTestsCreateResponseTargetPoliciesItem, ) as any as S.Schema; export interface DevicesDexTestsListResultItem { /** The configuration object which contains the details for the WARP client to conduct the test. */ data: DevicesDexTestsListResultItemData; /** Determines whether or not the test is active. */ enabled: boolean; /** How often the test will run. */ interval: string; /** The name of the DEX test. Must be unique. */ name: string; /** Additional details about the test. */ description?: string | null; /** DEX rules targeted by this test */ targetPolicies?: DevicesDexTestsListResultItemTargetPoliciesList | null; targeted?: boolean | null; /** The unique identifier for the test. */ testId?: string | null; } export const DevicesDexTestsListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ data: DevicesDexTestsListResultItemData, enabled: S.Boolean, interval: S.String, name: S.String, description: S.optional(S.NullOr(S.String)), targetPolicies: S.optional( S.NullOr(DevicesDexTestsListResultItemTargetPoliciesList).pipe( T.Body("target_policies"), ), ), targeted: S.optional(S.NullOr(S.Boolean)), testId: S.optional(S.NullOr(S.String).pipe(T.Body("test_id"))), }), ).annotate({ identifier: "DevicesDexTestsListResultItem", }) as any as S.Schema; export type DevicesDexTestsListResultList = Array; export const DevicesDexTestsListResultList = /*@__PURE__*/ S.Array( DevicesDexTestsListResultItem, ) as any as S.Schema; export interface ListDeviceDexTestsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesDexTestsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDeviceDexTestsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesDexTestsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDeviceDexTestsResponse", }) as any as S.Schema; export interface ListDeviceIpProfilesRequest { accountId: string; /** The page number to return. */ page?: number; /** The number of IP profiles to return per page. */ perPage?: number; } export const ListDeviceIpProfilesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/ip-profiles", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDeviceIpProfilesRequest", }) as any as S.Schema; export interface DevicesIpProfilesListResultItem { /** The ID of the Device IP profile. */ id: string; /** The RFC3339Nano timestamp when the Device IP profile was created. */ createdAt: string; /** An optional description of the Device IP profile. */ description: string; /** Whether the Device IP profile is enabled. */ enabled: boolean; /** The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes". */ match: string; /** A user-friendly name for the Device IP profile. */ name: string; /** The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field. */ precedence: number; /** The ID of the Subnet. */ subnetId: string; /** The RFC3339Nano timestamp when the Device IP profile was last updated. */ updatedAt: string; } export const DevicesIpProfilesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), description: S.String, enabled: S.Boolean, match: S.String, name: S.String, precedence: S.Number, subnetId: S.String.pipe(T.Body("subnet_id")), updatedAt: S.String.pipe(T.Body("updated_at")), }), ).annotate({ identifier: "DevicesIpProfilesListResultItem", }) as any as S.Schema; export type DevicesIpProfilesListResultList = Array; export const DevicesIpProfilesListResultList = /*@__PURE__*/ S.Array( DevicesIpProfilesListResultItem, ) as any as S.Schema; export interface ListDeviceIpProfilesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesIpProfilesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDeviceIpProfilesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesIpProfilesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDeviceIpProfilesResponse", }) as any as S.Schema; export interface ListDeviceNetworksRequest { accountId: string; } export const ListDeviceNetworksRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/networks", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDeviceNetworksRequest", }) as any as S.Schema; export type DevicesNetworksListResultItemConfig = DevicesNetworksCreateResponseConfig; export const DevicesNetworksListResultItemConfig = DevicesNetworksCreateResponseConfig; export type DevicesNetworksListResultItemType = "tls"; export const DevicesNetworksListResultItemType = /*@__PURE__*/ S.String; export interface DevicesNetworksListResultItem { /** The configuration object containing information for the WARP client to detect the managed network. */ config?: DevicesNetworksCreateResponseConfig | null; /** The name of the device managed network. This name must be unique. */ name?: string | null; /** API UUID. */ networkId?: string | null; /** The type of device managed network. */ type?: DevicesNetworksListResultItemType | null; } export const DevicesNetworksListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ config: S.optional(S.NullOr(DevicesNetworksCreateResponseConfig)), name: S.optional(S.NullOr(S.String)), networkId: S.optional(S.NullOr(S.String).pipe(T.Body("network_id"))), type: S.optional(S.NullOr(DevicesNetworksListResultItemType)), }), ).annotate({ identifier: "DevicesNetworksListResultItem", }) as any as S.Schema; export type DevicesNetworksListResultList = Array; export const DevicesNetworksListResultList = /*@__PURE__*/ S.Array( DevicesNetworksListResultItem, ) as any as S.Schema; export interface ListDeviceNetworksResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesNetworksListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDeviceNetworksResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesNetworksListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDeviceNetworksResponse", }) as any as S.Schema; export interface ListDeviceOverrideCodesRequest { accountId: string; /** Registration ID. Equal to Device ID except for accounts which enabled [multi-user mode](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/windows-multiuser/). */ deviceId: string; } export const ListDeviceOverrideCodesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), deviceId: S.String.pipe(T.Label("device_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/{device_id}/override_codes", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDeviceOverrideCodesRequest", }) as any as S.Schema; export type DevicesOverrideCodesListResultList = Array; export const DevicesOverrideCodesListResultList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export interface ListDeviceOverrideCodesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesOverrideCodesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDeviceOverrideCodesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesOverrideCodesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDeviceOverrideCodesResponse", }) as any as S.Schema; export interface ListDevicePolicyCustomsRequest { accountId: string; } export const ListDevicePolicyCustomsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/policies", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDevicePolicyCustomsRequest", }) as any as S.Schema; export type DevicesPoliciesCustomListResultItemDnsSearchSuffixesItem = DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem; export const DevicesPoliciesCustomListResultItemDnsSearchSuffixesItem = DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem; export type DevicesPoliciesCustomListResultItemDnsSearchSuffixesList = Array; export const DevicesPoliciesCustomListResultItemDnsSearchSuffixesList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem, ) as any as S.Schema; export type DevicesPoliciesCustomListResultItemExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export const DevicesPoliciesCustomListResultItemExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export type DevicesPoliciesCustomListResultItemExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomListResultItemExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export type DevicesPoliciesCustomListResultItemExcludeItem = | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomListResultItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomListResultItemExcludeList = Array; export const DevicesPoliciesCustomListResultItemExcludeList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomListResultItemExcludeItem, ) as any as S.Schema; export type DevicesPoliciesCustomListResultItemFallbackDomainsItemDnsServerList = Array; export const DevicesPoliciesCustomListResultItemFallbackDomainsItemDnsServerList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomListResultItemFallbackDomainsItem { /** The domain suffix to match when resolving locally. */ suffix: string; /** A description of the fallback domain, displayed in the client UI. */ description?: string | null; /** A list of IP addresses to handle domain resolution. */ dnsServer?: DevicesPoliciesCustomListResultItemFallbackDomainsItemDnsServerList | null; } export const DevicesPoliciesCustomListResultItemFallbackDomainsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ suffix: S.String, description: S.optional(S.NullOr(S.String)), dnsServer: S.optional( S.NullOr( DevicesPoliciesCustomListResultItemFallbackDomainsItemDnsServerList, ).pipe(T.Body("dns_server")), ), }), ).annotate({ identifier: "DevicesPoliciesCustomListResultItemFallbackDomainsItem", }) as any as S.Schema; export type DevicesPoliciesCustomListResultItemFallbackDomainsList = Array; export const DevicesPoliciesCustomListResultItemFallbackDomainsList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomListResultItemFallbackDomainsItem, ) as any as S.Schema; export type DevicesPoliciesCustomListResultItemGlobalAccelerationApiEndpointsList = Array; export const DevicesPoliciesCustomListResultItemGlobalAccelerationApiEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesCustomListResultItemGlobalAccelerationMasqueEndpointsList = Array; export const DevicesPoliciesCustomListResultItemGlobalAccelerationMasqueEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesCustomListResultItemGlobalAccelerationWireguardEndpointsList = Array; export const DevicesPoliciesCustomListResultItemGlobalAccelerationWireguardEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomListResultItemGlobalAcceleration { /** IP:port entries for the API endpoints. */ apiEndpoints: DevicesPoliciesCustomListResultItemGlobalAccelerationApiEndpointsList; /** Global acceleration settings are used only when "enabled". */ enabled: boolean; /** IP:port entries for the MASQUE tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ masqueEndpoints: DevicesPoliciesCustomListResultItemGlobalAccelerationMasqueEndpointsList; /** IP:port entries for the WireGuard tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ wireguardEndpoints: DevicesPoliciesCustomListResultItemGlobalAccelerationWireguardEndpointsList; } export const DevicesPoliciesCustomListResultItemGlobalAcceleration = /*@__PURE__*/ S.suspend(() => S.Struct({ apiEndpoints: DevicesPoliciesCustomListResultItemGlobalAccelerationApiEndpointsList.pipe( T.Body("api_endpoints"), ), enabled: S.Boolean, masqueEndpoints: DevicesPoliciesCustomListResultItemGlobalAccelerationMasqueEndpointsList.pipe( T.Body("masque_endpoints"), ), wireguardEndpoints: DevicesPoliciesCustomListResultItemGlobalAccelerationWireguardEndpointsList.pipe( T.Body("wireguard_endpoints"), ), }), ).annotate({ identifier: "DevicesPoliciesCustomListResultItemGlobalAcceleration", }) as any as S.Schema; export type DevicesPoliciesCustomListResultItemIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export const DevicesPoliciesCustomListResultItemIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export type DevicesPoliciesCustomListResultItemIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomListResultItemIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export type DevicesPoliciesCustomListResultItemIncludeItem = | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomListResultItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomListResultItemIncludeList = Array; export const DevicesPoliciesCustomListResultItemIncludeList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomListResultItemIncludeItem, ) as any as S.Schema; export type DevicesPoliciesCustomListResultItemServiceModeV2 = DevicesPoliciesCustomCreateResponseServiceModeV2; export const DevicesPoliciesCustomListResultItemServiceModeV2 = DevicesPoliciesCustomCreateResponseServiceModeV2; export type DevicesPoliciesCustomListResultItemTargetTestsItem = DevicesPoliciesCustomCreateResponseTargetTestsItem; export const DevicesPoliciesCustomListResultItemTargetTestsItem = DevicesPoliciesCustomCreateResponseTargetTestsItem; export type DevicesPoliciesCustomListResultItemTargetTestsList = Array; export const DevicesPoliciesCustomListResultItemTargetTestsList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateResponseTargetTestsItem, ) as any as S.Schema; export type DevicesPoliciesCustomListResultItemVirtualNetworksAllowedList = Array; export const DevicesPoliciesCustomListResultItemVirtualNetworksAllowedList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomListResultItemVirtualNetworks { /** List of virtual network IDs the device is allowed to access. When virtual_networks is set, at least one entry is required. */ allowed: DevicesPoliciesCustomListResultItemVirtualNetworksAllowedList; /** The default virtual network ID. Must be included in the `allowed` list. */ default: string; } export const DevicesPoliciesCustomListResultItemVirtualNetworks = /*@__PURE__*/ S.suspend(() => S.Struct({ allowed: DevicesPoliciesCustomListResultItemVirtualNetworksAllowedList, default: S.String, }), ).annotate({ identifier: "DevicesPoliciesCustomListResultItemVirtualNetworks", }) as any as S.Schema; export interface DevicesPoliciesCustomListResultItem { /** Whether to allow the user to switch WARP between modes. */ allowModeSwitch?: boolean | null; /** Whether to receive update notifications when a new version of the client is available. */ allowUpdates?: boolean | null; /** Whether to allow devices to leave the organization. */ allowedToLeave?: boolean | null; /** The amount of time in seconds to reconnect after having been disabled. */ autoConnect?: number | null; /** Turn on the captive portal after the specified amount of time. */ captivePortal?: number | null; /** Whether the policy is the default policy for an account. */ default?: boolean | null; /** A description of the policy. */ description?: string | null; /** If the `dns_server` field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to `true`. */ disableAutoFallback?: boolean | null; /** List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear. */ dnsSearchSuffixes?: DevicesPoliciesCustomListResultItemDnsSearchSuffixesList | null; /** Whether the policy will be applied to matching devices. */ enabled?: boolean | null; /** List of routes excluded in the WARP client's tunnel. */ exclude?: DevicesPoliciesCustomListResultItemExcludeList | null; /** Whether to add Microsoft IPs to Split Tunnel exclusions. */ excludeOfficeIps?: boolean | null; fallbackDomains?: DevicesPoliciesCustomListResultItemFallbackDomainsList | null; gatewayUniqueId?: string | null; /** Global Acceleration settings for China. When configured, WARP clients connect to the Global Accelerator addresses instead of the default ones. Please contact your account representative to enable this feature on your account. See https://developers.cloudflare.com/china-network/concepts/global-acceleration/. */ globalAcceleration?: DevicesPoliciesCustomListResultItemGlobalAcceleration | null; /** List of routes included in the WARP client's tunnel. */ include?: DevicesPoliciesCustomListResultItemIncludeList | null; /** The amount of time in minutes a user is allowed access to their LAN. A value of 0 will allow LAN access until the next WARP reconnection, such as a reboot or a laptop waking from sleep. Note that this field is omitted from the response if null or unset. */ lanAllowMinutes?: number | null; /** The size of the subnet for the local access network. Note that this field is omitted from the response if null or unset. */ lanAllowSubnetSize?: number | null; /** The wirefilter expression to match devices. Available values: "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.service_token_uuid", "identity.saml_attributes", "network", "os.name", "os.version". */ match?: string | null; /** The name of the device settings profile. */ name?: string | null; policyId?: string | null; /** The precedence of the policy. Lower values indicate higher precedence. Policies will be evaluated in ascending order of this field. */ precedence?: number | null; /** Determines if the operating system will register WARP's local interface IP with your on-premises DNS server. */ registerInterfaceIpWithDns?: boolean | null; /** Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only). */ sccmVpnBoundarySupport?: boolean | null; serviceModeV2?: DevicesPoliciesCustomCreateResponseServiceModeV2 | null; /** The URL to launch when the Send Feedback button is clicked. */ supportUrl?: string | null; /** Whether to allow the user to turn off the WARP switch and disconnect the client. */ switchLocked?: boolean | null; targetTests?: DevicesPoliciesCustomListResultItemTargetTestsList | null; /** Determines which tunnel protocol to use. */ tunnelProtocol?: string | null; /** Virtual network access settings for the device. */ virtualNetworks?: DevicesPoliciesCustomListResultItemVirtualNetworks | null; } export const DevicesPoliciesCustomListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ allowModeSwitch: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_mode_switch")), ), allowUpdates: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_updates"))), allowedToLeave: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allowed_to_leave")), ), autoConnect: S.optional(S.NullOr(S.Number).pipe(T.Body("auto_connect"))), captivePortal: S.optional( S.NullOr(S.Number).pipe(T.Body("captive_portal")), ), default: S.optional(S.NullOr(S.Boolean)), description: S.optional(S.NullOr(S.String)), disableAutoFallback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("disable_auto_fallback")), ), dnsSearchSuffixes: S.optional( S.NullOr(DevicesPoliciesCustomListResultItemDnsSearchSuffixesList).pipe( T.Body("dns_search_suffixes"), ), ), enabled: S.optional(S.NullOr(S.Boolean)), exclude: S.optional( S.NullOr(DevicesPoliciesCustomListResultItemExcludeList), ), excludeOfficeIps: S.optional( S.NullOr(S.Boolean).pipe(T.Body("exclude_office_ips")), ), fallbackDomains: S.optional( S.NullOr(DevicesPoliciesCustomListResultItemFallbackDomainsList).pipe( T.Body("fallback_domains"), ), ), gatewayUniqueId: S.optional( S.NullOr(S.String).pipe(T.Body("gateway_unique_id")), ), globalAcceleration: S.optional( S.NullOr(DevicesPoliciesCustomListResultItemGlobalAcceleration).pipe( T.Body("global_acceleration"), ), ), include: S.optional( S.NullOr(DevicesPoliciesCustomListResultItemIncludeList), ), lanAllowMinutes: S.optional( S.NullOr(S.Number).pipe(T.Body("lan_allow_minutes")), ), lanAllowSubnetSize: S.optional( S.NullOr(S.Number).pipe(T.Body("lan_allow_subnet_size")), ), match: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policyId: S.optional(S.NullOr(S.String).pipe(T.Body("policy_id"))), precedence: S.optional(S.NullOr(S.Number)), registerInterfaceIpWithDns: S.optional( S.NullOr(S.Boolean).pipe(T.Body("register_interface_ip_with_dns")), ), sccmVpnBoundarySupport: S.optional( S.NullOr(S.Boolean).pipe(T.Body("sccm_vpn_boundary_support")), ), serviceModeV2: S.optional( S.NullOr(DevicesPoliciesCustomCreateResponseServiceModeV2).pipe( T.Body("service_mode_v2"), ), ), supportUrl: S.optional(S.NullOr(S.String).pipe(T.Body("support_url"))), switchLocked: S.optional(S.NullOr(S.Boolean).pipe(T.Body("switch_locked"))), targetTests: S.optional( S.NullOr(DevicesPoliciesCustomListResultItemTargetTestsList).pipe( T.Body("target_tests"), ), ), tunnelProtocol: S.optional( S.NullOr(S.String).pipe(T.Body("tunnel_protocol")), ), virtualNetworks: S.optional( S.NullOr(DevicesPoliciesCustomListResultItemVirtualNetworks).pipe( T.Body("virtual_networks"), ), ), }), ).annotate({ identifier: "DevicesPoliciesCustomListResultItem", }) as any as S.Schema; export type DevicesPoliciesCustomListResultList = Array; export const DevicesPoliciesCustomListResultList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomListResultItem, ) as any as S.Schema; export interface ListDevicePolicyCustomsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPoliciesCustomListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDevicePolicyCustomsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesPoliciesCustomListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDevicePolicyCustomsResponse", }) as any as S.Schema; export interface ListDevicePostureIntegrationsRequest { accountId: string; } export const ListDevicePostureIntegrationsRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/posture/integration", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDevicePostureIntegrationsRequest", }) as any as S.Schema; export type DevicesPostureIntegrationsListResultItemConfig = DevicesPostureIntegrationsCreateResponseConfig; export const DevicesPostureIntegrationsListResultItemConfig = DevicesPostureIntegrationsCreateResponseConfig; export type DevicesPostureIntegrationsListResultItemType = | "workspace_one" | "crowdstrike_s2s" | "uptycs" | "intune" | "kolide" | "tanium_s2s" | "sentinelone_s2s" | "custom_s2s"; export const DevicesPostureIntegrationsListResultItemType = /*@__PURE__*/ S.String; export interface DevicesPostureIntegrationsListResultItem { /** API UUID. */ id?: string | null; /** The configuration object containing third-party integration information. */ config?: DevicesPostureIntegrationsCreateResponseConfig | null; /** The interval between each posture check with the third-party API. Use `m` for minutes (e.g. `5m`) and `h` for hours (e.g. `12h`). */ interval?: string | null; /** The name of the device posture integration. */ name?: string | null; /** The type of device posture integration. */ type?: DevicesPostureIntegrationsListResultItemType | null; } export const DevicesPostureIntegrationsListResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), config: S.optional( S.NullOr(DevicesPostureIntegrationsCreateResponseConfig), ), interval: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(DevicesPostureIntegrationsListResultItemType)), }), ).annotate({ identifier: "DevicesPostureIntegrationsListResultItem", }) as any as S.Schema; export type DevicesPostureIntegrationsListResultList = Array; export const DevicesPostureIntegrationsListResultList = /*@__PURE__*/ S.Array( DevicesPostureIntegrationsListResultItem, ) as any as S.Schema; export interface ListDevicePostureIntegrationsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPostureIntegrationsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDevicePostureIntegrationsResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: DevicesPostureIntegrationsListResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDevicePostureIntegrationsResponse", }) as any as S.Schema; export interface ListDevicePosturesRequest { accountId: string; } export const ListDevicePosturesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/posture", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDevicePosturesRequest", }) as any as S.Schema; export type DevicesPostureListResultItemInputFileInputOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureListResultItemInputFileInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemInputFileInput { /** Operating system. */ operatingSystem: DevicesPostureListResultItemInputFileInputOperatingSystem; /** File path. */ path: string; /** Whether or not file exists. */ exists?: boolean | null; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureListResultItemInputFileInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureListResultItemInputFileInputOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, exists: S.optional(S.NullOr(S.Boolean)), sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureListResultItemInputFileInput", }) as any as S.Schema; export type DevicesPostureListResultItemInputUniqueClientIDInputOperatingSystem = | "android" | "ios" | "chromeos"; export const DevicesPostureListResultItemInputUniqueClientIDInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemInputUniqueClientIDInput { /** List ID. */ id: string; /** Operating System. */ operatingSystem: DevicesPostureListResultItemInputUniqueClientIDInputOperatingSystem; } export const DevicesPostureListResultItemInputUniqueClientIDInput = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, operatingSystem: DevicesPostureListResultItemInputUniqueClientIDInputOperatingSystem.pipe( T.Body("operating_system"), ), }), ).annotate({ identifier: "DevicesPostureListResultItemInputUniqueClientIDInput", }) as any as S.Schema; export type DevicesPostureListResultItemInputDomainJoinedInputOperatingSystem = "windows"; export const DevicesPostureListResultItemInputDomainJoinedInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemInputDomainJoinedInput { /** Operating System. */ operatingSystem: DevicesPostureListResultItemInputDomainJoinedInputOperatingSystem; /** Domain. */ domain?: string | null; } export const DevicesPostureListResultItemInputDomainJoinedInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureListResultItemInputDomainJoinedInputOperatingSystem.pipe( T.Body("operating_system"), ), domain: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureListResultItemInputDomainJoinedInput", }) as any as S.Schema; export type DevicesPostureListResultItemInputOSVersionInputOperatingSystem = "windows"; export const DevicesPostureListResultItemInputOSVersionInputOperatingSystem = /*@__PURE__*/ S.String; export type DevicesPostureListResultItemInputOSVersionInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureListResultItemInputOSVersionInputOperator = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemInputOSVersionInput { /** Operating System. */ operatingSystem: DevicesPostureListResultItemInputOSVersionInputOperatingSystem; /** Operator. */ operator: DevicesPostureListResultItemInputOSVersionInputOperator; /** Version of OS. */ version: string; /** Operating System Distribution Name (linux only). */ osDistroName?: string | null; /** Version of OS Distribution (linux only). */ osDistroRevision?: string | null; /** Additional operating system version details. For Windows, the UBR (Update Build Revision). For Mac or iOS, the Product Version Extra. For Linux, the distribution name and version. */ osVersionExtra?: string | null; } export const DevicesPostureListResultItemInputOSVersionInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureListResultItemInputOSVersionInputOperatingSystem.pipe( T.Body("operating_system"), ), operator: DevicesPostureListResultItemInputOSVersionInputOperator, version: S.String, osDistroName: S.optional( S.NullOr(S.String).pipe(T.Body("os_distro_name")), ), osDistroRevision: S.optional( S.NullOr(S.String).pipe(T.Body("os_distro_revision")), ), osVersionExtra: S.optional( S.NullOr(S.String).pipe(T.Body("os_version_extra")), ), }), ).annotate({ identifier: "DevicesPostureListResultItemInputOSVersionInput", }) as any as S.Schema; export type DevicesPostureListResultItemInputFirewallInputOperatingSystem = | "windows" | "mac"; export const DevicesPostureListResultItemInputFirewallInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemInputFirewallInput { /** Enabled. */ enabled: boolean; /** Operating System. */ operatingSystem: DevicesPostureListResultItemInputFirewallInputOperatingSystem; } export const DevicesPostureListResultItemInputFirewallInput = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, operatingSystem: DevicesPostureListResultItemInputFirewallInputOperatingSystem.pipe( T.Body("operating_system"), ), }), ).annotate({ identifier: "DevicesPostureListResultItemInputFirewallInput", }) as any as S.Schema; export type DevicesPostureListResultItemInputSentineloneInputOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureListResultItemInputSentineloneInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemInputSentineloneInput { /** Operating system. */ operatingSystem: DevicesPostureListResultItemInputSentineloneInputOperatingSystem; /** File path. */ path: string; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureListResultItemInputSentineloneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureListResultItemInputSentineloneInputOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureListResultItemInputSentineloneInput", }) as any as S.Schema; export type DevicesPostureListResultItemInputTeamsDevicesCarbonblackInputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureListResultItemInputTeamsDevicesCarbonblackInputRequestOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemInputTeamsDevicesCarbonblackInputRequest { /** Operating system. */ operatingSystem: DevicesPostureListResultItemInputTeamsDevicesCarbonblackInputRequestOperatingSystem; /** File path. */ path: string; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureListResultItemInputTeamsDevicesCarbonblackInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureListResultItemInputTeamsDevicesCarbonblackInputRequestOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureListResultItemInputTeamsDevicesCarbonblackInputRequest", }) as any as S.Schema; export type DevicesPostureListResultItemInputTeamsDevicesAccessSerialNumberListInputRequest = DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest; export const DevicesPostureListResultItemInputTeamsDevicesAccessSerialNumberListInputRequest = DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest; export type DevicesPostureListResultItemInputDiskEncryptionInputCheckDisksList = Array; export const DevicesPostureListResultItemInputDiskEncryptionInputCheckDisksList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export interface DevicesPostureListResultItemInputDiskEncryptionInput { /** List of volume names to be checked for encryption. */ checkDisks?: DevicesPostureListResultItemInputDiskEncryptionInputCheckDisksList | null; /** Whether to check all disks for encryption. */ requireAll?: boolean | null; } export const DevicesPostureListResultItemInputDiskEncryptionInput = /*@__PURE__*/ S.suspend(() => S.Struct({ checkDisks: S.optional( S.NullOr( DevicesPostureListResultItemInputDiskEncryptionInputCheckDisksList, ), ), requireAll: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "DevicesPostureListResultItemInputDiskEncryptionInput", }) as any as S.Schema; export type DevicesPostureListResultItemInputTeamsDevicesApplicationInputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureListResultItemInputTeamsDevicesApplicationInputRequestOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemInputTeamsDevicesApplicationInputRequest { /** Operating system. */ operatingSystem: DevicesPostureListResultItemInputTeamsDevicesApplicationInputRequestOperatingSystem; /** Path for the application. */ path: string; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureListResultItemInputTeamsDevicesApplicationInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureListResultItemInputTeamsDevicesApplicationInputRequestOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureListResultItemInputTeamsDevicesApplicationInputRequest", }) as any as S.Schema; export type DevicesPostureListResultItemInputClientCertificateInput = DevicesPostureCreateRequestInputClientCertificateInput; export const DevicesPostureListResultItemInputClientCertificateInput = DevicesPostureCreateRequestInputClientCertificateInput; export type DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem = /*@__PURE__*/ S.String; export type DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem = | "clientAuth" | "emailProtection"; export const DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem = /*@__PURE__*/ S.String; export type DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList = Array; export const DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList = /*@__PURE__*/ S.Array( DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem, ) as any as S.Schema; export type DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList = Array; export const DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem = | "system" | "user"; export const DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem = /*@__PURE__*/ S.String; export type DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList = Array; export const DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList = /*@__PURE__*/ S.Array( DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem, ) as any as S.Schema; export interface DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocations { /** List of paths to check for client certificate on linux. */ paths?: DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList | null; /** List of trust stores to check for client certificate. */ trustStores?: DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList | null; } export const DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocations = /*@__PURE__*/ S.suspend(() => S.Struct({ paths: S.optional( S.NullOr( DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList, ), ), trustStores: S.optional( S.NullOr( DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList, ).pipe(T.Body("trust_stores")), ), }), ).annotate({ identifier: "DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocations", }) as any as S.Schema; export type DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList = Array; export const DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequest { /** UUID of Cloudflare managed certificate. */ certificateId: string; /** Confirm the certificate was not imported from another device. We recommend keeping this enabled unless the certificate was deployed without a private key. */ checkPrivateKey: boolean; /** Operating system. */ operatingSystem: DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem; /** Certificate Common Name. This may include one or more variables in the ${ } notation. Only ${serial_number} and ${hostname} are valid variables. */ cn?: string | null; /** List of values indicating purposes for which the certificate public key can be used. */ extendedKeyUsage?: DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList | null; locations?: DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocations | null; /** List of certificate Subject Alternative Names. */ subjectAlternativeNames?: DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList | null; } export const DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ certificateId: S.String.pipe(T.Body("certificate_id")), checkPrivateKey: S.Boolean.pipe(T.Body("check_private_key")), operatingSystem: DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem.pipe( T.Body("operating_system"), ), cn: S.optional(S.NullOr(S.String)), extendedKeyUsage: S.optional( S.NullOr( DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList, ).pipe(T.Body("extended_key_usage")), ), locations: S.optional( S.NullOr( DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestLocations, ), ), subjectAlternativeNames: S.optional( S.NullOr( DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList, ).pipe(T.Body("subject_alternative_names")), ), }), ).annotate({ identifier: "DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequest", }) as any as S.Schema; export type DevicesPostureListResultItemInputTeamsDevicesAntivirusInputRequest = DevicesPostureCreateResponseInputTeamsDevicesAntivirusInputRequest; export const DevicesPostureListResultItemInputTeamsDevicesAntivirusInputRequest = DevicesPostureCreateResponseInputTeamsDevicesAntivirusInputRequest; export type DevicesPostureListResultItemInputWorkspaceOneInputComplianceStatus = | "compliant" | "noncompliant" | "unknown"; export const DevicesPostureListResultItemInputWorkspaceOneInputComplianceStatus = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemInputWorkspaceOneInput { /** Compliance Status. */ complianceStatus: DevicesPostureListResultItemInputWorkspaceOneInputComplianceStatus; /** Posture Integration ID. */ connectionId: string; } export const DevicesPostureListResultItemInputWorkspaceOneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ complianceStatus: DevicesPostureListResultItemInputWorkspaceOneInputComplianceStatus.pipe( T.Body("compliance_status"), ), connectionId: S.String.pipe(T.Body("connection_id")), }), ).annotate({ identifier: "DevicesPostureListResultItemInputWorkspaceOneInput", }) as any as S.Schema; export type DevicesPostureListResultItemInputCrowdstrikeInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureListResultItemInputCrowdstrikeInputOperator = /*@__PURE__*/ S.String; export type DevicesPostureListResultItemInputCrowdstrikeInputState = | "online" | "offline" | "unknown"; export const DevicesPostureListResultItemInputCrowdstrikeInputState = /*@__PURE__*/ S.String; export type DevicesPostureListResultItemInputCrowdstrikeInputVersionOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureListResultItemInputCrowdstrikeInputVersionOperator = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemInputCrowdstrikeInput { /** Posture Integration ID. */ connectionId: string; /** For more details on last seen, please refer to the Crowdstrike documentation. */ lastSeen?: string | null; /** Operator. */ operator?: DevicesPostureListResultItemInputCrowdstrikeInputOperator | null; /** Os Version. */ os?: string | null; /** Overall. */ overall?: string | null; /** SensorConfig. */ sensorConfig?: string | null; /** For more details on state, please refer to the Crowdstrike documentation. */ state?: DevicesPostureListResultItemInputCrowdstrikeInputState | null; /** Version. */ version?: string | null; /** Version Operator. */ versionOperator?: DevicesPostureListResultItemInputCrowdstrikeInputVersionOperator | null; } export const DevicesPostureListResultItemInputCrowdstrikeInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), lastSeen: S.optional(S.NullOr(S.String).pipe(T.Body("last_seen"))), operator: S.optional( S.NullOr(DevicesPostureListResultItemInputCrowdstrikeInputOperator), ), os: S.optional(S.NullOr(S.String)), overall: S.optional(S.NullOr(S.String)), sensorConfig: S.optional( S.NullOr(S.String).pipe(T.Body("sensor_config")), ), state: S.optional( S.NullOr(DevicesPostureListResultItemInputCrowdstrikeInputState), ), version: S.optional(S.NullOr(S.String)), versionOperator: S.optional( S.NullOr( DevicesPostureListResultItemInputCrowdstrikeInputVersionOperator, ), ), }), ).annotate({ identifier: "DevicesPostureListResultItemInputCrowdstrikeInput", }) as any as S.Schema; export type DevicesPostureListResultItemInputIntuneInputComplianceStatus = | "compliant" | "noncompliant" | "unknown" | "notapplicable" | "ingraceperiod" | "error"; export const DevicesPostureListResultItemInputIntuneInputComplianceStatus = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemInputIntuneInput { /** Compliance Status. */ complianceStatus: DevicesPostureListResultItemInputIntuneInputComplianceStatus; /** Posture Integration ID. */ connectionId: string; } export const DevicesPostureListResultItemInputIntuneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ complianceStatus: DevicesPostureListResultItemInputIntuneInputComplianceStatus.pipe( T.Body("compliance_status"), ), connectionId: S.String.pipe(T.Body("connection_id")), }), ).annotate({ identifier: "DevicesPostureListResultItemInputIntuneInput", }) as any as S.Schema; export type DevicesPostureListResultItemInputKolideInputAuthStateItem = | "Good" | "Notified" | "Will Block" | "Blocked"; export const DevicesPostureListResultItemInputKolideInputAuthStateItem = /*@__PURE__*/ S.String; export type DevicesPostureListResultItemInputKolideInputAuthStateList = Array; export const DevicesPostureListResultItemInputKolideInputAuthStateList = /*@__PURE__*/ S.Array( DevicesPostureListResultItemInputKolideInputAuthStateItem, ) as any as S.Schema; export type DevicesPostureListResultItemInputKolideInputCountOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureListResultItemInputKolideInputCountOperator = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemInputKolideInput { /** Posture Integration ID. */ connectionId: string; /** The set of Kolide device authentication states that pass the posture check. Device must match one of the specified states. */ authState?: DevicesPostureListResultItemInputKolideInputAuthStateList | null; /** Count Operator. */ countOperator?: DevicesPostureListResultItemInputKolideInputCountOperator | null; /** The Number of Issues. */ issueCount?: string | null; } export const DevicesPostureListResultItemInputKolideInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), authState: S.optional( S.NullOr( DevicesPostureListResultItemInputKolideInputAuthStateList, ).pipe(T.Body("auth_state")), ), countOperator: S.optional( S.NullOr(DevicesPostureListResultItemInputKolideInputCountOperator), ), issueCount: S.optional(S.NullOr(S.String).pipe(T.Body("issue_count"))), }), ).annotate({ identifier: "DevicesPostureListResultItemInputKolideInput", }) as any as S.Schema; export type DevicesPostureListResultItemInputTaniumInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureListResultItemInputTaniumInputOperator = /*@__PURE__*/ S.String; export type DevicesPostureListResultItemInputTaniumInputRiskLevel = | "low" | "medium" | "high" | "critical"; export const DevicesPostureListResultItemInputTaniumInputRiskLevel = /*@__PURE__*/ S.String; export type DevicesPostureListResultItemInputTaniumInputScoreOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureListResultItemInputTaniumInputScoreOperator = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemInputTaniumInput { /** Posture Integration ID. */ connectionId: string; /** For more details on eid last seen, refer to the Tanium documentation. */ eidLastSeen?: string | null; /** Operator to evaluate risk_level or eid_last_seen. */ operator?: DevicesPostureListResultItemInputTaniumInputOperator | null; /** For more details on risk level, refer to the Tanium documentation. */ riskLevel?: DevicesPostureListResultItemInputTaniumInputRiskLevel | null; /** Score Operator. */ scoreOperator?: DevicesPostureListResultItemInputTaniumInputScoreOperator | null; /** For more details on total score, refer to the Tanium documentation. */ totalScore?: number | null; } export const DevicesPostureListResultItemInputTaniumInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), eidLastSeen: S.optional(S.NullOr(S.String).pipe(T.Body("eid_last_seen"))), operator: S.optional( S.NullOr(DevicesPostureListResultItemInputTaniumInputOperator), ), riskLevel: S.optional( S.NullOr(DevicesPostureListResultItemInputTaniumInputRiskLevel).pipe( T.Body("risk_level"), ), ), scoreOperator: S.optional( S.NullOr(DevicesPostureListResultItemInputTaniumInputScoreOperator), ), totalScore: S.optional(S.NullOr(S.Number).pipe(T.Body("total_score"))), }), ).annotate({ identifier: "DevicesPostureListResultItemInputTaniumInput", }) as any as S.Schema; export type DevicesPostureListResultItemInputSentineloneS2sInputNetworkStatus = | "connected" | "disconnected" | "disconnecting" | "connecting"; export const DevicesPostureListResultItemInputSentineloneS2sInputNetworkStatus = /*@__PURE__*/ S.String; export type DevicesPostureListResultItemInputSentineloneS2sInputOperationalState = | "na" | "partially_disabled" | "auto_fully_disabled" | "fully_disabled" | "auto_partially_disabled" | "disabled_error" | "db_corruption"; export const DevicesPostureListResultItemInputSentineloneS2sInputOperationalState = /*@__PURE__*/ S.String; export type DevicesPostureListResultItemInputSentineloneS2sInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureListResultItemInputSentineloneS2sInputOperator = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemInputSentineloneS2sInput { /** Posture Integration ID. */ connectionId: string; /** The Number of active threats. */ activeThreats?: number | null; /** Whether device is infected. */ infected?: boolean | null; /** Whether device is active. */ isActive?: boolean | null; /** Network status of device. */ networkStatus?: DevicesPostureListResultItemInputSentineloneS2sInputNetworkStatus | null; /** Agent operational state. */ operationalState?: DevicesPostureListResultItemInputSentineloneS2sInputOperationalState | null; /** Operator. */ operator?: DevicesPostureListResultItemInputSentineloneS2sInputOperator | null; } export const DevicesPostureListResultItemInputSentineloneS2sInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), activeThreats: S.optional( S.NullOr(S.Number).pipe(T.Body("active_threats")), ), infected: S.optional(S.NullOr(S.Boolean)), isActive: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_active"))), networkStatus: S.optional( S.NullOr( DevicesPostureListResultItemInputSentineloneS2sInputNetworkStatus, ).pipe(T.Body("network_status")), ), operationalState: S.optional( S.NullOr( DevicesPostureListResultItemInputSentineloneS2sInputOperationalState, ).pipe(T.Body("operational_state")), ), operator: S.optional( S.NullOr(DevicesPostureListResultItemInputSentineloneS2sInputOperator), ), }), ).annotate({ identifier: "DevicesPostureListResultItemInputSentineloneS2sInput", }) as any as S.Schema; export type DevicesPostureListResultItemInputTeamsDevicesCustomS2sInputRequestOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureListResultItemInputTeamsDevicesCustomS2sInputRequestOperator = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemInputTeamsDevicesCustomS2sInputRequest { /** Posture Integration ID. */ connectionId: string; /** Operator. */ operator: DevicesPostureListResultItemInputTeamsDevicesCustomS2sInputRequestOperator; /** A value between 0-100 assigned to devices set by the 3rd party posture provider. */ score: number; } export const DevicesPostureListResultItemInputTeamsDevicesCustomS2sInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), operator: DevicesPostureListResultItemInputTeamsDevicesCustomS2sInputRequestOperator, score: S.Number, }), ).annotate({ identifier: "DevicesPostureListResultItemInputTeamsDevicesCustomS2sInputRequest", }) as any as S.Schema; export type DevicesPostureListResultItemInput = | DevicesPostureListResultItemInputFileInput | DevicesPostureListResultItemInputUniqueClientIDInput | DevicesPostureListResultItemInputDomainJoinedInput | DevicesPostureListResultItemInputOSVersionInput | DevicesPostureListResultItemInputFirewallInput | DevicesPostureListResultItemInputSentineloneInput | DevicesPostureListResultItemInputTeamsDevicesCarbonblackInputRequest | DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest | DevicesPostureListResultItemInputDiskEncryptionInput | DevicesPostureListResultItemInputTeamsDevicesApplicationInputRequest | DevicesPostureCreateRequestInputClientCertificateInput | DevicesPostureListResultItemInputTeamsDevicesClientCertificateV2InputRequest | DevicesPostureCreateResponseInputTeamsDevicesAntivirusInputRequest | DevicesPostureListResultItemInputWorkspaceOneInput | DevicesPostureListResultItemInputCrowdstrikeInput | DevicesPostureListResultItemInputIntuneInput | DevicesPostureListResultItemInputKolideInput | DevicesPostureListResultItemInputTaniumInput | DevicesPostureListResultItemInputSentineloneS2sInput | DevicesPostureListResultItemInputTeamsDevicesCustomS2sInputRequest; export const DevicesPostureListResultItemInput = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["operatingSystem", "path", "exists", "sha256", "thumbprint"], ["id", "operatingSystem"], ["operatingSystem", "domain"], [ "operatingSystem", "operator", "version", "osDistroName", "osDistroRevision", "osVersionExtra", ], ["enabled", "operatingSystem"], ["operatingSystem", "path", "sha256", "thumbprint"], ["operatingSystem", "path", "sha256", "thumbprint"], ["id"], ["checkDisks", "requireAll"], ["operatingSystem", "path", "sha256", "thumbprint"], ["certificateId", "cn"], [ "certificateId", "checkPrivateKey", "operatingSystem", "cn", "extendedKeyUsage", "locations", "subjectAlternativeNames", ], ["updateWindowDays"], ["complianceStatus", "connectionId"], [ "connectionId", "lastSeen", "operator", "os", "overall", "sensorConfig", "state", "version", "versionOperator", ], ["complianceStatus", "connectionId"], ["connectionId", "authState", "countOperator", "issueCount"], [ "connectionId", "eidLastSeen", "operator", "riskLevel", "scoreOperator", "totalScore", ], [ "connectionId", "activeThreats", "infected", "isActive", "networkStatus", "operationalState", "operator", ], ["connectionId", "operator", "score"], ]), ); export type DevicesPostureListResultItemMatchItemPlatform = | "windows" | "mac" | "linux" | "android" | "ios" | "chromeos"; export const DevicesPostureListResultItemMatchItemPlatform = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItemMatchItem { platform?: DevicesPostureListResultItemMatchItemPlatform | null; } export const DevicesPostureListResultItemMatchItem = /*@__PURE__*/ S.suspend( () => S.Struct({ platform: S.optional( S.NullOr(DevicesPostureListResultItemMatchItemPlatform), ), }), ).annotate({ identifier: "DevicesPostureListResultItemMatchItem", }) as any as S.Schema; export type DevicesPostureListResultItemMatchList = Array; export const DevicesPostureListResultItemMatchList = /*@__PURE__*/ S.Array( DevicesPostureListResultItemMatchItem, ) as any as S.Schema; export type DevicesPostureListResultItemType = | "file" | "application" | "tanium" | "gateway" | "warp" | "disk_encryption" | "serial_number" | "sentinelone" | "carbonblack" | "firewall" | "os_version" | "domain_joined" | "client_certificate" | "client_certificate_v2" | "antivirus" | "unique_client_id" | "kolide" | "tanium_s2s" | "crowdstrike_s2s" | "intune" | "workspace_one" | "sentinelone_s2s" | "custom_s2s"; export const DevicesPostureListResultItemType = /*@__PURE__*/ S.String; export interface DevicesPostureListResultItem { /** API UUID. */ id?: string | null; /** The description of the device posture rule. */ description?: string | null; /** Sets the expiration time for a posture check result. If empty, the result remains valid until it is overwritten by new data from the WARP client. */ expiration?: string | null; /** The value to be checked against. */ input?: DevicesPostureListResultItemInput | null; /** The conditions that the client must match to run the rule. */ match?: DevicesPostureListResultItemMatchList | null; /** The name of the device posture rule. */ name?: string | null; /** Polling frequency for the WARP client posture check. Default: `5m` (poll every five minutes). Minimum: `1m`. */ schedule?: string | null; /** The type of device posture rule. */ type?: DevicesPostureListResultItemType | null; } export const DevicesPostureListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), description: S.optional(S.NullOr(S.String)), expiration: S.optional(S.NullOr(S.String)), input: S.optional(S.NullOr(DevicesPostureListResultItemInput)), match: S.optional(S.NullOr(DevicesPostureListResultItemMatchList)), name: S.optional(S.NullOr(S.String)), schedule: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(DevicesPostureListResultItemType)), }), ).annotate({ identifier: "DevicesPostureListResultItem", }) as any as S.Schema; export type DevicesPostureListResultList = Array; export const DevicesPostureListResultList = /*@__PURE__*/ S.Array( DevicesPostureListResultItem, ) as any as S.Schema; export interface ListDevicePosturesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPostureListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDevicePosturesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesPostureListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDevicePosturesResponse", }) as any as S.Schema; export type DevicesRegistrationsListRequestIdList = Array; export const DevicesRegistrationsListRequestIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesRegistrationsListRequestDevice { /** Filter by WARP device ID. */ id?: string; } export const DevicesRegistrationsListRequestDevice = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.String), }), ).annotate({ identifier: "DevicesRegistrationsListRequestDevice", }) as any as S.Schema; export type DevicesRegistrationsListRequestSortBy = | "id" | "user.name" | "user.email" | "last_seen_at" | "created_at"; export const DevicesRegistrationsListRequestSortBy = /*@__PURE__*/ S.String; export type DevicesRegistrationsListRequestSortOrder = "asc" | "desc"; export const DevicesRegistrationsListRequestSortOrder = /*@__PURE__*/ S.String; export type DevicesRegistrationsListRequestStatus = | "active" | "all" | "revoked"; export const DevicesRegistrationsListRequestStatus = /*@__PURE__*/ S.String; export type DevicesRegistrationsListRequestUserIdList = Array; export const DevicesRegistrationsListRequestUserIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesRegistrationsListRequestUser { /** Filter by user ID. */ id?: DevicesRegistrationsListRequestUserIdList; } export const DevicesRegistrationsListRequestUser = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(DevicesRegistrationsListRequestUserIdList), }), ).annotate({ identifier: "DevicesRegistrationsListRequestUser", }) as any as S.Schema; export interface ListDeviceRegistrationsRequest { accountId: string; /** Filter by registration ID. */ id?: DevicesRegistrationsListRequestIdList; /** Opaque token indicating the starting position when requesting the next set of records. A cursor value can be obtained from the result_info.cursor field in the response. */ cursor?: string; device?: DevicesRegistrationsListRequestDevice; /** Comma-separated list of additional information that should be included in the registration response. Supported values are: "policy". */ include?: string; /** The maximum number of devices to return in a single response. */ perPage?: number; /** Filter by registration details. */ search?: string; /** Filter by the last_seen timestamp - returns only registrations last seen after this timestamp. */ seenAfter?: string; /** Filter by the last_seen timestamp - returns only registrations last seen before this timestamp. */ seenBefore?: string; /** The registration field to order results by. */ sortBy?: DevicesRegistrationsListRequestSortBy | (string & {}); /** Sort direction. */ sortOrder?: DevicesRegistrationsListRequestSortOrder | (string & {}); /** Filter by registration status. Defaults to 'active'. */ status?: DevicesRegistrationsListRequestStatus | (string & {}); user?: DevicesRegistrationsListRequestUser; } export const ListDeviceRegistrationsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.optional(DevicesRegistrationsListRequestIdList.pipe(T.Query())), cursor: S.optional(S.String.pipe(T.Query())), device: S.optional( DevicesRegistrationsListRequestDevice.pipe(T.DeepQuery("device")), ), include: S.optional(S.String.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), search: S.optional(S.String.pipe(T.Query())), seenAfter: S.optional(S.String.pipe(T.Query("seen_after"))), seenBefore: S.optional(S.String.pipe(T.Query("seen_before"))), sortBy: S.optional( DevicesRegistrationsListRequestSortBy.pipe(T.Query("sort_by")), ), sortOrder: S.optional( DevicesRegistrationsListRequestSortOrder.pipe(T.Query("sort_order")), ), status: S.optional(DevicesRegistrationsListRequestStatus.pipe(T.Query())), user: S.optional( DevicesRegistrationsListRequestUser.pipe(T.DeepQuery("user")), ), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices/registrations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDeviceRegistrationsRequest", }) as any as S.Schema; export type DevicesRegistrationsListResultItemDevice = DevicesRegistrationsGetResponseDevice; export const DevicesRegistrationsListResultItemDevice = DevicesRegistrationsGetResponseDevice; export type DevicesRegistrationsListResultItemPolicy = DevicesDevicesGetResponseLastSeenRegistrationPolicy; export const DevicesRegistrationsListResultItemPolicy = DevicesDevicesGetResponseLastSeenRegistrationPolicy; export type DevicesRegistrationsListResultItemUser = DevicesGetResponseUser; export const DevicesRegistrationsListResultItemUser = DevicesGetResponseUser; export interface DevicesRegistrationsListResultItem { /** The ID of the registration. */ id: string; /** The RFC3339 timestamp when the registration was created. */ createdAt: string; /** Device details embedded inside of a registration. */ device: DevicesRegistrationsGetResponseDevice; /** The public key used to connect to the Cloudflare network. */ key: string; /** The RFC3339 timestamp when the registration was last seen. */ lastSeenAt: string; /** The RFC3339 timestamp when the registration was last updated. */ updatedAt: string; /** The RFC3339 timestamp when the registration was deleted. */ deletedAt?: string | null; /** The type of encryption key used by the WARP client for the active key. Currently 'curve25519' for WireGuard and 'secp256r1' for MASQUE. */ keyType?: string | null; /** The device settings profile assigned to this registration. */ policy?: DevicesDevicesGetResponseLastSeenRegistrationPolicy | null; /** The RFC3339 timestamp when the registration was revoked. */ revokedAt?: string | null; /** Type of the tunnel - wireguard or masque. */ tunnelType?: string | null; user?: DevicesGetResponseUser | null; /** The virtual IPv4 address assigned to the network interface of the tunnel for this registration. */ virtualIpv4?: string | null; /** The virtual IPv6 address assigned to the network interface of the tunnel for this registration. */ virtualIpv6?: string | null; } export const DevicesRegistrationsListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), device: DevicesRegistrationsGetResponseDevice, key: S.String, lastSeenAt: S.String.pipe(T.Body("last_seen_at")), updatedAt: S.String.pipe(T.Body("updated_at")), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), keyType: S.optional(S.NullOr(S.String).pipe(T.Body("key_type"))), policy: S.optional( S.NullOr(DevicesDevicesGetResponseLastSeenRegistrationPolicy), ), revokedAt: S.optional(S.NullOr(S.String).pipe(T.Body("revoked_at"))), tunnelType: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_type"))), user: S.optional(S.NullOr(DevicesGetResponseUser)), virtualIpv4: S.optional(S.NullOr(S.String).pipe(T.Body("virtual_ipv4"))), virtualIpv6: S.optional(S.NullOr(S.String).pipe(T.Body("virtual_ipv6"))), }), ).annotate({ identifier: "DevicesRegistrationsListResultItem", }) as any as S.Schema; export type DevicesRegistrationsListResultList = Array; export const DevicesRegistrationsListResultList = /*@__PURE__*/ S.Array( DevicesRegistrationsListResultItem, ) as any as S.Schema; export interface ListDeviceRegistrationsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesRegistrationsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDeviceRegistrationsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesRegistrationsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDeviceRegistrationsResponse", }) as any as S.Schema; export interface ListDevicesRequest { accountId: string; } export const ListDevicesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/devices", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDevicesRequest", }) as any as S.Schema; export type DevicesListResultItemDeviceType = | "windows" | "mac" | "linux" | "android" | "ios" | "chromeos"; export const DevicesListResultItemDeviceType = /*@__PURE__*/ S.String; export type DevicesListResultItemUser = DevicesGetResponseUser; export const DevicesListResultItemUser = DevicesGetResponseUser; export interface DevicesListResultItem { /** Registration ID. Equal to Device ID except for accounts which enabled [multi-user mode](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/windows-multiuser/). */ id?: string | null; /** When the device was created. */ created?: string | null; /** True if the device was deleted. */ deleted?: boolean | null; deviceType?: DevicesListResultItemDeviceType | null; /** IPv4 or IPv6 address. */ ip?: string | null; /** The device's public key. */ key?: string | null; /** When the device last connected to Cloudflare services. */ lastSeen?: string | null; /** The device mac address. */ macAddress?: string | null; /** The device manufacturer name. */ manufacturer?: string | null; /** The device model name. */ model?: string | null; /** The device name. */ name?: string | null; /** The Linux distro name. */ osDistroName?: string | null; /** The Linux distro revision. */ osDistroRevision?: string | null; /** The operating system version. */ osVersion?: string | null; /** Additional operating system version details. For Windows, the UBR (Update Build Revision). For Mac or iOS, the Product Version Extra. For Linux, the distribution name and version. */ osVersionExtra?: string | null; /** When the device was revoked. */ revokedAt?: string | null; /** The device serial number. */ serialNumber?: string | null; /** When the device was updated. */ updated?: string | null; user?: DevicesGetResponseUser | null; /** The WARP client version. */ version?: string | null; } export const DevicesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), created: S.optional(S.NullOr(S.String)), deleted: S.optional(S.NullOr(S.Boolean)), deviceType: S.optional( S.NullOr(DevicesListResultItemDeviceType).pipe(T.Body("device_type")), ), ip: S.optional(S.NullOr(S.String)), key: S.optional(S.NullOr(S.String)), lastSeen: S.optional(S.NullOr(S.String).pipe(T.Body("last_seen"))), macAddress: S.optional(S.NullOr(S.String).pipe(T.Body("mac_address"))), manufacturer: S.optional(S.NullOr(S.String)), model: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), osDistroName: S.optional(S.NullOr(S.String).pipe(T.Body("os_distro_name"))), osDistroRevision: S.optional( S.NullOr(S.String).pipe(T.Body("os_distro_revision")), ), osVersion: S.optional(S.NullOr(S.String).pipe(T.Body("os_version"))), osVersionExtra: S.optional( S.NullOr(S.String).pipe(T.Body("os_version_extra")), ), revokedAt: S.optional(S.NullOr(S.String).pipe(T.Body("revoked_at"))), serialNumber: S.optional(S.NullOr(S.String).pipe(T.Body("serial_number"))), updated: S.optional(S.NullOr(S.String)), user: S.optional(S.NullOr(DevicesGetResponseUser)), version: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesListResultItem", }) as any as S.Schema; export type DevicesListResultList = Array; export const DevicesListResultList = /*@__PURE__*/ S.Array( DevicesListResultItem, ) as any as S.Schema; export interface ListDevicesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDevicesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDevicesResponse", }) as any as S.Schema; export type DexColosListRequestSortBy = | "fleet-status-usage" | "application-tests-usage"; export const DexColosListRequestSortBy = /*@__PURE__*/ S.String; export interface ListDexColosRequest { /** Unique identifier linked to an account. */ accountId: string; /** Start time for connection period in ISO (RFC3339 - ISO 8601) format. */ from: string; /** End time for connection period in ISO (RFC3339 - ISO 8601) format. */ to: string; /** Type of usage that colos should be sorted by. If unspecified, returns all Cloudflare colos sorted alphabetically. */ sortBy?: DexColosListRequestSortBy | (string & {}); } export const ListDexColosRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), from: S.String.pipe(T.Query()), to: S.String.pipe(T.Query()), sortBy: S.optional(DexColosListRequestSortBy.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/colos", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexColosRequest", }) as any as S.Schema; export interface DexColosListResultItem { /** Airport code */ airportCode: string; /** City */ city: string; /** Country code */ countryCode: string; } export const DexColosListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ airportCode: S.String, city: S.String, countryCode: S.String, }), ).annotate({ identifier: "DexColosListResultItem", }) as any as S.Schema; export type DexColosListResultList = Array; export const DexColosListResultList = /*@__PURE__*/ S.Array( DexColosListResultItem, ) as any as S.Schema; export interface ListDexColosResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DexColosListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDexColosResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DexColosListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexColosResponse", }) as any as S.Schema; export interface ListDexCommandDevicesRequest { /** Unique identifier linked to an account. */ accountId: string; /** Page number of paginated results. */ page: number; /** Number of results per page. */ perPage: number; /** Filter devices by name or email. */ search?: string; } export const ListDexCommandDevicesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), page: S.Number.pipe(T.Query()), perPage: S.Number.pipe(T.Query("per_page")), search: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/commands/devices", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexCommandDevicesRequest", }) as any as S.Schema; export interface DexCommandsDevicesListResponseDevicesItem { /** Device identifier (UUID v4) */ deviceId?: string | null; /** Device identifier (human readable) */ deviceName?: string | null; /** Whether the device is eligible for remote captures */ eligible?: boolean | null; /** If the device is not eligible, the reason why. */ ineligibleReason?: string | null; /** User contact email address */ personEmail?: string | null; /** Operating system. */ platform?: string | null; /** Device registration identifier (UUID v4). On multi-user devices, this uniquely identifies a user's registration on the device. */ registrationId?: string | null; /** Network status. */ status?: string | null; timestamp?: string | null; /** WARP client version. */ version?: string | null; } export const DexCommandsDevicesListResponseDevicesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ deviceId: S.optional(S.NullOr(S.String)), deviceName: S.optional(S.NullOr(S.String)), eligible: S.optional(S.NullOr(S.Boolean)), ineligibleReason: S.optional(S.NullOr(S.String)), personEmail: S.optional(S.NullOr(S.String)), platform: S.optional(S.NullOr(S.String)), registrationId: S.optional(S.NullOr(S.String)), status: S.optional(S.NullOr(S.String)), timestamp: S.optional(S.NullOr(S.String)), version: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DexCommandsDevicesListResponseDevicesItem", }) as any as S.Schema; export type DexCommandsDevicesListResponseDevicesList = Array; export const DexCommandsDevicesListResponseDevicesList = /*@__PURE__*/ S.Array( DexCommandsDevicesListResponseDevicesItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ListDexCommandDevicesResponse { /** List of eligible devices */ devices?: DexCommandsDevicesListResponseDevicesList | null; } export const ListDexCommandDevicesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ devices: S.optional(S.NullOr(DexCommandsDevicesListResponseDevicesList)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexCommandDevicesResponse", }) as any as S.Schema; export type DexCommandsListRequestCommandType = | "pcap" | "speed-test" | "warp-diag"; export const DexCommandsListRequestCommandType = /*@__PURE__*/ S.String; export type DexCommandsListRequestStatus = | "PENDING_EXEC" | "PENDING_UPLOAD" | "SUCCESS" | "FAILED"; export const DexCommandsListRequestStatus = /*@__PURE__*/ S.String; export interface ListDexCommandsRequest { /** Unique identifier linked to an account. */ accountId: string; /** Page number of paginated results. */ page: number; /** Number of results per page. */ perPage: number; /** Optionally filter executed commands by command type. */ commandType?: DexCommandsListRequestCommandType | (string & {}); /** Unique identifier for a device. */ deviceId?: string; /** Start time for the query in ISO (RFC3339 - ISO 8601) format. */ from?: string; /** Optionally filter executed commands by status. */ status?: DexCommandsListRequestStatus | (string & {}); /** End time for the query in ISO (RFC3339 - ISO 8601) format. */ to?: string; /** Email tied to the device. */ userEmail?: string; } export const ListDexCommandsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), page: S.Number.pipe(T.Query()), perPage: S.Number.pipe(T.Query("per_page")), commandType: S.optional( DexCommandsListRequestCommandType.pipe(T.Query("command_type")), ), deviceId: S.optional(S.String.pipe(T.Query("device_id"))), from: S.optional(S.String.pipe(T.Query())), status: S.optional(DexCommandsListRequestStatus.pipe(T.Query())), to: S.optional(S.String.pipe(T.Query())), userEmail: S.optional(S.String.pipe(T.Query("user_email"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/commands", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexCommandsRequest", }) as any as S.Schema; export interface DexCommandsListResponseCommandsItem { id?: string | null; completedDate?: string | null; createdDate?: string | null; deviceId?: string | null; filename?: string | null; /** Unique identifier for the device registration */ registrationId?: string | null; status?: string | null; type?: string | null; userEmail?: string | null; } export const DexCommandsListResponseCommandsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), completedDate: S.optional( S.NullOr(S.String).pipe(T.Body("completed_date")), ), createdDate: S.optional(S.NullOr(S.String).pipe(T.Body("created_date"))), deviceId: S.optional(S.NullOr(S.String).pipe(T.Body("device_id"))), filename: S.optional(S.NullOr(S.String)), registrationId: S.optional( S.NullOr(S.String).pipe(T.Body("registration_id")), ), status: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(S.String)), userEmail: S.optional(S.NullOr(S.String).pipe(T.Body("user_email"))), }), ).annotate({ identifier: "DexCommandsListResponseCommandsItem", }) as any as S.Schema; export type DexCommandsListResponseCommandsList = Array; export const DexCommandsListResponseCommandsList = /*@__PURE__*/ S.Array( DexCommandsListResponseCommandsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ListDexCommandsResponse { commands?: DexCommandsListResponseCommandsList | null; } export const ListDexCommandsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ commands: S.optional(S.NullOr(DexCommandsListResponseCommandsList)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexCommandsResponse", }) as any as S.Schema; export type DexDevicesIspsListRequestSortBy = "time_start"; export const DexDevicesIspsListRequestSortBy = /*@__PURE__*/ S.String; export type DexDevicesIspsListRequestSortOrder = "ASC" | "DESC"; export const DexDevicesIspsListRequestSortOrder = /*@__PURE__*/ S.String; export interface ListDexDeviceIspsRequest { /** Unique identifier linked to an account. */ accountId: string; /** API Resource UUID tag. */ deviceId: string; /** Number of items per page */ perPage: number; /** Cursor for cursor-based pagination. Mutually exclusive with page. */ cursor?: string; /** Start time for the query in ISO 8601 format. */ from?: string; /** Page number of paginated results. Mutually exclusive with cursor. */ page?: number; /** The field to sort results by. */ sortBy?: DexDevicesIspsListRequestSortBy | (string & {}); /** The order to sort results. */ sortOrder?: DexDevicesIspsListRequestSortOrder | (string & {}); /** End time for the query in ISO 8601 format. */ to?: string; } export const ListDexDeviceIspsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), deviceId: S.String.pipe(T.Label("device_id")), perPage: S.Number.pipe(T.Query("per_page")), cursor: S.optional(S.String.pipe(T.Query())), from: S.optional(S.String.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), sortBy: S.optional( DexDevicesIspsListRequestSortBy.pipe(T.Query("sort_by")), ), sortOrder: S.optional( DexDevicesIspsListRequestSortOrder.pipe(T.Query("sort_order")), ), to: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/devices/{device_id}/isps", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexDeviceIspsRequest", }) as any as S.Schema; export interface DexDevicesIspsListResponseIspsItemIpLocation { /** City name. Returned as `"REDACTED"` without PII permission. */ city?: string | null; /** Country ISO code. Returned as `"REDACTED"` without PII permission. */ countryIso?: string | null; /** State/province ISO code. Returned as `"REDACTED"` without PII permission. */ stateIso?: string | null; /** ZIP/postal code. Returned as `"REDACTED"` without PII permission. */ zip?: string | null; } export const DexDevicesIspsListResponseIspsItemIpLocation = /*@__PURE__*/ S.suspend(() => S.Struct({ city: S.optional(S.NullOr(S.String)), countryIso: S.optional(S.NullOr(S.String).pipe(T.Body("country_iso"))), stateIso: S.optional(S.NullOr(S.String).pipe(T.Body("state_iso"))), zip: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DexDevicesIspsListResponseIspsItemIpLocation", }) as any as S.Schema; export interface DexDevicesIspsListResponseIspsItemIp { /** IP address. Returned as `"REDACTED"` without PII permission. */ address?: string | null; /** Autonomous System Number. */ asn?: number | null; /** Autonomous System Organization name. */ aso?: string | null; /** Geographic location information. All fields are returned as the literal string `"REDACTED"` for callers that do not have the PII permission. */ location?: DexDevicesIspsListResponseIspsItemIpLocation | null; /** Named IP address (reverse DNS hostname when available). Returned as `"REDACTED"` without PII permission. */ name?: string | null; /** Network mask. Returned as `"REDACTED"` without PII permission. */ netmask?: string | null; /** IP version (`1` for IPv4, `2` for IPv6, `0` if unknown). */ version?: number | null; } export const DexDevicesIspsListResponseIspsItemIp = /*@__PURE__*/ S.suspend( () => S.Struct({ address: S.optional(S.NullOr(S.String)), asn: S.optional(S.NullOr(S.Number)), aso: S.optional(S.NullOr(S.String)), location: S.optional( S.NullOr(DexDevicesIspsListResponseIspsItemIpLocation), ), name: S.optional(S.NullOr(S.String)), netmask: S.optional(S.NullOr(S.String)), version: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexDevicesIspsListResponseIspsItemIp", }) as any as S.Schema; export interface DexDevicesIspsListResponseIspsItem { /** The test that generated this result. */ testId: string; /** The specific test result. */ testResultId: string; /** Timestamp of when the ISP was observed. */ timeStart: string; /** IP address information for the ISP hop. Fields marked as PII-gated (`name`, `address`, `netmask`, and all `location` sub-fields) will be returned as the literal string `"REDACTED"` for callers that do not have the PII permission. `asn`, `aso`, and `version` are always returned regardless of PII access. */ ip?: DexDevicesIspsListResponseIspsItemIp | null; } export const DexDevicesIspsListResponseIspsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ testId: S.String.pipe(T.Body("test_id")), testResultId: S.String.pipe(T.Body("test_result_id")), timeStart: S.String.pipe(T.Body("time_start")), ip: S.optional(S.NullOr(DexDevicesIspsListResponseIspsItemIp)), }), ).annotate({ identifier: "DexDevicesIspsListResponseIspsItem", }) as any as S.Schema; export type DexDevicesIspsListResponseIspsList = Array; export const DexDevicesIspsListResponseIspsList = /*@__PURE__*/ S.Array( DexDevicesIspsListResponseIspsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ListDexDeviceIspsResponse { isps: DexDevicesIspsListResponseIspsList; } export const ListDexDeviceIspsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ isps: DexDevicesIspsListResponseIspsList, }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexDeviceIspsResponse", }) as any as S.Schema; export type DexFleetStatusDevicesListRequestSortBy = | "colo" | "device_id" | "mode" | "platform" | "status" | "timestamp" | "version"; export const DexFleetStatusDevicesListRequestSortBy = /*@__PURE__*/ S.String; export type DexFleetStatusDevicesListRequestSource = | "last_seen" | "hourly" | "raw"; export const DexFleetStatusDevicesListRequestSource = /*@__PURE__*/ S.String; export interface ListDexFleetStatusDevicesRequest { /** Unique identifier linked to an account. */ accountId: string; /** Start of the time range to query. Timestamp can be provided in ISO 8601 datetime format or milliseconds since epoch. */ from: string; /** Page number of paginated results. */ page: number; /** Number of results per page. */ perPage: number; /** End of the time range to query. Timestamp can be provided in ISO 8601 datetime format or milliseconds since epoch. */ to: string; /** Cloudflare colo airport code. */ colo?: string; /** Device-specific ID, given as UUID. */ deviceId?: string; /** The mode under which the WARP client is run. */ mode?: string; /** Operating system. */ platform?: string; /** Dimension to sort results by. */ sortBy?: DexFleetStatusDevicesListRequestSortBy | (string & {}); /** Source: */ source?: DexFleetStatusDevicesListRequestSource | (string & {}); /** Network status. */ status?: string; /** WARP client version. */ version?: string; } export const ListDexFleetStatusDevicesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), from: S.String.pipe(T.Query()), page: S.Number.pipe(T.Query()), perPage: S.Number.pipe(T.Query("per_page")), to: S.String.pipe(T.Query()), colo: S.optional(S.String.pipe(T.Query())), deviceId: S.optional(S.String.pipe(T.Query("device_id"))), mode: S.optional(S.String.pipe(T.Query())), platform: S.optional(S.String.pipe(T.Query())), sortBy: S.optional( DexFleetStatusDevicesListRequestSortBy.pipe(T.Query("sort_by")), ), source: S.optional(DexFleetStatusDevicesListRequestSource.pipe(T.Query())), status: S.optional(S.String.pipe(T.Query())), version: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/fleet-status/devices", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexFleetStatusDevicesRequest", }) as any as S.Schema; export type DexFleetStatusDevicesListResultItemCpuPctByAppItem = DevicesFleetStatusGetResponseCpuPctByAppItem; export const DexFleetStatusDevicesListResultItemCpuPctByAppItem = DevicesFleetStatusGetResponseCpuPctByAppItem; export type DexFleetStatusDevicesListResultItemCpuPctByAppList = Array; export const DexFleetStatusDevicesListResultItemCpuPctByAppList = /*@__PURE__*/ S.Array( DevicesFleetStatusGetResponseCpuPctByAppItem, ) as any as S.Schema; export type DexFleetStatusDevicesListResultItemDeviceIpv4Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export const DexFleetStatusDevicesListResultItemDeviceIpv4Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export type DexFleetStatusDevicesListResultItemDeviceIpv4 = DevicesFleetStatusGetResponseDeviceIpv4; export const DexFleetStatusDevicesListResultItemDeviceIpv4 = DevicesFleetStatusGetResponseDeviceIpv4; export type DexFleetStatusDevicesListResultItemDeviceIpv6Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export const DexFleetStatusDevicesListResultItemDeviceIpv6Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export type DexFleetStatusDevicesListResultItemDeviceIpv6 = DevicesFleetStatusGetResponseDeviceIpv4; export const DexFleetStatusDevicesListResultItemDeviceIpv6 = DevicesFleetStatusGetResponseDeviceIpv4; export type DexFleetStatusDevicesListResultItemGatewayIpv4Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export const DexFleetStatusDevicesListResultItemGatewayIpv4Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export type DexFleetStatusDevicesListResultItemGatewayIpv4 = DevicesFleetStatusGetResponseDeviceIpv4; export const DexFleetStatusDevicesListResultItemGatewayIpv4 = DevicesFleetStatusGetResponseDeviceIpv4; export type DexFleetStatusDevicesListResultItemGatewayIpv6Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export const DexFleetStatusDevicesListResultItemGatewayIpv6Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export type DexFleetStatusDevicesListResultItemGatewayIpv6 = DevicesFleetStatusGetResponseDeviceIpv4; export const DexFleetStatusDevicesListResultItemGatewayIpv6 = DevicesFleetStatusGetResponseDeviceIpv4; export type DexFleetStatusDevicesListResultItemIspIpv4Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export const DexFleetStatusDevicesListResultItemIspIpv4Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export type DexFleetStatusDevicesListResultItemIspIpv4 = DevicesFleetStatusGetResponseDeviceIpv4; export const DexFleetStatusDevicesListResultItemIspIpv4 = DevicesFleetStatusGetResponseDeviceIpv4; export type DexFleetStatusDevicesListResultItemIspIpv6Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export const DexFleetStatusDevicesListResultItemIspIpv6Location = DevicesFleetStatusGetResponseDeviceIpv4Location; export type DexFleetStatusDevicesListResultItemIspIpv6 = DevicesFleetStatusGetResponseDeviceIpv4; export const DexFleetStatusDevicesListResultItemIspIpv6 = DevicesFleetStatusGetResponseDeviceIpv4; export type DexFleetStatusDevicesListResultItemRamUsedPctByAppItem = DevicesFleetStatusGetResponseRamUsedPctByAppItem; export const DexFleetStatusDevicesListResultItemRamUsedPctByAppItem = DevicesFleetStatusGetResponseRamUsedPctByAppItem; export type DexFleetStatusDevicesListResultItemRamUsedPctByAppList = Array; export const DexFleetStatusDevicesListResultItemRamUsedPctByAppList = /*@__PURE__*/ S.Array( DevicesFleetStatusGetResponseRamUsedPctByAppItem, ) as any as S.Schema; export type DexFleetStatusDevicesListResultItemRttMinRttUs = DevicesFleetStatusGetResponseRttMinRttUs; export const DexFleetStatusDevicesListResultItemRttMinRttUs = DevicesFleetStatusGetResponseRttMinRttUs; export type DexFleetStatusDevicesListResultItemRttRttUs = DevicesFleetStatusGetResponseRttMinRttUs; export const DexFleetStatusDevicesListResultItemRttRttUs = DevicesFleetStatusGetResponseRttMinRttUs; export type DexFleetStatusDevicesListResultItemRttRttVarUs = DevicesFleetStatusGetResponseRttMinRttUs; export const DexFleetStatusDevicesListResultItemRttRttVarUs = DevicesFleetStatusGetResponseRttMinRttUs; export type DexFleetStatusDevicesListResultItemRtt = DevicesFleetStatusGetResponseRtt; export const DexFleetStatusDevicesListResultItemRtt = DevicesFleetStatusGetResponseRtt; export type DexFleetStatusDevicesListResultItemTunnelStatsBytesLost = DevicesFleetStatusGetResponseRttMinRttUs; export const DexFleetStatusDevicesListResultItemTunnelStatsBytesLost = DevicesFleetStatusGetResponseRttMinRttUs; export type DexFleetStatusDevicesListResultItemTunnelStatsBytesReceived = DevicesFleetStatusGetResponseRttMinRttUs; export const DexFleetStatusDevicesListResultItemTunnelStatsBytesReceived = DevicesFleetStatusGetResponseRttMinRttUs; export type DexFleetStatusDevicesListResultItemTunnelStatsBytesRetransmitted = DevicesFleetStatusGetResponseRttMinRttUs; export const DexFleetStatusDevicesListResultItemTunnelStatsBytesRetransmitted = DevicesFleetStatusGetResponseRttMinRttUs; export type DexFleetStatusDevicesListResultItemTunnelStatsBytesSent = DevicesFleetStatusGetResponseRttMinRttUs; export const DexFleetStatusDevicesListResultItemTunnelStatsBytesSent = DevicesFleetStatusGetResponseRttMinRttUs; export type DexFleetStatusDevicesListResultItemTunnelStatsPacketsLost = DevicesFleetStatusGetResponseRttMinRttUs; export const DexFleetStatusDevicesListResultItemTunnelStatsPacketsLost = DevicesFleetStatusGetResponseRttMinRttUs; export type DexFleetStatusDevicesListResultItemTunnelStatsPacketsReceived = DevicesFleetStatusGetResponseRttMinRttUs; export const DexFleetStatusDevicesListResultItemTunnelStatsPacketsReceived = DevicesFleetStatusGetResponseRttMinRttUs; export type DexFleetStatusDevicesListResultItemTunnelStatsPacketsRetransmitted = DevicesFleetStatusGetResponseRttMinRttUs; export const DexFleetStatusDevicesListResultItemTunnelStatsPacketsRetransmitted = DevicesFleetStatusGetResponseRttMinRttUs; export type DexFleetStatusDevicesListResultItemTunnelStatsPacketsSent = DevicesFleetStatusGetResponseRttMinRttUs; export const DexFleetStatusDevicesListResultItemTunnelStatsPacketsSent = DevicesFleetStatusGetResponseRttMinRttUs; export type DexFleetStatusDevicesListResultItemTunnelStats = DevicesFleetStatusGetResponseTunnelStats; export const DexFleetStatusDevicesListResultItemTunnelStats = DevicesFleetStatusGetResponseTunnelStats; export interface DexFleetStatusDevicesListResultItem { /** Cloudflare colo airport code. */ colo: string; /** Device identifier (UUID v4) */ deviceId: string; /** The mode under which the WARP client is run. */ mode: string; /** Operating system. */ platform: string; /** Network status. */ status: string; timestamp: string; /** WARP client version. */ version: string; alwaysOn?: boolean | null; batteryCharging?: boolean | null; batteryCycles?: number | null; batteryPct?: number | null; connectionType?: string | null; cpuPct?: number | null; cpuPctByApp?: DexFleetStatusDevicesListResultItemCpuPctByAppList | null; deviceIpv4?: DevicesFleetStatusGetResponseDeviceIpv4 | null; deviceIpv6?: DevicesFleetStatusGetResponseDeviceIpv4 | null; /** Device identifier (human readable). */ deviceName?: string | null; /** Deprecated: use registrationId. Device registration identifier (UUID). */ deviceRegistration?: string | null; diskReadBps?: number | null; diskUsagePct?: number | null; diskWriteBps?: number | null; dohSubdomain?: string | null; estimatedLossPct?: number | null; firewallEnabled?: boolean | null; gatewayIpv4?: DevicesFleetStatusGetResponseDeviceIpv4 | null; gatewayIpv6?: DevicesFleetStatusGetResponseDeviceIpv4 | null; handshakeLatencyMs?: number | null; ispIpv4?: DevicesFleetStatusGetResponseDeviceIpv4 | null; ispIpv6?: DevicesFleetStatusGetResponseDeviceIpv4 | null; metal?: string | null; networkRcvdBps?: number | null; networkSentBps?: number | null; networkSsid?: string | null; /** User contact email address */ personEmail?: string | null; ramAvailableKb?: number | null; ramUsedPct?: number | null; ramUsedPctByApp?: DexFleetStatusDevicesListResultItemRamUsedPctByAppList | null; /** Device registration identifier (UUID v4). On multi-user devices, this uniquely identifies a user's registration on the device. */ registrationId?: string | null; /** Round-trip time statistics for the WARP tunnel. */ rtt?: DevicesFleetStatusGetResponseRtt | null; switchLocked?: boolean | null; /** WARP tunnel packet and byte counters. */ tunnelStats?: DevicesFleetStatusGetResponseTunnelStats | null; tunnelType?: string | null; wifiStrengthDbm?: number | null; } export const DexFleetStatusDevicesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ colo: S.String, deviceId: S.String, mode: S.String, platform: S.String, status: S.String, timestamp: S.String, version: S.String, alwaysOn: S.optional(S.NullOr(S.Boolean)), batteryCharging: S.optional(S.NullOr(S.Boolean)), batteryCycles: S.optional(S.NullOr(S.Number)), batteryPct: S.optional(S.NullOr(S.Number)), connectionType: S.optional(S.NullOr(S.String)), cpuPct: S.optional(S.NullOr(S.Number)), cpuPctByApp: S.optional( S.NullOr(DexFleetStatusDevicesListResultItemCpuPctByAppList), ), deviceIpv4: S.optional(S.NullOr(DevicesFleetStatusGetResponseDeviceIpv4)), deviceIpv6: S.optional(S.NullOr(DevicesFleetStatusGetResponseDeviceIpv4)), deviceName: S.optional(S.NullOr(S.String)), deviceRegistration: S.optional(S.NullOr(S.String)), diskReadBps: S.optional(S.NullOr(S.Number)), diskUsagePct: S.optional(S.NullOr(S.Number)), diskWriteBps: S.optional(S.NullOr(S.Number)), dohSubdomain: S.optional(S.NullOr(S.String)), estimatedLossPct: S.optional(S.NullOr(S.Number)), firewallEnabled: S.optional(S.NullOr(S.Boolean)), gatewayIpv4: S.optional(S.NullOr(DevicesFleetStatusGetResponseDeviceIpv4)), gatewayIpv6: S.optional(S.NullOr(DevicesFleetStatusGetResponseDeviceIpv4)), handshakeLatencyMs: S.optional(S.NullOr(S.Number)), ispIpv4: S.optional(S.NullOr(DevicesFleetStatusGetResponseDeviceIpv4)), ispIpv6: S.optional(S.NullOr(DevicesFleetStatusGetResponseDeviceIpv4)), metal: S.optional(S.NullOr(S.String)), networkRcvdBps: S.optional(S.NullOr(S.Number)), networkSentBps: S.optional(S.NullOr(S.Number)), networkSsid: S.optional(S.NullOr(S.String)), personEmail: S.optional(S.NullOr(S.String)), ramAvailableKb: S.optional(S.NullOr(S.Number)), ramUsedPct: S.optional(S.NullOr(S.Number)), ramUsedPctByApp: S.optional( S.NullOr(DexFleetStatusDevicesListResultItemRamUsedPctByAppList), ), registrationId: S.optional(S.NullOr(S.String)), rtt: S.optional(S.NullOr(DevicesFleetStatusGetResponseRtt)), switchLocked: S.optional(S.NullOr(S.Boolean)), tunnelStats: S.optional(S.NullOr(DevicesFleetStatusGetResponseTunnelStats)), tunnelType: S.optional(S.NullOr(S.String)), wifiStrengthDbm: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexFleetStatusDevicesListResultItem", }) as any as S.Schema; export type DexFleetStatusDevicesListResultList = Array; export const DexFleetStatusDevicesListResultList = /*@__PURE__*/ S.Array( DexFleetStatusDevicesListResultItem, ) as any as S.Schema; export interface ListDexFleetStatusDevicesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DexFleetStatusDevicesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDexFleetStatusDevicesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DexFleetStatusDevicesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexFleetStatusDevicesResponse", }) as any as S.Schema; export type DexRulesListRequestSortBy = "name" | "created_at" | "updated_at"; export const DexRulesListRequestSortBy = /*@__PURE__*/ S.String; export type DexRulesListRequestSortOrder = "ASC" | "DESC"; export const DexRulesListRequestSortOrder = /*@__PURE__*/ S.String; export interface ListDexRulesRequest { /** Unique identifier linked to an account. */ accountId: string; /** Page number of paginated results. */ page: number; /** Number of results per page. */ perPage: number; /** Filter results by rule name. */ name?: string; /** Which property to sort results by. */ sortBy?: DexRulesListRequestSortBy | (string & {}); /** Sort direction for sort_by property. */ sortOrder?: DexRulesListRequestSortOrder | (string & {}); } export const ListDexRulesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), page: S.Number.pipe(T.Query()), perPage: S.Number.pipe(T.Query("per_page")), name: S.optional(S.String.pipe(T.Query())), sortBy: S.optional(DexRulesListRequestSortBy.pipe(T.Query("sort_by"))), sortOrder: S.optional( DexRulesListRequestSortOrder.pipe(T.Query("sort_order")), ), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/rules", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexRulesRequest", }) as any as S.Schema; export type DexRulesListResponseRulesItemTargetedTestsItemDataKind = | "http" | "traceroute"; export const DexRulesListResponseRulesItemTargetedTestsItemDataKind = /*@__PURE__*/ S.String; export type DexRulesListResponseRulesItemTargetedTestsItemDataMethod = "GET"; export const DexRulesListResponseRulesItemTargetedTestsItemDataMethod = /*@__PURE__*/ S.String; export interface DexRulesListResponseRulesItemTargetedTestsItemData { /** The desired endpoint to test. */ host: string; /** The type of test. */ kind: DexRulesListResponseRulesItemTargetedTestsItemDataKind; /** The HTTP request method type. */ method?: DexRulesListResponseRulesItemTargetedTestsItemDataMethod | null; } export const DexRulesListResponseRulesItemTargetedTestsItemData = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.String, kind: DexRulesListResponseRulesItemTargetedTestsItemDataKind, method: S.optional( S.NullOr(DexRulesListResponseRulesItemTargetedTestsItemDataMethod), ), }), ).annotate({ identifier: "DexRulesListResponseRulesItemTargetedTestsItemData", }) as any as S.Schema; export interface DexRulesListResponseRulesItemTargetedTestsItem { /** The configuration object which contains the details for the WARP client to conduct the test. */ data: DexRulesListResponseRulesItemTargetedTestsItemData; enabled: boolean; name: string; testId: string; } export const DexRulesListResponseRulesItemTargetedTestsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ data: DexRulesListResponseRulesItemTargetedTestsItemData, enabled: S.Boolean, name: S.String, testId: S.String.pipe(T.Body("test_id")), }), ).annotate({ identifier: "DexRulesListResponseRulesItemTargetedTestsItem", }) as any as S.Schema; export type DexRulesListResponseRulesItemTargetedTestsList = Array; export const DexRulesListResponseRulesItemTargetedTestsList = /*@__PURE__*/ S.Array( DexRulesListResponseRulesItemTargetedTestsItem, ) as any as S.Schema; export interface DexRulesListResponseRulesItem { /** API Resource UUID tag. */ id: string; createdAt: string; match: string; name: string; description?: string | null; targetedTests?: DexRulesListResponseRulesItemTargetedTestsList | null; updatedAt?: string | null; } export const DexRulesListResponseRulesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), match: S.String, name: S.String, description: S.optional(S.NullOr(S.String)), targetedTests: S.optional( S.NullOr(DexRulesListResponseRulesItemTargetedTestsList).pipe( T.Body("targeted_tests"), ), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "DexRulesListResponseRulesItem", }) as any as S.Schema; export type DexRulesListResponseRulesList = Array; export const DexRulesListResponseRulesList = /*@__PURE__*/ S.Array( DexRulesListResponseRulesItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ListDexRulesResponse { rules?: DexRulesListResponseRulesList | null; } export const ListDexRulesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ rules: S.optional(S.NullOr(DexRulesListResponseRulesList)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexRulesResponse", }) as any as S.Schema; export type DexTestsListRequestDeviceIdList = Array; export const DexTestsListRequestDeviceIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DexTestsListRequestKind = "http" | "traceroute"; export const DexTestsListRequestKind = /*@__PURE__*/ S.String; export interface ListDexTestsRequest { /** Unique identifier linked to an account. */ accountId: string; /** Optionally filter result stats to a Cloudflare colo. Cannot be used in combination with deviceId param. */ colo?: string; /** Optionally filter result stats to a specific device(s). Cannot be used in combination with colo param. */ deviceId?: DexTestsListRequestDeviceIdList; /** Filter by test type. */ kind?: DexTestsListRequestKind | (string & {}); /** Page number of paginated results */ page?: number; /** Number of items per page */ perPage?: number; /** Optionally filter results to a specific device registration. Must be used in combination with a single deviceId. */ registrationId?: string; /** Optionally filter results by test name. */ testName?: string; } export const ListDexTestsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), colo: S.optional(S.String.pipe(T.Query())), deviceId: S.optional(DexTestsListRequestDeviceIdList.pipe(T.Query())), kind: S.optional(DexTestsListRequestKind.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), registrationId: S.optional(S.String.pipe(T.Query("registration_id"))), testName: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/tests/overview", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexTestsRequest", }) as any as S.Schema; export interface DexTestsListResponseOverviewMetrics { /** number of tests. */ testsTotal: number; /** percentage availability for all HTTP test results in response. */ avgHttpAvailabilityPct?: number | null; /** percentage availability for all traceroutes results in response. */ avgTracerouteAvailabilityPct?: number | null; } export const DexTestsListResponseOverviewMetrics = /*@__PURE__*/ S.suspend(() => S.Struct({ testsTotal: S.Number, avgHttpAvailabilityPct: S.optional(S.NullOr(S.Number)), avgTracerouteAvailabilityPct: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexTestsListResponseOverviewMetrics", }) as any as S.Schema; export type DexTestsListResponseTestsItemKind = "http" | "traceroute"; export const DexTestsListResponseTestsItemKind = /*@__PURE__*/ S.String; export type DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriodUnits = | "hours" | "days" | "testRuns"; export const DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriodUnits = /*@__PURE__*/ S.String; export interface DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriod { units: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriodUnits; value: number; } export const DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriod = /*@__PURE__*/ S.suspend(() => S.Struct({ units: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriodUnits, value: S.Number, }), ).annotate({ identifier: "DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriod", }) as any as S.Schema; export interface DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItem { timePeriod: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriod; avgMs?: number | null; deltaPct?: number | null; } export const DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItem = /*@__PURE__*/ S.suspend(() => S.Struct({ timePeriod: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriod, avgMs: S.optional(S.NullOr(S.Number)), deltaPct: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItem", }) as any as S.Schema; export type DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryList = Array; export const DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryList = /*@__PURE__*/ S.Array( DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItem, ) as any as S.Schema; export interface DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesItem { avgMs: number; timestamp: string; } export const DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ avgMs: S.Number, timestamp: S.String, }), ).annotate({ identifier: "DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesItem", }) as any as S.Schema; export type DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesList = Array; export const DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesList = /*@__PURE__*/ S.Array( DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesItem, ) as any as S.Schema; export interface DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTime { timePeriod: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriod; values: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesList; } export const DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTime = /*@__PURE__*/ S.suspend(() => S.Struct({ timePeriod: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriod, values: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesList, }), ).annotate({ identifier: "DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTime", }) as any as S.Schema; export interface DexTestsListResponseTestsItemHttpResultsResourceFetchTime { history: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryList; avgMs?: number | null; overTime?: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTime | null; } export const DexTestsListResponseTestsItemHttpResultsResourceFetchTime = /*@__PURE__*/ S.suspend(() => S.Struct({ history: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryList, avgMs: S.optional(S.NullOr(S.Number)), overTime: S.optional( S.NullOr( DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTime, ), ), }), ).annotate({ identifier: "DexTestsListResponseTestsItemHttpResultsResourceFetchTime", }) as any as S.Schema; export interface DexTestsListResponseTestsItemHttpResults { resourceFetchTime: DexTestsListResponseTestsItemHttpResultsResourceFetchTime; } export const DexTestsListResponseTestsItemHttpResults = /*@__PURE__*/ S.suspend( () => S.Struct({ resourceFetchTime: DexTestsListResponseTestsItemHttpResultsResourceFetchTime, }), ).annotate({ identifier: "DexTestsListResponseTestsItemHttpResults", }) as any as S.Schema; export type DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeHistoryItem = DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItem; export const DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeHistoryItem = DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItem; export type DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeHistoryList = Array; export const DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeHistoryList = /*@__PURE__*/ S.Array( DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItem, ) as any as S.Schema; export type DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeOverTimeValuesItem = DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesItem; export const DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeOverTimeValuesItem = DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesItem; export type DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeOverTimeValuesList = Array; export const DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeOverTimeValuesList = /*@__PURE__*/ S.Array( DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesItem, ) as any as S.Schema; export interface DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeOverTime { timePeriod: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriod; values: DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeOverTimeValuesList; } export const DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeOverTime = /*@__PURE__*/ S.suspend(() => S.Struct({ timePeriod: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriod, values: DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeOverTimeValuesList, }), ).annotate({ identifier: "DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeOverTime", }) as any as S.Schema; export interface DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTime { history: DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeHistoryList; avgMs?: number | null; overTime?: DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeOverTime | null; } export const DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTime = /*@__PURE__*/ S.suspend(() => S.Struct({ history: DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeHistoryList, avgMs: S.optional(S.NullOr(S.Number)), overTime: S.optional( S.NullOr( DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTimeOverTime, ), ), }), ).annotate({ identifier: "DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTime", }) as any as S.Schema; export interface DexTestsListResponseTestsItemHttpResultsByColoItem { /** Cloudflare colo */ colo: string; resourceFetchTime: DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTime; } export const DexTestsListResponseTestsItemHttpResultsByColoItem = /*@__PURE__*/ S.suspend(() => S.Struct({ colo: S.String, resourceFetchTime: DexTestsListResponseTestsItemHttpResultsByColoItemResourceFetchTime, }), ).annotate({ identifier: "DexTestsListResponseTestsItemHttpResultsByColoItem", }) as any as S.Schema; export type DexTestsListResponseTestsItemHttpResultsByColoList = Array; export const DexTestsListResponseTestsItemHttpResultsByColoList = /*@__PURE__*/ S.Array( DexTestsListResponseTestsItemHttpResultsByColoItem, ) as any as S.Schema; export type DexTestsListResponseTestsItemTargetPoliciesItem = DexHttpTestsGetResponseTargetPoliciesItem; export const DexTestsListResponseTestsItemTargetPoliciesItem = DexHttpTestsGetResponseTargetPoliciesItem; export type DexTestsListResponseTestsItemTargetPoliciesList = Array; export const DexTestsListResponseTestsItemTargetPoliciesList = /*@__PURE__*/ S.Array( DexHttpTestsGetResponseTargetPoliciesItem, ) as any as S.Schema; export type DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeHistoryItem = DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItem; export const DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeHistoryItem = DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItem; export type DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeHistoryList = Array; export const DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeHistoryList = /*@__PURE__*/ S.Array( DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItem, ) as any as S.Schema; export type DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeOverTimeValuesItem = DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesItem; export const DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeOverTimeValuesItem = DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesItem; export type DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeOverTimeValuesList = Array; export const DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeOverTimeValuesList = /*@__PURE__*/ S.Array( DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesItem, ) as any as S.Schema; export interface DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeOverTime { timePeriod: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriod; values: DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeOverTimeValuesList; } export const DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeOverTime = /*@__PURE__*/ S.suspend(() => S.Struct({ timePeriod: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriod, values: DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeOverTimeValuesList, }), ).annotate({ identifier: "DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeOverTime", }) as any as S.Schema; export interface DexTestsListResponseTestsItemTracerouteResultsRoundTripTime { history: DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeHistoryList; avgMs?: number | null; overTime?: DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeOverTime | null; } export const DexTestsListResponseTestsItemTracerouteResultsRoundTripTime = /*@__PURE__*/ S.suspend(() => S.Struct({ history: DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeHistoryList, avgMs: S.optional(S.NullOr(S.Number)), overTime: S.optional( S.NullOr( DexTestsListResponseTestsItemTracerouteResultsRoundTripTimeOverTime, ), ), }), ).annotate({ identifier: "DexTestsListResponseTestsItemTracerouteResultsRoundTripTime", }) as any as S.Schema; export interface DexTestsListResponseTestsItemTracerouteResults { roundTripTime: DexTestsListResponseTestsItemTracerouteResultsRoundTripTime; } export const DexTestsListResponseTestsItemTracerouteResults = /*@__PURE__*/ S.suspend(() => S.Struct({ roundTripTime: DexTestsListResponseTestsItemTracerouteResultsRoundTripTime, }), ).annotate({ identifier: "DexTestsListResponseTestsItemTracerouteResults", }) as any as S.Schema; export type DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeHistoryItem = DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItem; export const DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeHistoryItem = DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItem; export type DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeHistoryList = Array; export const DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeHistoryList = /*@__PURE__*/ S.Array( DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItem, ) as any as S.Schema; export type DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeOverTimeValuesItem = DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesItem; export const DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeOverTimeValuesItem = DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesItem; export type DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeOverTimeValuesList = Array; export const DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeOverTimeValuesList = /*@__PURE__*/ S.Array( DexTestsListResponseTestsItemHttpResultsResourceFetchTimeOverTimeValuesItem, ) as any as S.Schema; export interface DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeOverTime { timePeriod: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriod; values: DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeOverTimeValuesList; } export const DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeOverTime = /*@__PURE__*/ S.suspend(() => S.Struct({ timePeriod: DexTestsListResponseTestsItemHttpResultsResourceFetchTimeHistoryItemTimePeriod, values: DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeOverTimeValuesList, }), ).annotate({ identifier: "DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeOverTime", }) as any as S.Schema; export interface DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTime { history: DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeHistoryList; avgMs?: number | null; overTime?: DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeOverTime | null; } export const DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTime = /*@__PURE__*/ S.suspend(() => S.Struct({ history: DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeHistoryList, avgMs: S.optional(S.NullOr(S.Number)), overTime: S.optional( S.NullOr( DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTimeOverTime, ), ), }), ).annotate({ identifier: "DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTime", }) as any as S.Schema; export interface DexTestsListResponseTestsItemTracerouteResultsByColoItem { /** Cloudflare colo */ colo: string; roundTripTime: DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTime; } export const DexTestsListResponseTestsItemTracerouteResultsByColoItem = /*@__PURE__*/ S.suspend(() => S.Struct({ colo: S.String, roundTripTime: DexTestsListResponseTestsItemTracerouteResultsByColoItemRoundTripTime, }), ).annotate({ identifier: "DexTestsListResponseTestsItemTracerouteResultsByColoItem", }) as any as S.Schema; export type DexTestsListResponseTestsItemTracerouteResultsByColoList = Array; export const DexTestsListResponseTestsItemTracerouteResultsByColoList = /*@__PURE__*/ S.Array( DexTestsListResponseTestsItemTracerouteResultsByColoItem, ) as any as S.Schema; export interface DexTestsListResponseTestsItem { /** API Resource UUID tag. */ id: string; /** date the test was created. */ created: string; /** the test description defined during configuration */ description: string; /** if true, then the test will run on targeted devices. Else, the test will not run. */ enabled: boolean; host: string; /** The interval at which the synthetic application test is set to run. */ interval: string; /** test type, http or traceroute */ kind: DexTestsListResponseTestsItemKind; /** name given to this test */ name: string; updated: string; httpResults?: DexTestsListResponseTestsItemHttpResults | null; httpResultsByColo?: DexTestsListResponseTestsItemHttpResultsByColoList | null; /** for HTTP, the method to use when running the test */ method?: string | null; targetPolicies?: DexTestsListResponseTestsItemTargetPoliciesList | null; targeted?: boolean | null; tracerouteResults?: DexTestsListResponseTestsItemTracerouteResults | null; tracerouteResultsByColo?: DexTestsListResponseTestsItemTracerouteResultsByColoList | null; } export const DexTestsListResponseTestsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, created: S.String, description: S.String, enabled: S.Boolean, host: S.String, interval: S.String, kind: DexTestsListResponseTestsItemKind, name: S.String, updated: S.String, httpResults: S.optional(S.NullOr(DexTestsListResponseTestsItemHttpResults)), httpResultsByColo: S.optional( S.NullOr(DexTestsListResponseTestsItemHttpResultsByColoList), ), method: S.optional(S.NullOr(S.String)), targetPolicies: S.optional( S.NullOr(DexTestsListResponseTestsItemTargetPoliciesList).pipe( T.Body("target_policies"), ), ), targeted: S.optional(S.NullOr(S.Boolean)), tracerouteResults: S.optional( S.NullOr(DexTestsListResponseTestsItemTracerouteResults), ), tracerouteResultsByColo: S.optional( S.NullOr(DexTestsListResponseTestsItemTracerouteResultsByColoList), ), }), ).annotate({ identifier: "DexTestsListResponseTestsItem", }) as any as S.Schema; export type DexTestsListResponseTestsList = Array; export const DexTestsListResponseTestsList = /*@__PURE__*/ S.Array( DexTestsListResponseTestsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ListDexTestsResponse { overviewMetrics: DexTestsListResponseOverviewMetrics; /** array of test results objects. */ tests: DexTestsListResponseTestsList; } export const ListDexTestsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ overviewMetrics: DexTestsListResponseOverviewMetrics, tests: DexTestsListResponseTestsList, }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexTestsResponse", }) as any as S.Schema; export type DexTestsUniqueDevicesListRequestDeviceIdList = Array; export const DexTestsUniqueDevicesListRequestDeviceIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface ListDexTestUniqueDevicesRequest { /** Unique identifier linked to an account. */ accountId: string; /** Optionally filter result stats to a specific device(s). Cannot be used in combination with colo param. */ deviceId?: DexTestsUniqueDevicesListRequestDeviceIdList; /** Optionally filter results by test name. */ testName?: string; } export const ListDexTestUniqueDevicesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), deviceId: S.optional( DexTestsUniqueDevicesListRequestDeviceIdList.pipe(T.Query()), ), testName: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/tests/unique-devices", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexTestUniqueDevicesRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ListDexTestUniqueDevicesResponse { /** total number of unique devices */ uniqueDevicesTotal: number; } export const ListDexTestUniqueDevicesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ uniqueDevicesTotal: S.Number, }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDexTestUniqueDevicesResponse", }) as any as S.Schema; export interface ListDlpCustomEntriesRequest { accountId: string; } export const ListDlpCustomEntriesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/entries", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpCustomEntriesRequest", }) as any as S.Schema; export type ListDlpCustomEntriesResultItemCase0PatternValidation = "luhn"; export const ListDlpCustomEntriesResultItemCase0PatternValidation = /*@__PURE__*/ S.String; export interface ListDlpCustomEntriesResultItemCase0Pattern { regex: string; validation?: ListDlpCustomEntriesResultItemCase0PatternValidation | null; } export const ListDlpCustomEntriesResultItemCase0Pattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( S.NullOr(ListDlpCustomEntriesResultItemCase0PatternValidation), ), }), ).annotate({ identifier: "ListDlpCustomEntriesResultItemCase0Pattern", }) as any as S.Schema; export type ListDlpCustomEntriesResultItemCase0Type = "custom"; export const ListDlpCustomEntriesResultItemCase0Type = /*@__PURE__*/ S.String; export type ListDlpCustomEntriesResultItemCase0UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpCustomEntriesResultItemCase0UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpCustomEntriesResultItemCase0 { id: string; createdAt: string; enabled: boolean; name: string; pattern: ListDlpCustomEntriesResultItemCase0Pattern; type: ListDlpCustomEntriesResultItemCase0Type; updatedAt: string; description?: string | null; profileId?: string | null; uploadStatus?: ListDlpCustomEntriesResultItemCase0UploadStatus | null; } export const ListDlpCustomEntriesResultItemCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: ListDlpCustomEntriesResultItemCase0Pattern, type: ListDlpCustomEntriesResultItemCase0Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(ListDlpCustomEntriesResultItemCase0UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpCustomEntriesResultItemCase0", }) as any as S.Schema; export type ListDlpCustomEntriesResultItemCase1Type = "custom_prompt_topic"; export const ListDlpCustomEntriesResultItemCase1Type = /*@__PURE__*/ S.String; export type ListDlpCustomEntriesResultItemCase1UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpCustomEntriesResultItemCase1UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpCustomEntriesResultItemCase1 { id: string; createdAt: string; enabled: boolean; name: string; type: ListDlpCustomEntriesResultItemCase1Type; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; uploadStatus?: ListDlpCustomEntriesResultItemCase1UploadStatus | null; } export const ListDlpCustomEntriesResultItemCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: ListDlpCustomEntriesResultItemCase1Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), uploadStatus: S.optional( S.NullOr(ListDlpCustomEntriesResultItemCase1UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpCustomEntriesResultItemCase1", }) as any as S.Schema; export type ListDlpCustomEntriesResultItemCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export const ListDlpCustomEntriesResultItemCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export type ListDlpCustomEntriesResultItemCase2Type = "predefined"; export const ListDlpCustomEntriesResultItemCase2Type = /*@__PURE__*/ S.String; export type ListDlpCustomEntriesResultItemCase2UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpCustomEntriesResultItemCase2UploadStatus = /*@__PURE__*/ S.String; export type ListDlpCustomEntriesResultItemCase2VariantCase0TopicType = | "Intent" | "Content"; export const ListDlpCustomEntriesResultItemCase2VariantCase0TopicType = /*@__PURE__*/ S.String; export type ListDlpCustomEntriesResultItemCase2VariantCase0Type = "PromptTopic"; export const ListDlpCustomEntriesResultItemCase2VariantCase0Type = /*@__PURE__*/ S.String; export interface ListDlpCustomEntriesResultItemCase2VariantCase0 { topicType: ListDlpCustomEntriesResultItemCase2VariantCase0TopicType; type: ListDlpCustomEntriesResultItemCase2VariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const ListDlpCustomEntriesResultItemCase2VariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: ListDlpCustomEntriesResultItemCase2VariantCase0TopicType.pipe( T.Body("topic_type"), ), type: ListDlpCustomEntriesResultItemCase2VariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "ListDlpCustomEntriesResultItemCase2VariantCase0", }) as any as S.Schema; export type ListDlpCustomEntriesResultItemCase2VariantCase1Type = "General"; export const ListDlpCustomEntriesResultItemCase2VariantCase1Type = /*@__PURE__*/ S.String; export interface ListDlpCustomEntriesResultItemCase2VariantCase1 { type: ListDlpCustomEntriesResultItemCase2VariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const ListDlpCustomEntriesResultItemCase2VariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: ListDlpCustomEntriesResultItemCase2VariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "ListDlpCustomEntriesResultItemCase2VariantCase1", }) as any as S.Schema; export type ListDlpCustomEntriesResultItemCase2Variant = | ListDlpCustomEntriesResultItemCase2VariantCase0 | ListDlpCustomEntriesResultItemCase2VariantCase1; export const ListDlpCustomEntriesResultItemCase2Variant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface ListDlpCustomEntriesResultItemCase2 { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: ListDlpCustomEntriesResultItemCase2Type; profileId?: string | null; uploadStatus?: ListDlpCustomEntriesResultItemCase2UploadStatus | null; /** A Predefined AI prompt classification topic entry. */ variant?: ListDlpCustomEntriesResultItemCase2Variant | null; } export const ListDlpCustomEntriesResultItemCase2 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: ListDlpCustomEntriesResultItemCase2Type, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(ListDlpCustomEntriesResultItemCase2UploadStatus).pipe( T.Body("upload_status"), ), ), variant: S.optional(S.NullOr(ListDlpCustomEntriesResultItemCase2Variant)), }), ).annotate({ identifier: "ListDlpCustomEntriesResultItemCase2", }) as any as S.Schema; export type ListDlpCustomEntriesResultItemCase3Type = "integration"; export const ListDlpCustomEntriesResultItemCase3Type = /*@__PURE__*/ S.String; export type ListDlpCustomEntriesResultItemCase3UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpCustomEntriesResultItemCase3UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpCustomEntriesResultItemCase3 { id: string; createdAt: string; enabled: boolean; name: string; type: ListDlpCustomEntriesResultItemCase3Type; updatedAt: string; profileId?: string | null; uploadStatus?: ListDlpCustomEntriesResultItemCase3UploadStatus | null; } export const ListDlpCustomEntriesResultItemCase3 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: ListDlpCustomEntriesResultItemCase3Type, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(ListDlpCustomEntriesResultItemCase3UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpCustomEntriesResultItemCase3", }) as any as S.Schema; export type ListDlpCustomEntriesResultItemCase4Type = "exact_data"; export const ListDlpCustomEntriesResultItemCase4Type = /*@__PURE__*/ S.String; export type ListDlpCustomEntriesResultItemCase4UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpCustomEntriesResultItemCase4UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpCustomEntriesResultItemCase4 { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: ListDlpCustomEntriesResultItemCase4Type; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; uploadStatus?: ListDlpCustomEntriesResultItemCase4UploadStatus | null; } export const ListDlpCustomEntriesResultItemCase4 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: ListDlpCustomEntriesResultItemCase4Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), uploadStatus: S.optional( S.NullOr(ListDlpCustomEntriesResultItemCase4UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpCustomEntriesResultItemCase4", }) as any as S.Schema; export type ListDlpCustomEntriesResultItemCase5Type = "document_fingerprint"; export const ListDlpCustomEntriesResultItemCase5Type = /*@__PURE__*/ S.String; export type ListDlpCustomEntriesResultItemCase5UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpCustomEntriesResultItemCase5UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpCustomEntriesResultItemCase5 { id: string; createdAt: string; enabled: boolean; name: string; type: ListDlpCustomEntriesResultItemCase5Type; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; uploadStatus?: ListDlpCustomEntriesResultItemCase5UploadStatus | null; } export const ListDlpCustomEntriesResultItemCase5 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: ListDlpCustomEntriesResultItemCase5Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), uploadStatus: S.optional( S.NullOr(ListDlpCustomEntriesResultItemCase5UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpCustomEntriesResultItemCase5", }) as any as S.Schema; export type ListDlpCustomEntriesResultItemCase6Type = "word_list"; export const ListDlpCustomEntriesResultItemCase6Type = /*@__PURE__*/ S.String; export type ListDlpCustomEntriesResultItemCase6UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpCustomEntriesResultItemCase6UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpCustomEntriesResultItemCase6 { id: string; createdAt: string; enabled: boolean; name: string; type: ListDlpCustomEntriesResultItemCase6Type; updatedAt: string; wordList: unknown; profileId?: string | null; uploadStatus?: ListDlpCustomEntriesResultItemCase6UploadStatus | null; } export const ListDlpCustomEntriesResultItemCase6 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: ListDlpCustomEntriesResultItemCase6Type, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(ListDlpCustomEntriesResultItemCase6UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpCustomEntriesResultItemCase6", }) as any as S.Schema; export type ListDlpCustomEntriesResultItem = | ListDlpCustomEntriesResultItemCase0 | ListDlpCustomEntriesResultItemCase1 | ListDlpCustomEntriesResultItemCase2 | ListDlpCustomEntriesResultItemCase3 | ListDlpCustomEntriesResultItemCase4 | ListDlpCustomEntriesResultItemCase5 | ListDlpCustomEntriesResultItemCase6; export const ListDlpCustomEntriesResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "uploadStatus", ], [ "id", "confidence", "enabled", "name", "type", "profileId", "uploadStatus", "variant", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId", "uploadStatus", ], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", "uploadStatus", ], ]), ); export type ListDlpCustomEntriesResultList = Array; export const ListDlpCustomEntriesResultList = /*@__PURE__*/ S.Array( ListDlpCustomEntriesResultItem, ) as any as S.Schema; export interface ListDlpCustomEntriesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: ListDlpCustomEntriesResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDlpCustomEntriesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: ListDlpCustomEntriesResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpCustomEntriesResponse", }) as any as S.Schema; export interface ListDlpCustomPromptTopicsRequest { accountId: string; } export const ListDlpCustomPromptTopicsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/custom_prompt_topics", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpCustomPromptTopicsRequest", }) as any as S.Schema; export interface DlpCustomPromptTopicsListResultItem { id: string; createdAt: string; enabled: boolean; name: string; topic: string; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpCustomPromptTopicsListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, topic: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpCustomPromptTopicsListResultItem", }) as any as S.Schema; export type DlpCustomPromptTopicsListResultList = Array; export const DlpCustomPromptTopicsListResultList = /*@__PURE__*/ S.Array( DlpCustomPromptTopicsListResultItem, ) as any as S.Schema; export interface ListDlpCustomPromptTopicsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DlpCustomPromptTopicsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDlpCustomPromptTopicsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DlpCustomPromptTopicsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpCustomPromptTopicsResponse", }) as any as S.Schema; export interface ListDlpDataClassesRequest { accountId: string; } export const ListDlpDataClassesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/data_classes", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpDataClassesRequest", }) as any as S.Schema; export type DlpDataClassesListResultItemDataTagsList = Array; export const DlpDataClassesListResultItemDataTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpDataClassesListResultItemSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export const DlpDataClassesListResultItemSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export type DlpDataClassesListResultItemSensitivityLevelsList = Array; export const DlpDataClassesListResultItemSensitivityLevelsList = /*@__PURE__*/ S.Array( DlpDataClassesCreateRequestSensitivityLevelsItem, ) as any as S.Schema; export interface DlpDataClassesListResultItem { id: string; createdAt: string; dataTags: DlpDataClassesListResultItemDataTagsList; expression: string; name: string; sensitivityLevels: DlpDataClassesListResultItemSensitivityLevelsList; updatedAt: string; description?: string | null; } export const DlpDataClassesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), dataTags: DlpDataClassesListResultItemDataTagsList.pipe( T.Body("data_tags"), ), expression: S.String, name: S.String, sensitivityLevels: DlpDataClassesListResultItemSensitivityLevelsList.pipe( T.Body("sensitivity_levels"), ), updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpDataClassesListResultItem", }) as any as S.Schema; export type DlpDataClassesListResultList = Array; export const DlpDataClassesListResultList = /*@__PURE__*/ S.Array( DlpDataClassesListResultItem, ) as any as S.Schema; export interface ListDlpDataClassesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DlpDataClassesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDlpDataClassesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DlpDataClassesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpDataClassesResponse", }) as any as S.Schema; export interface ListDlpDatasetsRequest { accountId: string; } export const ListDlpDatasetsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/datasets", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpDatasetsRequest", }) as any as S.Schema; export type DlpDatasetsListResponseColumnsItemUploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsListResponseColumnsItemUploadStatus = /*@__PURE__*/ S.String; export interface DlpDatasetsListResponseColumnsItem { entryId: string; headerName: string; numCells: number; uploadStatus: DlpDatasetsListResponseColumnsItemUploadStatus; } export const DlpDatasetsListResponseColumnsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ entryId: S.String.pipe(T.Body("entry_id")), headerName: S.String.pipe(T.Body("header_name")), numCells: S.Number.pipe(T.Body("num_cells")), uploadStatus: DlpDatasetsListResponseColumnsItemUploadStatus.pipe( T.Body("upload_status"), ), }), ).annotate({ identifier: "DlpDatasetsListResponseColumnsItem", }) as any as S.Schema; export type DlpDatasetsListResponseColumnsList = Array; export const DlpDatasetsListResponseColumnsList = /*@__PURE__*/ S.Array( DlpDatasetsListResponseColumnsItem, ) as any as S.Schema; export type DlpDatasetsListResponseStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsListResponseStatus = /*@__PURE__*/ S.String; export type DlpDatasetsListResponseUploadsItemStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsListResponseUploadsItemStatus = /*@__PURE__*/ S.String; export interface DlpDatasetsListResponseUploadsItem { numCells: number; status: DlpDatasetsListResponseUploadsItemStatus; version: number; } export const DlpDatasetsListResponseUploadsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ numCells: S.Number.pipe(T.Body("num_cells")), status: DlpDatasetsListResponseUploadsItemStatus, version: S.Number, }), ).annotate({ identifier: "DlpDatasetsListResponseUploadsItem", }) as any as S.Schema; export type DlpDatasetsListResponseUploadsList = Array; export const DlpDatasetsListResponseUploadsList = /*@__PURE__*/ S.Array( DlpDatasetsListResponseUploadsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ListDlpDatasetsResponse { id: string; columns: DlpDatasetsListResponseColumnsList; createdAt: string; encodingVersion: number; name: string; numCells: number; secret: boolean; status: DlpDatasetsListResponseStatus; /** Stores when the dataset was last updated. */ updatedAt: string; uploads: DlpDatasetsListResponseUploadsList; caseSensitive?: boolean | null; /** The description of the dataset. */ description?: string | null; } export const ListDlpDatasetsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, columns: DlpDatasetsListResponseColumnsList, createdAt: S.String.pipe(T.Body("created_at")), encodingVersion: S.Number.pipe(T.Body("encoding_version")), name: S.String, numCells: S.Number.pipe(T.Body("num_cells")), secret: S.Boolean, status: DlpDatasetsListResponseStatus, updatedAt: S.String.pipe(T.Body("updated_at")), uploads: DlpDatasetsListResponseUploadsList, caseSensitive: S.optional( S.NullOr(S.Boolean).pipe(T.Body("case_sensitive")), ), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpDatasetsResponse", }) as any as S.Schema; export interface ListDlpDataTagCategoriesRequest { accountId: string; } export const ListDlpDataTagCategoriesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/data_tag_categories", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpDataTagCategoriesRequest", }) as any as S.Schema; export type DlpDataTagCategoriesListResultItemTagsItem = DlpDataTagCategoriesCreateResponseTagsItem; export const DlpDataTagCategoriesListResultItemTagsItem = DlpDataTagCategoriesCreateResponseTagsItem; export type DlpDataTagCategoriesListResultItemTagsList = Array; export const DlpDataTagCategoriesListResultItemTagsList = /*@__PURE__*/ S.Array( DlpDataTagCategoriesCreateResponseTagsItem, ) as any as S.Schema; export interface DlpDataTagCategoriesListResultItem { id: string; createdAt: string; name: string; tags: DlpDataTagCategoriesListResultItemTagsList; updatedAt: string; description?: string | null; templateId?: string | null; } export const DlpDataTagCategoriesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), name: S.String, tags: DlpDataTagCategoriesListResultItemTagsList, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), templateId: S.optional(S.NullOr(S.String).pipe(T.Body("template_id"))), }), ).annotate({ identifier: "DlpDataTagCategoriesListResultItem", }) as any as S.Schema; export type DlpDataTagCategoriesListResultList = Array; export const DlpDataTagCategoriesListResultList = /*@__PURE__*/ S.Array( DlpDataTagCategoriesListResultItem, ) as any as S.Schema; export interface ListDlpDataTagCategoriesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DlpDataTagCategoriesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDlpDataTagCategoriesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DlpDataTagCategoriesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpDataTagCategoriesResponse", }) as any as S.Schema; export interface ListDlpDataTagCategoryDataTagsRequest { accountId: string; categoryId: string; } export const ListDlpDataTagCategoryDataTagsRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), categoryId: S.String.pipe(T.Label("category_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/data_tag_categories/{category_id}/data_tags", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpDataTagCategoryDataTagsRequest", }) as any as S.Schema; export type DlpDataTagCategoriesDataTagsListResultItem = DlpDataTagCategoriesCreateResponseTagsItem; export const DlpDataTagCategoriesDataTagsListResultItem = DlpDataTagCategoriesCreateResponseTagsItem; export type DlpDataTagCategoriesDataTagsListResultList = Array; export const DlpDataTagCategoriesDataTagsListResultList = /*@__PURE__*/ S.Array( DlpDataTagCategoriesCreateResponseTagsItem, ) as any as S.Schema; export interface ListDlpDataTagCategoryDataTagsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DlpDataTagCategoriesDataTagsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDlpDataTagCategoryDataTagsResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: DlpDataTagCategoriesDataTagsListResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpDataTagCategoryDataTagsResponse", }) as any as S.Schema; export interface ListDlpEmailRulesRequest { accountId: string; } export const ListDlpEmailRulesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/email/rules", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpEmailRulesRequest", }) as any as S.Schema; export type DlpEmailRulesListResultItemActionAction = "Block"; export const DlpEmailRulesListResultItemActionAction = /*@__PURE__*/ S.String; export interface DlpEmailRulesListResultItemAction { action: DlpEmailRulesListResultItemActionAction; message?: string | null; } export const DlpEmailRulesListResultItemAction = /*@__PURE__*/ S.suspend(() => S.Struct({ action: DlpEmailRulesListResultItemActionAction, message: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEmailRulesListResultItemAction", }) as any as S.Schema; export type DlpEmailRulesListResultItemConditionsItemOperator = | "InList" | "NotInList" | "MatchRegex" | "NotMatchRegex"; export const DlpEmailRulesListResultItemConditionsItemOperator = /*@__PURE__*/ S.String; export type DlpEmailRulesListResultItemConditionsItemSelector = | "Recipients" | "Sender" | "DLPProfiles"; export const DlpEmailRulesListResultItemConditionsItemSelector = /*@__PURE__*/ S.String; export type DlpEmailRulesListResultItemConditionsItemValueCase0List = Array; export const DlpEmailRulesListResultItemConditionsItemValueCase0List = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpEmailRulesListResultItemConditionsItemValue = | string | DlpEmailRulesListResultItemConditionsItemValueCase0List; export const DlpEmailRulesListResultItemConditionsItemValue = /*@__PURE__*/ S.Unknown.pipe(T.UnionCases([[], []])); export interface DlpEmailRulesListResultItemConditionsItem { operator: DlpEmailRulesListResultItemConditionsItemOperator; selector: DlpEmailRulesListResultItemConditionsItemSelector; value: DlpEmailRulesListResultItemConditionsItemValue; } export const DlpEmailRulesListResultItemConditionsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ operator: DlpEmailRulesListResultItemConditionsItemOperator, selector: DlpEmailRulesListResultItemConditionsItemSelector, value: DlpEmailRulesListResultItemConditionsItemValue, }), ).annotate({ identifier: "DlpEmailRulesListResultItemConditionsItem", }) as any as S.Schema; export type DlpEmailRulesListResultItemConditionsList = Array; export const DlpEmailRulesListResultItemConditionsList = /*@__PURE__*/ S.Array( DlpEmailRulesListResultItemConditionsItem, ) as any as S.Schema; export interface DlpEmailRulesListResultItem { action: DlpEmailRulesListResultItemAction; /** Triggered if all conditions match. */ conditions: DlpEmailRulesListResultItemConditionsList; createdAt: string; enabled: boolean; name: string; priority: number; ruleId: string; updatedAt: string; description?: string | null; } export const DlpEmailRulesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ action: DlpEmailRulesListResultItemAction, conditions: DlpEmailRulesListResultItemConditionsList, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, priority: S.Number, ruleId: S.String.pipe(T.Body("rule_id")), updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEmailRulesListResultItem", }) as any as S.Schema; export type DlpEmailRulesListResultList = Array; export const DlpEmailRulesListResultList = /*@__PURE__*/ S.Array( DlpEmailRulesListResultItem, ) as any as S.Schema; export interface ListDlpEmailRulesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DlpEmailRulesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDlpEmailRulesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DlpEmailRulesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpEmailRulesResponse", }) as any as S.Schema; export interface ListDlpEntriesRequest { accountId: string; } export const ListDlpEntriesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/entries", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpEntriesRequest", }) as any as S.Schema; export type DlpEntriesListResultItemCase0PatternValidation = "luhn"; export const DlpEntriesListResultItemCase0PatternValidation = /*@__PURE__*/ S.String; export interface DlpEntriesListResultItemCase0Pattern { regex: string; validation?: DlpEntriesListResultItemCase0PatternValidation | null; } export const DlpEntriesListResultItemCase0Pattern = /*@__PURE__*/ S.suspend( () => S.Struct({ regex: S.String, validation: S.optional( S.NullOr(DlpEntriesListResultItemCase0PatternValidation), ), }), ).annotate({ identifier: "DlpEntriesListResultItemCase0Pattern", }) as any as S.Schema; export type DlpEntriesListResultItemCase0Type = "custom"; export const DlpEntriesListResultItemCase0Type = /*@__PURE__*/ S.String; export type DlpEntriesListResultItemCase0UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpEntriesListResultItemCase0UploadStatus = /*@__PURE__*/ S.String; export interface DlpEntriesListResultItemCase0 { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpEntriesListResultItemCase0Pattern; type: DlpEntriesListResultItemCase0Type; updatedAt: string; description?: string | null; profileId?: string | null; uploadStatus?: DlpEntriesListResultItemCase0UploadStatus | null; } export const DlpEntriesListResultItemCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpEntriesListResultItemCase0Pattern, type: DlpEntriesListResultItemCase0Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(DlpEntriesListResultItemCase0UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "DlpEntriesListResultItemCase0", }) as any as S.Schema; export type DlpEntriesListResultItemCase1Type = "custom_prompt_topic"; export const DlpEntriesListResultItemCase1Type = /*@__PURE__*/ S.String; export type DlpEntriesListResultItemCase1UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpEntriesListResultItemCase1UploadStatus = /*@__PURE__*/ S.String; export interface DlpEntriesListResultItemCase1 { id: string; createdAt: string; enabled: boolean; name: string; type: DlpEntriesListResultItemCase1Type; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; uploadStatus?: DlpEntriesListResultItemCase1UploadStatus | null; } export const DlpEntriesListResultItemCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpEntriesListResultItemCase1Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), uploadStatus: S.optional( S.NullOr(DlpEntriesListResultItemCase1UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "DlpEntriesListResultItemCase1", }) as any as S.Schema; export type DlpEntriesListResultItemCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpEntriesListResultItemCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpEntriesListResultItemCase2Type = "predefined"; export const DlpEntriesListResultItemCase2Type = /*@__PURE__*/ S.String; export type DlpEntriesListResultItemCase2UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpEntriesListResultItemCase2UploadStatus = /*@__PURE__*/ S.String; export type DlpEntriesListResultItemCase2VariantCase0TopicType = | "Intent" | "Content"; export const DlpEntriesListResultItemCase2VariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpEntriesListResultItemCase2VariantCase0Type = "PromptTopic"; export const DlpEntriesListResultItemCase2VariantCase0Type = /*@__PURE__*/ S.String; export interface DlpEntriesListResultItemCase2VariantCase0 { topicType: DlpEntriesListResultItemCase2VariantCase0TopicType; type: DlpEntriesListResultItemCase2VariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpEntriesListResultItemCase2VariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpEntriesListResultItemCase2VariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpEntriesListResultItemCase2VariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEntriesListResultItemCase2VariantCase0", }) as any as S.Schema; export type DlpEntriesListResultItemCase2VariantCase1Type = "General"; export const DlpEntriesListResultItemCase2VariantCase1Type = /*@__PURE__*/ S.String; export interface DlpEntriesListResultItemCase2VariantCase1 { type: DlpEntriesListResultItemCase2VariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpEntriesListResultItemCase2VariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpEntriesListResultItemCase2VariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEntriesListResultItemCase2VariantCase1", }) as any as S.Schema; export type DlpEntriesListResultItemCase2Variant = | DlpEntriesListResultItemCase2VariantCase0 | DlpEntriesListResultItemCase2VariantCase1; export const DlpEntriesListResultItemCase2Variant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpEntriesListResultItemCase2 { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpEntriesListResultItemCase2Type; profileId?: string | null; uploadStatus?: DlpEntriesListResultItemCase2UploadStatus | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpEntriesListResultItemCase2Variant | null; } export const DlpEntriesListResultItemCase2 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpEntriesListResultItemCase2Type, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(DlpEntriesListResultItemCase2UploadStatus).pipe( T.Body("upload_status"), ), ), variant: S.optional(S.NullOr(DlpEntriesListResultItemCase2Variant)), }), ).annotate({ identifier: "DlpEntriesListResultItemCase2", }) as any as S.Schema; export type DlpEntriesListResultItemCase3Type = "integration"; export const DlpEntriesListResultItemCase3Type = /*@__PURE__*/ S.String; export type DlpEntriesListResultItemCase3UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpEntriesListResultItemCase3UploadStatus = /*@__PURE__*/ S.String; export interface DlpEntriesListResultItemCase3 { id: string; createdAt: string; enabled: boolean; name: string; type: DlpEntriesListResultItemCase3Type; updatedAt: string; profileId?: string | null; uploadStatus?: DlpEntriesListResultItemCase3UploadStatus | null; } export const DlpEntriesListResultItemCase3 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpEntriesListResultItemCase3Type, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(DlpEntriesListResultItemCase3UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "DlpEntriesListResultItemCase3", }) as any as S.Schema; export type DlpEntriesListResultItemCase4Type = "exact_data"; export const DlpEntriesListResultItemCase4Type = /*@__PURE__*/ S.String; export type DlpEntriesListResultItemCase4UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpEntriesListResultItemCase4UploadStatus = /*@__PURE__*/ S.String; export interface DlpEntriesListResultItemCase4 { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpEntriesListResultItemCase4Type; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; uploadStatus?: DlpEntriesListResultItemCase4UploadStatus | null; } export const DlpEntriesListResultItemCase4 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpEntriesListResultItemCase4Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), uploadStatus: S.optional( S.NullOr(DlpEntriesListResultItemCase4UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "DlpEntriesListResultItemCase4", }) as any as S.Schema; export type DlpEntriesListResultItemCase5Type = "document_fingerprint"; export const DlpEntriesListResultItemCase5Type = /*@__PURE__*/ S.String; export type DlpEntriesListResultItemCase5UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpEntriesListResultItemCase5UploadStatus = /*@__PURE__*/ S.String; export interface DlpEntriesListResultItemCase5 { id: string; createdAt: string; enabled: boolean; name: string; type: DlpEntriesListResultItemCase5Type; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; uploadStatus?: DlpEntriesListResultItemCase5UploadStatus | null; } export const DlpEntriesListResultItemCase5 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpEntriesListResultItemCase5Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), uploadStatus: S.optional( S.NullOr(DlpEntriesListResultItemCase5UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "DlpEntriesListResultItemCase5", }) as any as S.Schema; export type DlpEntriesListResultItemCase6Type = "word_list"; export const DlpEntriesListResultItemCase6Type = /*@__PURE__*/ S.String; export type DlpEntriesListResultItemCase6UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpEntriesListResultItemCase6UploadStatus = /*@__PURE__*/ S.String; export interface DlpEntriesListResultItemCase6 { id: string; createdAt: string; enabled: boolean; name: string; type: DlpEntriesListResultItemCase6Type; updatedAt: string; wordList: unknown; profileId?: string | null; uploadStatus?: DlpEntriesListResultItemCase6UploadStatus | null; } export const DlpEntriesListResultItemCase6 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpEntriesListResultItemCase6Type, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(DlpEntriesListResultItemCase6UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "DlpEntriesListResultItemCase6", }) as any as S.Schema; export type DlpEntriesListResultItem = | DlpEntriesListResultItemCase0 | DlpEntriesListResultItemCase1 | DlpEntriesListResultItemCase2 | DlpEntriesListResultItemCase3 | DlpEntriesListResultItemCase4 | DlpEntriesListResultItemCase5 | DlpEntriesListResultItemCase6; export const DlpEntriesListResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "uploadStatus", ], [ "id", "confidence", "enabled", "name", "type", "profileId", "uploadStatus", "variant", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId", "uploadStatus", ], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", "uploadStatus", ], ]), ); export type DlpEntriesListResultList = Array; export const DlpEntriesListResultList = /*@__PURE__*/ S.Array( DlpEntriesListResultItem, ) as any as S.Schema; export interface ListDlpEntriesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DlpEntriesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDlpEntriesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DlpEntriesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpEntriesResponse", }) as any as S.Schema; export interface ListDlpEntriesIntegrationRequest { accountId: string; } export const ListDlpEntriesIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/entries", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpEntriesIntegrationRequest", }) as any as S.Schema; export type ListDlpEntriesIntegrationResultItemCase0PatternValidation = "luhn"; export const ListDlpEntriesIntegrationResultItemCase0PatternValidation = /*@__PURE__*/ S.String; export interface ListDlpEntriesIntegrationResultItemCase0Pattern { regex: string; validation?: ListDlpEntriesIntegrationResultItemCase0PatternValidation | null; } export const ListDlpEntriesIntegrationResultItemCase0Pattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( S.NullOr(ListDlpEntriesIntegrationResultItemCase0PatternValidation), ), }), ).annotate({ identifier: "ListDlpEntriesIntegrationResultItemCase0Pattern", }) as any as S.Schema; export type ListDlpEntriesIntegrationResultItemCase0Type = "custom"; export const ListDlpEntriesIntegrationResultItemCase0Type = /*@__PURE__*/ S.String; export type ListDlpEntriesIntegrationResultItemCase0UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpEntriesIntegrationResultItemCase0UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpEntriesIntegrationResultItemCase0 { id: string; createdAt: string; enabled: boolean; name: string; pattern: ListDlpEntriesIntegrationResultItemCase0Pattern; type: ListDlpEntriesIntegrationResultItemCase0Type; updatedAt: string; description?: string | null; profileId?: string | null; uploadStatus?: ListDlpEntriesIntegrationResultItemCase0UploadStatus | null; } export const ListDlpEntriesIntegrationResultItemCase0 = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: ListDlpEntriesIntegrationResultItemCase0Pattern, type: ListDlpEntriesIntegrationResultItemCase0Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(ListDlpEntriesIntegrationResultItemCase0UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpEntriesIntegrationResultItemCase0", }) as any as S.Schema; export type ListDlpEntriesIntegrationResultItemCase1Type = "custom_prompt_topic"; export const ListDlpEntriesIntegrationResultItemCase1Type = /*@__PURE__*/ S.String; export type ListDlpEntriesIntegrationResultItemCase1UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpEntriesIntegrationResultItemCase1UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpEntriesIntegrationResultItemCase1 { id: string; createdAt: string; enabled: boolean; name: string; type: ListDlpEntriesIntegrationResultItemCase1Type; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; uploadStatus?: ListDlpEntriesIntegrationResultItemCase1UploadStatus | null; } export const ListDlpEntriesIntegrationResultItemCase1 = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: ListDlpEntriesIntegrationResultItemCase1Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), uploadStatus: S.optional( S.NullOr(ListDlpEntriesIntegrationResultItemCase1UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpEntriesIntegrationResultItemCase1", }) as any as S.Schema; export type ListDlpEntriesIntegrationResultItemCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export const ListDlpEntriesIntegrationResultItemCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export type ListDlpEntriesIntegrationResultItemCase2Type = "predefined"; export const ListDlpEntriesIntegrationResultItemCase2Type = /*@__PURE__*/ S.String; export type ListDlpEntriesIntegrationResultItemCase2UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpEntriesIntegrationResultItemCase2UploadStatus = /*@__PURE__*/ S.String; export type ListDlpEntriesIntegrationResultItemCase2VariantCase0TopicType = | "Intent" | "Content"; export const ListDlpEntriesIntegrationResultItemCase2VariantCase0TopicType = /*@__PURE__*/ S.String; export type ListDlpEntriesIntegrationResultItemCase2VariantCase0Type = "PromptTopic"; export const ListDlpEntriesIntegrationResultItemCase2VariantCase0Type = /*@__PURE__*/ S.String; export interface ListDlpEntriesIntegrationResultItemCase2VariantCase0 { topicType: ListDlpEntriesIntegrationResultItemCase2VariantCase0TopicType; type: ListDlpEntriesIntegrationResultItemCase2VariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const ListDlpEntriesIntegrationResultItemCase2VariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: ListDlpEntriesIntegrationResultItemCase2VariantCase0TopicType.pipe( T.Body("topic_type"), ), type: ListDlpEntriesIntegrationResultItemCase2VariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "ListDlpEntriesIntegrationResultItemCase2VariantCase0", }) as any as S.Schema; export type ListDlpEntriesIntegrationResultItemCase2VariantCase1Type = "General"; export const ListDlpEntriesIntegrationResultItemCase2VariantCase1Type = /*@__PURE__*/ S.String; export interface ListDlpEntriesIntegrationResultItemCase2VariantCase1 { type: ListDlpEntriesIntegrationResultItemCase2VariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const ListDlpEntriesIntegrationResultItemCase2VariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: ListDlpEntriesIntegrationResultItemCase2VariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "ListDlpEntriesIntegrationResultItemCase2VariantCase1", }) as any as S.Schema; export type ListDlpEntriesIntegrationResultItemCase2Variant = | ListDlpEntriesIntegrationResultItemCase2VariantCase0 | ListDlpEntriesIntegrationResultItemCase2VariantCase1; export const ListDlpEntriesIntegrationResultItemCase2Variant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface ListDlpEntriesIntegrationResultItemCase2 { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: ListDlpEntriesIntegrationResultItemCase2Type; profileId?: string | null; uploadStatus?: ListDlpEntriesIntegrationResultItemCase2UploadStatus | null; /** A Predefined AI prompt classification topic entry. */ variant?: ListDlpEntriesIntegrationResultItemCase2Variant | null; } export const ListDlpEntriesIntegrationResultItemCase2 = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: ListDlpEntriesIntegrationResultItemCase2Type, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(ListDlpEntriesIntegrationResultItemCase2UploadStatus).pipe( T.Body("upload_status"), ), ), variant: S.optional( S.NullOr(ListDlpEntriesIntegrationResultItemCase2Variant), ), }), ).annotate({ identifier: "ListDlpEntriesIntegrationResultItemCase2", }) as any as S.Schema; export type ListDlpEntriesIntegrationResultItemCase3Type = "integration"; export const ListDlpEntriesIntegrationResultItemCase3Type = /*@__PURE__*/ S.String; export type ListDlpEntriesIntegrationResultItemCase3UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpEntriesIntegrationResultItemCase3UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpEntriesIntegrationResultItemCase3 { id: string; createdAt: string; enabled: boolean; name: string; type: ListDlpEntriesIntegrationResultItemCase3Type; updatedAt: string; profileId?: string | null; uploadStatus?: ListDlpEntriesIntegrationResultItemCase3UploadStatus | null; } export const ListDlpEntriesIntegrationResultItemCase3 = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: ListDlpEntriesIntegrationResultItemCase3Type, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(ListDlpEntriesIntegrationResultItemCase3UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpEntriesIntegrationResultItemCase3", }) as any as S.Schema; export type ListDlpEntriesIntegrationResultItemCase4Type = "exact_data"; export const ListDlpEntriesIntegrationResultItemCase4Type = /*@__PURE__*/ S.String; export type ListDlpEntriesIntegrationResultItemCase4UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpEntriesIntegrationResultItemCase4UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpEntriesIntegrationResultItemCase4 { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: ListDlpEntriesIntegrationResultItemCase4Type; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; uploadStatus?: ListDlpEntriesIntegrationResultItemCase4UploadStatus | null; } export const ListDlpEntriesIntegrationResultItemCase4 = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: ListDlpEntriesIntegrationResultItemCase4Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), uploadStatus: S.optional( S.NullOr(ListDlpEntriesIntegrationResultItemCase4UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpEntriesIntegrationResultItemCase4", }) as any as S.Schema; export type ListDlpEntriesIntegrationResultItemCase5Type = "document_fingerprint"; export const ListDlpEntriesIntegrationResultItemCase5Type = /*@__PURE__*/ S.String; export type ListDlpEntriesIntegrationResultItemCase5UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpEntriesIntegrationResultItemCase5UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpEntriesIntegrationResultItemCase5 { id: string; createdAt: string; enabled: boolean; name: string; type: ListDlpEntriesIntegrationResultItemCase5Type; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; uploadStatus?: ListDlpEntriesIntegrationResultItemCase5UploadStatus | null; } export const ListDlpEntriesIntegrationResultItemCase5 = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: ListDlpEntriesIntegrationResultItemCase5Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), uploadStatus: S.optional( S.NullOr(ListDlpEntriesIntegrationResultItemCase5UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpEntriesIntegrationResultItemCase5", }) as any as S.Schema; export type ListDlpEntriesIntegrationResultItemCase6Type = "word_list"; export const ListDlpEntriesIntegrationResultItemCase6Type = /*@__PURE__*/ S.String; export type ListDlpEntriesIntegrationResultItemCase6UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpEntriesIntegrationResultItemCase6UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpEntriesIntegrationResultItemCase6 { id: string; createdAt: string; enabled: boolean; name: string; type: ListDlpEntriesIntegrationResultItemCase6Type; updatedAt: string; wordList: unknown; profileId?: string | null; uploadStatus?: ListDlpEntriesIntegrationResultItemCase6UploadStatus | null; } export const ListDlpEntriesIntegrationResultItemCase6 = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: ListDlpEntriesIntegrationResultItemCase6Type, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(ListDlpEntriesIntegrationResultItemCase6UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpEntriesIntegrationResultItemCase6", }) as any as S.Schema; export type ListDlpEntriesIntegrationResultItem = | ListDlpEntriesIntegrationResultItemCase0 | ListDlpEntriesIntegrationResultItemCase1 | ListDlpEntriesIntegrationResultItemCase2 | ListDlpEntriesIntegrationResultItemCase3 | ListDlpEntriesIntegrationResultItemCase4 | ListDlpEntriesIntegrationResultItemCase5 | ListDlpEntriesIntegrationResultItemCase6; export const ListDlpEntriesIntegrationResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "uploadStatus", ], [ "id", "confidence", "enabled", "name", "type", "profileId", "uploadStatus", "variant", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId", "uploadStatus", ], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", "uploadStatus", ], ]), ); export type ListDlpEntriesIntegrationResultList = Array; export const ListDlpEntriesIntegrationResultList = /*@__PURE__*/ S.Array( ListDlpEntriesIntegrationResultItem, ) as any as S.Schema; export interface ListDlpEntriesIntegrationResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: ListDlpEntriesIntegrationResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDlpEntriesIntegrationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: ListDlpEntriesIntegrationResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpEntriesIntegrationResponse", }) as any as S.Schema; export interface ListDlpEntriesPredefinedRequest { accountId: string; } export const ListDlpEntriesPredefinedRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/entries", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpEntriesPredefinedRequest", }) as any as S.Schema; export type ListDlpEntriesPredefinedResultItemCase0PatternValidation = "luhn"; export const ListDlpEntriesPredefinedResultItemCase0PatternValidation = /*@__PURE__*/ S.String; export interface ListDlpEntriesPredefinedResultItemCase0Pattern { regex: string; validation?: ListDlpEntriesPredefinedResultItemCase0PatternValidation | null; } export const ListDlpEntriesPredefinedResultItemCase0Pattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( S.NullOr(ListDlpEntriesPredefinedResultItemCase0PatternValidation), ), }), ).annotate({ identifier: "ListDlpEntriesPredefinedResultItemCase0Pattern", }) as any as S.Schema; export type ListDlpEntriesPredefinedResultItemCase0Type = "custom"; export const ListDlpEntriesPredefinedResultItemCase0Type = /*@__PURE__*/ S.String; export type ListDlpEntriesPredefinedResultItemCase0UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpEntriesPredefinedResultItemCase0UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpEntriesPredefinedResultItemCase0 { id: string; createdAt: string; enabled: boolean; name: string; pattern: ListDlpEntriesPredefinedResultItemCase0Pattern; type: ListDlpEntriesPredefinedResultItemCase0Type; updatedAt: string; description?: string | null; profileId?: string | null; uploadStatus?: ListDlpEntriesPredefinedResultItemCase0UploadStatus | null; } export const ListDlpEntriesPredefinedResultItemCase0 = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: ListDlpEntriesPredefinedResultItemCase0Pattern, type: ListDlpEntriesPredefinedResultItemCase0Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(ListDlpEntriesPredefinedResultItemCase0UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpEntriesPredefinedResultItemCase0", }) as any as S.Schema; export type ListDlpEntriesPredefinedResultItemCase1Type = "custom_prompt_topic"; export const ListDlpEntriesPredefinedResultItemCase1Type = /*@__PURE__*/ S.String; export type ListDlpEntriesPredefinedResultItemCase1UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpEntriesPredefinedResultItemCase1UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpEntriesPredefinedResultItemCase1 { id: string; createdAt: string; enabled: boolean; name: string; type: ListDlpEntriesPredefinedResultItemCase1Type; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; uploadStatus?: ListDlpEntriesPredefinedResultItemCase1UploadStatus | null; } export const ListDlpEntriesPredefinedResultItemCase1 = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: ListDlpEntriesPredefinedResultItemCase1Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), uploadStatus: S.optional( S.NullOr(ListDlpEntriesPredefinedResultItemCase1UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpEntriesPredefinedResultItemCase1", }) as any as S.Schema; export type ListDlpEntriesPredefinedResultItemCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export const ListDlpEntriesPredefinedResultItemCase2Confidence = DlpEntriesPredefinedCreateResponseConfidence; export type ListDlpEntriesPredefinedResultItemCase2Type = "predefined"; export const ListDlpEntriesPredefinedResultItemCase2Type = /*@__PURE__*/ S.String; export type ListDlpEntriesPredefinedResultItemCase2UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpEntriesPredefinedResultItemCase2UploadStatus = /*@__PURE__*/ S.String; export type ListDlpEntriesPredefinedResultItemCase2VariantCase0TopicType = | "Intent" | "Content"; export const ListDlpEntriesPredefinedResultItemCase2VariantCase0TopicType = /*@__PURE__*/ S.String; export type ListDlpEntriesPredefinedResultItemCase2VariantCase0Type = "PromptTopic"; export const ListDlpEntriesPredefinedResultItemCase2VariantCase0Type = /*@__PURE__*/ S.String; export interface ListDlpEntriesPredefinedResultItemCase2VariantCase0 { topicType: ListDlpEntriesPredefinedResultItemCase2VariantCase0TopicType; type: ListDlpEntriesPredefinedResultItemCase2VariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const ListDlpEntriesPredefinedResultItemCase2VariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: ListDlpEntriesPredefinedResultItemCase2VariantCase0TopicType.pipe( T.Body("topic_type"), ), type: ListDlpEntriesPredefinedResultItemCase2VariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "ListDlpEntriesPredefinedResultItemCase2VariantCase0", }) as any as S.Schema; export type ListDlpEntriesPredefinedResultItemCase2VariantCase1Type = "General"; export const ListDlpEntriesPredefinedResultItemCase2VariantCase1Type = /*@__PURE__*/ S.String; export interface ListDlpEntriesPredefinedResultItemCase2VariantCase1 { type: ListDlpEntriesPredefinedResultItemCase2VariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const ListDlpEntriesPredefinedResultItemCase2VariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: ListDlpEntriesPredefinedResultItemCase2VariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "ListDlpEntriesPredefinedResultItemCase2VariantCase1", }) as any as S.Schema; export type ListDlpEntriesPredefinedResultItemCase2Variant = | ListDlpEntriesPredefinedResultItemCase2VariantCase0 | ListDlpEntriesPredefinedResultItemCase2VariantCase1; export const ListDlpEntriesPredefinedResultItemCase2Variant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface ListDlpEntriesPredefinedResultItemCase2 { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: ListDlpEntriesPredefinedResultItemCase2Type; profileId?: string | null; uploadStatus?: ListDlpEntriesPredefinedResultItemCase2UploadStatus | null; /** A Predefined AI prompt classification topic entry. */ variant?: ListDlpEntriesPredefinedResultItemCase2Variant | null; } export const ListDlpEntriesPredefinedResultItemCase2 = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: ListDlpEntriesPredefinedResultItemCase2Type, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(ListDlpEntriesPredefinedResultItemCase2UploadStatus).pipe( T.Body("upload_status"), ), ), variant: S.optional( S.NullOr(ListDlpEntriesPredefinedResultItemCase2Variant), ), }), ).annotate({ identifier: "ListDlpEntriesPredefinedResultItemCase2", }) as any as S.Schema; export type ListDlpEntriesPredefinedResultItemCase3Type = "integration"; export const ListDlpEntriesPredefinedResultItemCase3Type = /*@__PURE__*/ S.String; export type ListDlpEntriesPredefinedResultItemCase3UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpEntriesPredefinedResultItemCase3UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpEntriesPredefinedResultItemCase3 { id: string; createdAt: string; enabled: boolean; name: string; type: ListDlpEntriesPredefinedResultItemCase3Type; updatedAt: string; profileId?: string | null; uploadStatus?: ListDlpEntriesPredefinedResultItemCase3UploadStatus | null; } export const ListDlpEntriesPredefinedResultItemCase3 = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: ListDlpEntriesPredefinedResultItemCase3Type, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(ListDlpEntriesPredefinedResultItemCase3UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpEntriesPredefinedResultItemCase3", }) as any as S.Schema; export type ListDlpEntriesPredefinedResultItemCase4Type = "exact_data"; export const ListDlpEntriesPredefinedResultItemCase4Type = /*@__PURE__*/ S.String; export type ListDlpEntriesPredefinedResultItemCase4UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpEntriesPredefinedResultItemCase4UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpEntriesPredefinedResultItemCase4 { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: ListDlpEntriesPredefinedResultItemCase4Type; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; uploadStatus?: ListDlpEntriesPredefinedResultItemCase4UploadStatus | null; } export const ListDlpEntriesPredefinedResultItemCase4 = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: ListDlpEntriesPredefinedResultItemCase4Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), uploadStatus: S.optional( S.NullOr(ListDlpEntriesPredefinedResultItemCase4UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpEntriesPredefinedResultItemCase4", }) as any as S.Schema; export type ListDlpEntriesPredefinedResultItemCase5Type = "document_fingerprint"; export const ListDlpEntriesPredefinedResultItemCase5Type = /*@__PURE__*/ S.String; export type ListDlpEntriesPredefinedResultItemCase5UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpEntriesPredefinedResultItemCase5UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpEntriesPredefinedResultItemCase5 { id: string; createdAt: string; enabled: boolean; name: string; type: ListDlpEntriesPredefinedResultItemCase5Type; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; uploadStatus?: ListDlpEntriesPredefinedResultItemCase5UploadStatus | null; } export const ListDlpEntriesPredefinedResultItemCase5 = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: ListDlpEntriesPredefinedResultItemCase5Type, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), uploadStatus: S.optional( S.NullOr(ListDlpEntriesPredefinedResultItemCase5UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpEntriesPredefinedResultItemCase5", }) as any as S.Schema; export type ListDlpEntriesPredefinedResultItemCase6Type = "word_list"; export const ListDlpEntriesPredefinedResultItemCase6Type = /*@__PURE__*/ S.String; export type ListDlpEntriesPredefinedResultItemCase6UploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const ListDlpEntriesPredefinedResultItemCase6UploadStatus = /*@__PURE__*/ S.String; export interface ListDlpEntriesPredefinedResultItemCase6 { id: string; createdAt: string; enabled: boolean; name: string; type: ListDlpEntriesPredefinedResultItemCase6Type; updatedAt: string; wordList: unknown; profileId?: string | null; uploadStatus?: ListDlpEntriesPredefinedResultItemCase6UploadStatus | null; } export const ListDlpEntriesPredefinedResultItemCase6 = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: ListDlpEntriesPredefinedResultItemCase6Type, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), uploadStatus: S.optional( S.NullOr(ListDlpEntriesPredefinedResultItemCase6UploadStatus).pipe( T.Body("upload_status"), ), ), }), ).annotate({ identifier: "ListDlpEntriesPredefinedResultItemCase6", }) as any as S.Schema; export type ListDlpEntriesPredefinedResultItem = | ListDlpEntriesPredefinedResultItemCase0 | ListDlpEntriesPredefinedResultItemCase1 | ListDlpEntriesPredefinedResultItemCase2 | ListDlpEntriesPredefinedResultItemCase3 | ListDlpEntriesPredefinedResultItemCase4 | ListDlpEntriesPredefinedResultItemCase5 | ListDlpEntriesPredefinedResultItemCase6; export const ListDlpEntriesPredefinedResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "uploadStatus", ], [ "id", "confidence", "enabled", "name", "type", "profileId", "uploadStatus", "variant", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId", "uploadStatus", ], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", "uploadStatus", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", "uploadStatus", ], ]), ); export type ListDlpEntriesPredefinedResultList = Array; export const ListDlpEntriesPredefinedResultList = /*@__PURE__*/ S.Array( ListDlpEntriesPredefinedResultItem, ) as any as S.Schema; export interface ListDlpEntriesPredefinedResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: ListDlpEntriesPredefinedResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDlpEntriesPredefinedResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: ListDlpEntriesPredefinedResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpEntriesPredefinedResponse", }) as any as S.Schema; export interface ListDlpLimitsRequest { accountId: string; } export const ListDlpLimitsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/limits", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpLimitsRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ListDlpLimitsResponse { /** Maximum number of custom regex entries allowed for the account. */ maxCustomRegexEntries: number; /** Maximum number of dataset cells allowed for the account, across all EDM and CWL datasets. */ maxDatasetCells: number; /** Maximum number of document fingerprints allowed for the account. */ maxDocumentFingerprints: number; /** Number of custom regex entries currently configured for the account. */ usedCustomRegexEntries: number; /** Number of dataset cells currently configured for the account, across all EDM and CWL datasets. Document fingerprints do not count towards this limit. */ usedDatasetCells: number; /** Number of document fingerprints currently configured for the account. */ usedDocumentFingerprints: number; } export const ListDlpLimitsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ maxCustomRegexEntries: S.Number.pipe(T.Body("max_custom_regex_entries")), maxDatasetCells: S.Number.pipe(T.Body("max_dataset_cells")), maxDocumentFingerprints: S.Number.pipe(T.Body("max_document_fingerprints")), usedCustomRegexEntries: S.Number.pipe(T.Body("used_custom_regex_entries")), usedDatasetCells: S.Number.pipe(T.Body("used_dataset_cells")), usedDocumentFingerprints: S.Number.pipe( T.Body("used_document_fingerprints"), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpLimitsResponse", }) as any as S.Schema; export interface ListDlpProfilesRequest { accountId: string; /** Return all profiles, including those that current account does not have access to. */ all?: boolean; } export const ListDlpProfilesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), all: S.optional(S.Boolean.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/profiles", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpProfilesRequest", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileType = "custom"; export const DlpProfilesListResultItemCustomProfileType = /*@__PURE__*/ S.String; export type DlpProfilesListResultItemCustomProfileConfidenceThreshold = | "low" | "medium" | "high" | "very_high"; export const DlpProfilesListResultItemCustomProfileConfidenceThreshold = /*@__PURE__*/ S.String; export type DlpProfilesListResultItemCustomProfileContextAwarenessSkip = DlpProfilesCustomCreateRequestContextAwarenessSkip; export const DlpProfilesListResultItemCustomProfileContextAwarenessSkip = DlpProfilesCustomCreateRequestContextAwarenessSkip; export type DlpProfilesListResultItemCustomProfileContextAwareness = DlpProfilesCustomCreateRequestContextAwareness; export const DlpProfilesListResultItemCustomProfileContextAwareness = DlpProfilesCustomCreateRequestContextAwareness; export type DlpProfilesListResultItemCustomProfileDataClassesList = Array; export const DlpProfilesListResultItemCustomProfileDataClassesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileDataTagsList = Array; export const DlpProfilesListResultItemCustomProfileDataTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPatternValidation = "luhn"; export const DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPatternValidation = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPattern { regex: string; validation?: DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPatternValidation | null; } export const DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( S.NullOr( DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPatternValidation, ), ), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPattern", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryType = "custom"; export const DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesListResultItemCustomProfileEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesListResultItemCustomProfileEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemCustomProfileEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesListResultItemCustomProfileEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemCustomProfileEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariant = | DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase0 | DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesListResultItemCustomProfileEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemCustomProfileEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesListResultItemCustomProfileEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemCustomProfileEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesListResultItemCustomProfileEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesListResultItemCustomProfileEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesListResultItemCustomProfileEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesListResultItemCustomProfileEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesListResultItemCustomProfileEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemCustomProfileEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesListResultItemCustomProfileEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemCustomProfileEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileEntriesItemWordListEntryType = "word_list"; export const DlpProfilesListResultItemCustomProfileEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemCustomProfileEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesListResultItemCustomProfileEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemCustomProfileEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileEntriesItem = | DlpProfilesListResultItemCustomProfileEntriesItemCustomEntry | DlpProfilesListResultItemCustomProfileEntriesItemCustomPromptTopicEntry | DlpProfilesListResultItemCustomProfileEntriesItemPredefinedEntry | DlpProfilesListResultItemCustomProfileEntriesItemIntegrationEntry | DlpProfilesListResultItemCustomProfileEntriesItemExactDataEntry | DlpProfilesListResultItemCustomProfileEntriesItemDocumentFingerprintEntry | DlpProfilesListResultItemCustomProfileEntriesItemWordListEntry; export const DlpProfilesListResultItemCustomProfileEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesListResultItemCustomProfileEntriesList = Array; export const DlpProfilesListResultItemCustomProfileEntriesList = /*@__PURE__*/ S.Array( DlpProfilesListResultItemCustomProfileEntriesItem, ) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export const DlpProfilesListResultItemCustomProfileSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export type DlpProfilesListResultItemCustomProfileSensitivityLevelsList = Array; export const DlpProfilesListResultItemCustomProfileSensitivityLevelsList = /*@__PURE__*/ S.Array( DlpDataClassesCreateRequestSensitivityLevelsItem, ) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomEntryType = "custom"; export const DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariant = | DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase0 | DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileSharedEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesListResultItemCustomProfileSharedEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileSharedEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemCustomProfileSharedEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesListResultItemCustomProfileSharedEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemCustomProfileSharedEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileSharedEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileSharedEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesListResultItemCustomProfileSharedEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileSharedEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesListResultItemCustomProfileSharedEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesListResultItemCustomProfileSharedEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesListResultItemCustomProfileSharedEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileSharedEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileSharedEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesListResultItemCustomProfileSharedEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileSharedEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemCustomProfileSharedEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesListResultItemCustomProfileSharedEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemCustomProfileSharedEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileSharedEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileSharedEntriesItemWordListEntryType = "word_list"; export const DlpProfilesListResultItemCustomProfileSharedEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemCustomProfileSharedEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemCustomProfileSharedEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesListResultItemCustomProfileSharedEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemCustomProfileSharedEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfileSharedEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesListResultItemCustomProfileSharedEntriesItem = | DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomEntry | DlpProfilesListResultItemCustomProfileSharedEntriesItemCustomPromptTopicEntry | DlpProfilesListResultItemCustomProfileSharedEntriesItemPredefinedEntry | DlpProfilesListResultItemCustomProfileSharedEntriesItemIntegrationEntry | DlpProfilesListResultItemCustomProfileSharedEntriesItemExactDataEntry | DlpProfilesListResultItemCustomProfileSharedEntriesItemDocumentFingerprintEntry | DlpProfilesListResultItemCustomProfileSharedEntriesItemWordListEntry; export const DlpProfilesListResultItemCustomProfileSharedEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesListResultItemCustomProfileSharedEntriesList = Array; export const DlpProfilesListResultItemCustomProfileSharedEntriesList = /*@__PURE__*/ S.Array( DlpProfilesListResultItemCustomProfileSharedEntriesItem, ) as any as S.Schema; export interface DlpProfilesListResultItemCustomProfile { /** The id of the profile (uuid). */ id: string; /** Related DLP policies will trigger when the match count exceeds the number set. */ allowedMatchCount: number; /** When the profile was created. */ createdAt: string; /** The name of the profile. */ name: string; ocrEnabled: boolean; type: DlpProfilesListResultItemCustomProfileType; /** When the profile was lasted updated. */ updatedAt: string; aiContextEnabled?: boolean | null; confidenceThreshold?: DlpProfilesListResultItemCustomProfileConfidenceThreshold | null; /** Scan the context of predefined entries to only return matches surrounded by keywords. */ contextAwareness?: DlpProfilesCustomCreateRequestContextAwareness | null; /** Data classes associated with this profile. */ dataClasses?: DlpProfilesListResultItemCustomProfileDataClassesList | null; /** Data tags associated with this profile. */ dataTags?: DlpProfilesListResultItemCustomProfileDataTagsList | null; /** The description of the profile. */ description?: string | null; entries?: DlpProfilesListResultItemCustomProfileEntriesList | null; /** Sensitivity levels associated with this profile. */ sensitivityLevels?: DlpProfilesListResultItemCustomProfileSensitivityLevelsList | null; sharedEntries?: DlpProfilesListResultItemCustomProfileSharedEntriesList | null; } export const DlpProfilesListResultItemCustomProfile = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, allowedMatchCount: S.Number.pipe(T.Body("allowed_match_count")), createdAt: S.String.pipe(T.Body("created_at")), name: S.String, ocrEnabled: S.Boolean.pipe(T.Body("ocr_enabled")), type: DlpProfilesListResultItemCustomProfileType, updatedAt: S.String.pipe(T.Body("updated_at")), aiContextEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ai_context_enabled")), ), confidenceThreshold: S.optional( S.NullOr( DlpProfilesListResultItemCustomProfileConfidenceThreshold, ).pipe(T.Body("confidence_threshold")), ), contextAwareness: S.optional( S.NullOr(DlpProfilesCustomCreateRequestContextAwareness).pipe( T.Body("context_awareness"), ), ), dataClasses: S.optional( S.NullOr(DlpProfilesListResultItemCustomProfileDataClassesList).pipe( T.Body("data_classes"), ), ), dataTags: S.optional( S.NullOr(DlpProfilesListResultItemCustomProfileDataTagsList).pipe( T.Body("data_tags"), ), ), description: S.optional(S.NullOr(S.String)), entries: S.optional( S.NullOr(DlpProfilesListResultItemCustomProfileEntriesList), ), sensitivityLevels: S.optional( S.NullOr( DlpProfilesListResultItemCustomProfileSensitivityLevelsList, ).pipe(T.Body("sensitivity_levels")), ), sharedEntries: S.optional( S.NullOr(DlpProfilesListResultItemCustomProfileSharedEntriesList).pipe( T.Body("shared_entries"), ), ), }), ).annotate({ identifier: "DlpProfilesListResultItemCustomProfile", }) as any as S.Schema; export type DlpProfilesListResultItemPredefinedProfileEntriesItemCustomEntryType = "custom"; export const DlpProfilesListResultItemPredefinedProfileEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemPredefinedProfileEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesListResultItemPredefinedProfileEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesListResultItemPredefinedProfileEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesListResultItemPredefinedProfileEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesListResultItemPredefinedProfileEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesListResultItemPredefinedProfileEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesListResultItemPredefinedProfileEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemPredefinedProfileEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemPredefinedProfileEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesListResultItemPredefinedProfileEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemPredefinedProfileEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemPredefinedProfileEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariant = | DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase0 | DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesListResultItemPredefinedProfileEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesListResultItemPredefinedProfileEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemPredefinedProfileEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemPredefinedProfileEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesListResultItemPredefinedProfileEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemPredefinedProfileEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesListResultItemPredefinedProfileEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesListResultItemPredefinedProfileEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesListResultItemPredefinedProfileEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemPredefinedProfileEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesListResultItemPredefinedProfileEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesListResultItemPredefinedProfileEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesListResultItemPredefinedProfileEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemPredefinedProfileEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesListResultItemPredefinedProfileEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesListResultItemPredefinedProfileEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemPredefinedProfileEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemPredefinedProfileEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesListResultItemPredefinedProfileEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemPredefinedProfileEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemPredefinedProfileEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesListResultItemPredefinedProfileEntriesItemWordListEntryType = "word_list"; export const DlpProfilesListResultItemPredefinedProfileEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemPredefinedProfileEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemPredefinedProfileEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesListResultItemPredefinedProfileEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemPredefinedProfileEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesListResultItemPredefinedProfileEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesListResultItemPredefinedProfileEntriesItem = | DlpProfilesListResultItemPredefinedProfileEntriesItemCustomEntry | DlpProfilesListResultItemPredefinedProfileEntriesItemCustomPromptTopicEntry | DlpProfilesListResultItemPredefinedProfileEntriesItemPredefinedEntry | DlpProfilesListResultItemPredefinedProfileEntriesItemIntegrationEntry | DlpProfilesListResultItemPredefinedProfileEntriesItemExactDataEntry | DlpProfilesListResultItemPredefinedProfileEntriesItemDocumentFingerprintEntry | DlpProfilesListResultItemPredefinedProfileEntriesItemWordListEntry; export const DlpProfilesListResultItemPredefinedProfileEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesListResultItemPredefinedProfileEntriesList = Array; export const DlpProfilesListResultItemPredefinedProfileEntriesList = /*@__PURE__*/ S.Array( DlpProfilesListResultItemPredefinedProfileEntriesItem, ) as any as S.Schema; export type DlpProfilesListResultItemPredefinedProfileType = "predefined"; export const DlpProfilesListResultItemPredefinedProfileType = /*@__PURE__*/ S.String; export type DlpProfilesListResultItemPredefinedProfileConfidenceThreshold = | "low" | "medium" | "high" | "very_high"; export const DlpProfilesListResultItemPredefinedProfileConfidenceThreshold = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemPredefinedProfile { /** The id of the predefined profile (uuid). */ id: string; allowedMatchCount: number; entries: DlpProfilesListResultItemPredefinedProfileEntriesList; /** The name of the predefined profile. */ name: string; type: DlpProfilesListResultItemPredefinedProfileType; aiContextEnabled?: boolean | null; confidenceThreshold?: DlpProfilesListResultItemPredefinedProfileConfidenceThreshold | null; /** Scan the context of predefined entries to only return matches surrounded by keywords. */ contextAwareness?: DlpProfilesCustomCreateRequestContextAwareness | null; ocrEnabled?: boolean | null; /** Whether this profile can be accessed by anyone. */ openAccess?: boolean | null; } export const DlpProfilesListResultItemPredefinedProfile = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, allowedMatchCount: S.Number.pipe(T.Body("allowed_match_count")), entries: DlpProfilesListResultItemPredefinedProfileEntriesList, name: S.String, type: DlpProfilesListResultItemPredefinedProfileType, aiContextEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ai_context_enabled")), ), confidenceThreshold: S.optional( S.NullOr( DlpProfilesListResultItemPredefinedProfileConfidenceThreshold, ).pipe(T.Body("confidence_threshold")), ), contextAwareness: S.optional( S.NullOr(DlpProfilesCustomCreateRequestContextAwareness).pipe( T.Body("context_awareness"), ), ), ocrEnabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("ocr_enabled"))), openAccess: S.optional(S.NullOr(S.Boolean).pipe(T.Body("open_access"))), }), ).annotate({ identifier: "DlpProfilesListResultItemPredefinedProfile", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileEntriesItemCustomEntryType = "custom"; export const DlpProfilesListResultItemIntegrationProfileEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesListResultItemIntegrationProfileEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesListResultItemIntegrationProfileEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesListResultItemIntegrationProfileEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesListResultItemIntegrationProfileEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemIntegrationProfileEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesListResultItemIntegrationProfileEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemIntegrationProfileEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariant = | DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase0 | DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesListResultItemIntegrationProfileEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemIntegrationProfileEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesListResultItemIntegrationProfileEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemIntegrationProfileEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesListResultItemIntegrationProfileEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesListResultItemIntegrationProfileEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesListResultItemIntegrationProfileEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesListResultItemIntegrationProfileEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesListResultItemIntegrationProfileEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemIntegrationProfileEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesListResultItemIntegrationProfileEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemIntegrationProfileEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileEntriesItemWordListEntryType = "word_list"; export const DlpProfilesListResultItemIntegrationProfileEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemIntegrationProfileEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesListResultItemIntegrationProfileEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemIntegrationProfileEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileEntriesItem = | DlpProfilesListResultItemIntegrationProfileEntriesItemCustomEntry | DlpProfilesListResultItemIntegrationProfileEntriesItemCustomPromptTopicEntry | DlpProfilesListResultItemIntegrationProfileEntriesItemPredefinedEntry | DlpProfilesListResultItemIntegrationProfileEntriesItemIntegrationEntry | DlpProfilesListResultItemIntegrationProfileEntriesItemExactDataEntry | DlpProfilesListResultItemIntegrationProfileEntriesItemDocumentFingerprintEntry | DlpProfilesListResultItemIntegrationProfileEntriesItemWordListEntry; export const DlpProfilesListResultItemIntegrationProfileEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesListResultItemIntegrationProfileEntriesList = Array; export const DlpProfilesListResultItemIntegrationProfileEntriesList = /*@__PURE__*/ S.Array( DlpProfilesListResultItemIntegrationProfileEntriesItem, ) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomEntryType = "custom"; export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesListResultItemCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariant = | DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0 | DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileSharedEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileSharedEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileSharedEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileSharedEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileSharedEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileSharedEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileSharedEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileSharedEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileSharedEntriesItemWordListEntryType = "word_list"; export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfileSharedEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesListResultItemIntegrationProfileSharedEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfileSharedEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileSharedEntriesItem = | DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomEntry | DlpProfilesListResultItemIntegrationProfileSharedEntriesItemCustomPromptTopicEntry | DlpProfilesListResultItemIntegrationProfileSharedEntriesItemPredefinedEntry | DlpProfilesListResultItemIntegrationProfileSharedEntriesItemIntegrationEntry | DlpProfilesListResultItemIntegrationProfileSharedEntriesItemExactDataEntry | DlpProfilesListResultItemIntegrationProfileSharedEntriesItemDocumentFingerprintEntry | DlpProfilesListResultItemIntegrationProfileSharedEntriesItemWordListEntry; export const DlpProfilesListResultItemIntegrationProfileSharedEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesListResultItemIntegrationProfileSharedEntriesList = Array; export const DlpProfilesListResultItemIntegrationProfileSharedEntriesList = /*@__PURE__*/ S.Array( DlpProfilesListResultItemIntegrationProfileSharedEntriesItem, ) as any as S.Schema; export type DlpProfilesListResultItemIntegrationProfileType = "integration"; export const DlpProfilesListResultItemIntegrationProfileType = /*@__PURE__*/ S.String; export interface DlpProfilesListResultItemIntegrationProfile { id: string; createdAt: string; entries: DlpProfilesListResultItemIntegrationProfileEntriesList; name: string; sharedEntries: DlpProfilesListResultItemIntegrationProfileSharedEntriesList; type: DlpProfilesListResultItemIntegrationProfileType; updatedAt: string; /** The description of the profile. */ description?: string | null; } export const DlpProfilesListResultItemIntegrationProfile = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), entries: DlpProfilesListResultItemIntegrationProfileEntriesList, name: S.String, sharedEntries: DlpProfilesListResultItemIntegrationProfileSharedEntriesList.pipe( T.Body("shared_entries"), ), type: DlpProfilesListResultItemIntegrationProfileType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesListResultItemIntegrationProfile", }) as any as S.Schema; export type DlpProfilesListResultItem = | DlpProfilesListResultItemCustomProfile | DlpProfilesListResultItemPredefinedProfile | DlpProfilesListResultItemIntegrationProfile; export const DlpProfilesListResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "allowedMatchCount", "createdAt", "name", "ocrEnabled", "type", "updatedAt", "aiContextEnabled", "confidenceThreshold", "contextAwareness", "dataClasses", "dataTags", "description", "entries", "sensitivityLevels", "sharedEntries", ], [ "id", "allowedMatchCount", "entries", "name", "type", "aiContextEnabled", "confidenceThreshold", "contextAwareness", "ocrEnabled", "openAccess", ], [ "id", "createdAt", "entries", "name", "sharedEntries", "type", "updatedAt", "description", ], ]), ); export type DlpProfilesListResultList = Array; export const DlpProfilesListResultList = /*@__PURE__*/ S.Array( DlpProfilesListResultItem, ) as any as S.Schema; export interface ListDlpProfilesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DlpProfilesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDlpProfilesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DlpProfilesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpProfilesResponse", }) as any as S.Schema; export interface ListDlpSensitivityGroupLevelsRequest { accountId: string; sensitivityGroupId: string; } export const ListDlpSensitivityGroupLevelsRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), sensitivityGroupId: S.String.pipe(T.Label("sensitivity_group_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}/levels", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpSensitivityGroupLevelsRequest", }) as any as S.Schema; export type DlpSensitivityGroupsLevelsListResultItem = DlpDataTagCategoriesCreateResponseTagsItem; export const DlpSensitivityGroupsLevelsListResultItem = DlpDataTagCategoriesCreateResponseTagsItem; export type DlpSensitivityGroupsLevelsListResultList = Array; export const DlpSensitivityGroupsLevelsListResultList = /*@__PURE__*/ S.Array( DlpDataTagCategoriesCreateResponseTagsItem, ) as any as S.Schema; export interface ListDlpSensitivityGroupLevelsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DlpSensitivityGroupsLevelsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDlpSensitivityGroupLevelsResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: DlpSensitivityGroupsLevelsListResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpSensitivityGroupLevelsResponse", }) as any as S.Schema; export interface ListDlpSensitivityGroupsRequest { accountId: string; } export const ListDlpSensitivityGroupsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dlp/sensitivity_groups", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpSensitivityGroupsRequest", }) as any as S.Schema; export type DlpSensitivityGroupsListResultItemLevelsItem = DlpDataTagCategoriesCreateResponseTagsItem; export const DlpSensitivityGroupsListResultItemLevelsItem = DlpDataTagCategoriesCreateResponseTagsItem; export type DlpSensitivityGroupsListResultItemLevelsList = Array; export const DlpSensitivityGroupsListResultItemLevelsList = /*@__PURE__*/ S.Array( DlpDataTagCategoriesCreateResponseTagsItem, ) as any as S.Schema; export interface DlpSensitivityGroupsListResultItem { id: string; createdAt: string; levels: DlpSensitivityGroupsListResultItemLevelsList; name: string; updatedAt: string; description?: string | null; templateId?: string | null; } export const DlpSensitivityGroupsListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), levels: DlpSensitivityGroupsListResultItemLevelsList, name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), templateId: S.optional(S.NullOr(S.String).pipe(T.Body("template_id"))), }), ).annotate({ identifier: "DlpSensitivityGroupsListResultItem", }) as any as S.Schema; export type DlpSensitivityGroupsListResultList = Array; export const DlpSensitivityGroupsListResultList = /*@__PURE__*/ S.Array( DlpSensitivityGroupsListResultItem, ) as any as S.Schema; export interface ListDlpSensitivityGroupsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DlpSensitivityGroupsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListDlpSensitivityGroupsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DlpSensitivityGroupsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListDlpSensitivityGroupsResponse", }) as any as S.Schema; export interface ListGatewayAppTypesRequest { /** Provide the identifier string. */ accountId: string; } export const ListGatewayAppTypesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/app_types", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayAppTypesRequest", }) as any as S.Schema; export interface GatewayAppTypesListResultItemZeroTrustGatewayApplication { /** Identify this application. Only one application per ID. */ id?: number | null; /** Identify the type of this application. Multiple applications can share the same type. Refers to the `id` of a returned application type. */ applicationTypeId?: number | null; createdAt?: string | null; /** Specify the name of the application or application type. */ name?: string | null; } export const GatewayAppTypesListResultItemZeroTrustGatewayApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.Number)), applicationTypeId: S.optional( S.NullOr(S.Number).pipe(T.Body("application_type_id")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), name: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "GatewayAppTypesListResultItemZeroTrustGatewayApplication", }) as any as S.Schema; export interface GatewayAppTypesListResultItemZeroTrustGatewayApplicationType { /** Identify the type of this application. Multiple applications can share the same type. Refers to the `id` of a returned application type. */ id?: number | null; createdAt?: string | null; /** Provide a short summary of applications with this type. */ description?: string | null; /** Specify the name of the application or application type. */ name?: string | null; } export const GatewayAppTypesListResultItemZeroTrustGatewayApplicationType = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.Number)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), description: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "GatewayAppTypesListResultItemZeroTrustGatewayApplicationType", }) as any as S.Schema; export type GatewayAppTypesListResultItem = | GatewayAppTypesListResultItemZeroTrustGatewayApplication | GatewayAppTypesListResultItemZeroTrustGatewayApplicationType; export const GatewayAppTypesListResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["id", "applicationTypeId", "createdAt", "name"], ["id", "createdAt", "description", "name"], ]), ); export type GatewayAppTypesListResultList = Array; export const GatewayAppTypesListResultList = /*@__PURE__*/ S.Array( GatewayAppTypesListResultItem, ) as any as S.Schema; export interface ListGatewayAppTypesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: GatewayAppTypesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListGatewayAppTypesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: GatewayAppTypesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayAppTypesResponse", }) as any as S.Schema; export interface ListGatewayCategoriesRequest { /** Provide the identifier string. */ accountId: string; } export const ListGatewayCategoriesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/categories", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayCategoriesRequest", }) as any as S.Schema; export type GatewayCategoriesListResultItemClass = | "free" | "premium" | "blocked" | "removalPending" | "noBlock"; export const GatewayCategoriesListResultItemClass = /*@__PURE__*/ S.String; export type GatewayCategoriesListResultItemSubcategoriesItemClass = | "free" | "premium" | "blocked" | "removalPending" | "noBlock"; export const GatewayCategoriesListResultItemSubcategoriesItemClass = /*@__PURE__*/ S.String; export interface GatewayCategoriesListResultItemSubcategoriesItem { /** Identify this category. Only one category per ID. */ id?: number | null; /** Indicate whether the category is in beta and subject to change. */ beta?: boolean | null; /** Specify which account types can create policies for this category. `blocked` Blocks unconditionally for all accounts. `removalPending` Allows removal from policies but disables addition. `noBlock` Prevents blocking. */ class?: GatewayCategoriesListResultItemSubcategoriesItemClass | null; /** Provide a short summary of domains in the category. */ description?: string | null; /** Specify the category name. */ name?: string | null; } export const GatewayCategoriesListResultItemSubcategoriesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.Number)), beta: S.optional(S.NullOr(S.Boolean)), class: S.optional( S.NullOr(GatewayCategoriesListResultItemSubcategoriesItemClass), ), description: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "GatewayCategoriesListResultItemSubcategoriesItem", }) as any as S.Schema; export type GatewayCategoriesListResultItemSubcategoriesList = Array; export const GatewayCategoriesListResultItemSubcategoriesList = /*@__PURE__*/ S.Array( GatewayCategoriesListResultItemSubcategoriesItem, ) as any as S.Schema; export interface GatewayCategoriesListResultItem { /** Identify this category. Only one category per ID. */ id?: number | null; /** Indicate whether the category is in beta and subject to change. */ beta?: boolean | null; /** Specify which account types can create policies for this category. `blocked` Blocks unconditionally for all accounts. `removalPending` Allows removal from policies but disables addition. `noBlock` Prevents blocking. */ class?: GatewayCategoriesListResultItemClass | null; /** Provide a short summary of domains in the category. */ description?: string | null; /** Specify the category name. */ name?: string | null; /** Provide all subcategories for this category. */ subcategories?: GatewayCategoriesListResultItemSubcategoriesList | null; } export const GatewayCategoriesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.Number)), beta: S.optional(S.NullOr(S.Boolean)), class: S.optional(S.NullOr(GatewayCategoriesListResultItemClass)), description: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), subcategories: S.optional( S.NullOr(GatewayCategoriesListResultItemSubcategoriesList), ), }), ).annotate({ identifier: "GatewayCategoriesListResultItem", }) as any as S.Schema; export type GatewayCategoriesListResultList = Array; export const GatewayCategoriesListResultList = /*@__PURE__*/ S.Array( GatewayCategoriesListResultItem, ) as any as S.Schema; export interface ListGatewayCategoriesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: GatewayCategoriesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListGatewayCategoriesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: GatewayCategoriesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayCategoriesResponse", }) as any as S.Schema; export interface ListGatewayCertificatesRequest { accountId: string; } export const ListGatewayCertificatesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/certificates", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayCertificatesRequest", }) as any as S.Schema; export type GatewayCertificatesListResultItemBindingStatus = | "pending_deployment" | "available" | "pending_deletion" | "inactive"; export const GatewayCertificatesListResultItemBindingStatus = /*@__PURE__*/ S.String; export type GatewayCertificatesListResultItemType = | "custom" | "gateway_managed"; export const GatewayCertificatesListResultItemType = /*@__PURE__*/ S.String; export interface GatewayCertificatesListResultItem { /** Identify the certificate with a UUID. */ id?: string | null; /** Indicate the read-only deployment status of the certificate on Cloudflare's edge. Gateway TLS interception can use certificates in the 'available' (previously called 'active') state. */ bindingStatus?: GatewayCertificatesListResultItemBindingStatus | null; /** Provide the CA certificate (read-only). */ certificate?: string | null; createdAt?: string | null; expiresOn?: string | null; /** Provide the SHA256 fingerprint of the certificate (read-only). */ fingerprint?: string | null; /** Indicate whether Gateway TLS interception uses this certificate (read-only). You cannot set this value directly. To configure interception, use the Gateway configuration setting named `certificate` (read-only). */ inUse?: boolean | null; /** Indicate the organization that issued the certificate (read-only). */ issuerOrg?: string | null; /** Provide the entire issuer field of the certificate (read-only). */ issuerRaw?: string | null; /** Indicate the read-only certificate type, BYO-PKI (custom) or Gateway-managed. */ type?: GatewayCertificatesListResultItemType | null; updatedAt?: string | null; uploadedOn?: string | null; } export const GatewayCertificatesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), bindingStatus: S.optional( S.NullOr(GatewayCertificatesListResultItemBindingStatus).pipe( T.Body("binding_status"), ), ), certificate: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), expiresOn: S.optional(S.NullOr(S.String).pipe(T.Body("expires_on"))), fingerprint: S.optional(S.NullOr(S.String)), inUse: S.optional(S.NullOr(S.Boolean).pipe(T.Body("in_use"))), issuerOrg: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_org"))), issuerRaw: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_raw"))), type: S.optional(S.NullOr(GatewayCertificatesListResultItemType)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), uploadedOn: S.optional(S.NullOr(S.String).pipe(T.Body("uploaded_on"))), }), ).annotate({ identifier: "GatewayCertificatesListResultItem", }) as any as S.Schema; export type GatewayCertificatesListResultList = Array; export const GatewayCertificatesListResultList = /*@__PURE__*/ S.Array( GatewayCertificatesListResultItem, ) as any as S.Schema; export interface ListGatewayCertificatesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: GatewayCertificatesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListGatewayCertificatesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: GatewayCertificatesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayCertificatesResponse", }) as any as S.Schema; export interface ListGatewayListItemsRequest { accountId: string; /** Identify the API resource with a UUID. */ listId: string; } export const ListGatewayListItemsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), listId: S.String.pipe(T.Label("list_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/lists/{list_id}/items", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayListItemsRequest", }) as any as S.Schema; export type GatewayListsItemsListResultItem = GatewayListsCreateResponseItemsItem; export const GatewayListsItemsListResultItem = GatewayListsCreateResponseItemsItem; export type GatewayListsItemsListResultList = Array; export const GatewayListsItemsListResultList = /*@__PURE__*/ S.Array( GatewayListsCreateResponseItemsItem, ) as any as S.Schema; export interface ListGatewayListItemsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: GatewayListsItemsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListGatewayListItemsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: GatewayListsItemsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayListItemsResponse", }) as any as S.Schema; export type GatewayListsListRequestType = | "SERIAL" | "URL" | "DOMAIN" | "EMAIL" | "IP" | "CATEGORY" | "LOCATION" | "DEVICE" | "AAGUID"; export const GatewayListsListRequestType = /*@__PURE__*/ S.String; export interface ListGatewayListsRequest { accountId: string; /** Specify the list type. */ type?: GatewayListsListRequestType | (string & {}); } export const ListGatewayListsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), type: S.optional(GatewayListsListRequestType.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/lists", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayListsRequest", }) as any as S.Schema; export type GatewayListsListResultItemItemsItem = GatewayListsCreateResponseItemsItem; export const GatewayListsListResultItemItemsItem = GatewayListsCreateResponseItemsItem; export type GatewayListsListResultItemItemsList = Array; export const GatewayListsListResultItemItemsList = /*@__PURE__*/ S.Array( GatewayListsCreateResponseItemsItem, ) as any as S.Schema; export type GatewayListsListResultItemType = | "SERIAL" | "URL" | "DOMAIN" | "EMAIL" | "IP" | "CATEGORY" | "LOCATION" | "DEVICE" | "AAGUID"; export const GatewayListsListResultItemType = /*@__PURE__*/ S.String; export interface GatewayListsListResultItem { /** Identify the API resource with a UUID. */ id?: string | null; /** Indicate the number of items in the list. */ count?: number | null; createdAt?: string | null; /** Provide the list description. */ description?: string | null; /** Provide the list items. */ items?: GatewayListsListResultItemItemsList | null; /** Specify the list name. */ name?: string | null; /** Specify the list type. */ type?: GatewayListsListResultItemType | null; updatedAt?: string | null; } export const GatewayListsListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), count: S.optional(S.NullOr(S.Number)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), description: S.optional(S.NullOr(S.String)), items: S.optional(S.NullOr(GatewayListsListResultItemItemsList)), name: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(GatewayListsListResultItemType)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "GatewayListsListResultItem", }) as any as S.Schema; export type GatewayListsListResultList = Array; export const GatewayListsListResultList = /*@__PURE__*/ S.Array( GatewayListsListResultItem, ) as any as S.Schema; export interface ListGatewayListsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: GatewayListsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListGatewayListsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: GatewayListsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayListsResponse", }) as any as S.Schema; export interface ListGatewayLocationsRequest { accountId: string; } export const ListGatewayLocationsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/locations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayLocationsRequest", }) as any as S.Schema; export type GatewayLocationsListResultItemEndpointsDohNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export const GatewayLocationsListResultItemEndpointsDohNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export type GatewayLocationsListResultItemEndpointsDohNetworksList = Array; export const GatewayLocationsListResultItemEndpointsDohNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsDohNetworksItem, ) as any as S.Schema; export interface GatewayLocationsListResultItemEndpointsDoh { /** Indicate whether the DOH endpoint is enabled for this location. */ enabled?: boolean | null; /** Specify the list of allowed source IP network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsListResultItemEndpointsDohNetworksList | null; /** Specify whether the DOH endpoint requires user identity authentication. */ requireToken?: boolean | null; } export const GatewayLocationsListResultItemEndpointsDoh = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), networks: S.optional( S.NullOr(GatewayLocationsListResultItemEndpointsDohNetworksList), ), requireToken: S.optional( S.NullOr(S.Boolean).pipe(T.Body("require_token")), ), }), ).annotate({ identifier: "GatewayLocationsListResultItemEndpointsDoh", }) as any as S.Schema; export type GatewayLocationsListResultItemEndpointsDotNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export const GatewayLocationsListResultItemEndpointsDotNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export type GatewayLocationsListResultItemEndpointsDotNetworksList = Array; export const GatewayLocationsListResultItemEndpointsDotNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsDohNetworksItem, ) as any as S.Schema; export interface GatewayLocationsListResultItemEndpointsDot { /** Indicate whether the DOT endpoint is enabled for this location. */ enabled?: boolean | null; /** Specify the list of allowed source IP network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsListResultItemEndpointsDotNetworksList | null; } export const GatewayLocationsListResultItemEndpointsDot = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), networks: S.optional( S.NullOr(GatewayLocationsListResultItemEndpointsDotNetworksList), ), }), ).annotate({ identifier: "GatewayLocationsListResultItemEndpointsDot", }) as any as S.Schema; export type GatewayLocationsListResultItemEndpointsIpv4 = GatewayLocationsCreateResponseEndpointsIpv4; export const GatewayLocationsListResultItemEndpointsIpv4 = GatewayLocationsCreateResponseEndpointsIpv4; export type GatewayLocationsListResultItemEndpointsIpv6NetworksItem = GatewayLocationsCreateRequestEndpointsIpv6NetworksItem; export const GatewayLocationsListResultItemEndpointsIpv6NetworksItem = GatewayLocationsCreateRequestEndpointsIpv6NetworksItem; export type GatewayLocationsListResultItemEndpointsIpv6NetworksList = Array; export const GatewayLocationsListResultItemEndpointsIpv6NetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsIpv6NetworksItem, ) as any as S.Schema; export interface GatewayLocationsListResultItemEndpointsIpv6 { /** Indicate whether the IPV6 endpoint is enabled for this location. */ enabled?: boolean | null; /** Specify the list of allowed source IPv6 network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsListResultItemEndpointsIpv6NetworksList | null; } export const GatewayLocationsListResultItemEndpointsIpv6 = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), networks: S.optional( S.NullOr(GatewayLocationsListResultItemEndpointsIpv6NetworksList), ), }), ).annotate({ identifier: "GatewayLocationsListResultItemEndpointsIpv6", }) as any as S.Schema; export interface GatewayLocationsListResultItemEndpoints { doh: GatewayLocationsListResultItemEndpointsDoh; dot: GatewayLocationsListResultItemEndpointsDot; ipv4: GatewayLocationsCreateResponseEndpointsIpv4; ipv6: GatewayLocationsListResultItemEndpointsIpv6; } export const GatewayLocationsListResultItemEndpoints = /*@__PURE__*/ S.suspend( () => S.Struct({ doh: GatewayLocationsListResultItemEndpointsDoh, dot: GatewayLocationsListResultItemEndpointsDot, ipv4: GatewayLocationsCreateResponseEndpointsIpv4, ipv6: GatewayLocationsListResultItemEndpointsIpv6, }), ).annotate({ identifier: "GatewayLocationsListResultItemEndpoints", }) as any as S.Schema; export type GatewayLocationsListResultItemMaxTtlMode = | "inherit" | "override" | "disabled"; export const GatewayLocationsListResultItemMaxTtlMode = /*@__PURE__*/ S.String; export interface GatewayLocationsListResultItemMaxTtl { /** `inherit` uses the account `max_ttl_secs`. `override` uses this location's `ttl_secs`. `disabled` leaves returned TTLs unchanged. */ mode: GatewayLocationsListResultItemMaxTtlMode; /** Location-specific cap on DNS response TTLs, in seconds. Required when `mode` is `override`. Must be omitted when `mode` is `inherit` or `disabled`. */ ttlSecs?: number | null; } export const GatewayLocationsListResultItemMaxTtl = /*@__PURE__*/ S.suspend( () => S.Struct({ mode: GatewayLocationsListResultItemMaxTtlMode, ttlSecs: S.optional(S.NullOr(S.Number).pipe(T.Body("ttl_secs"))), }), ).annotate({ identifier: "GatewayLocationsListResultItemMaxTtl", }) as any as S.Schema; export type GatewayLocationsListResultItemNetworksItem = GatewayLocationsCreateRequestNetworksItem; export const GatewayLocationsListResultItemNetworksItem = GatewayLocationsCreateRequestNetworksItem; export type GatewayLocationsListResultItemNetworksList = Array; export const GatewayLocationsListResultItemNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestNetworksItem, ) as any as S.Schema; export interface GatewayLocationsListResultItem { id?: string | null; /** Indicate whether this location is the default location. */ clientDefault?: boolean | null; createdAt?: string | null; /** Indicate the identifier of the pair of IPv4 addresses assigned to this location. */ dnsDestinationIpsId?: string | null; /** Specify the UUID of the IPv6 block brought to the gateway so that this location's IPv6 address is allocated from the Bring Your Own IPv6 (BYOIPv6) block rather than the standard Cloudflare IPv6 block. */ dnsDestinationIpv6BlockId?: string | null; /** Specify the DNS over HTTPS domain that receives DNS requests. Gateway automatically generates this value. */ dohSubdomain?: string | null; /** Indicate whether the location must resolve EDNS queries. */ ecsSupport?: boolean | null; /** Configure the destination endpoints for this location. */ endpoints?: GatewayLocationsListResultItemEndpoints | null; /** Defines the automatically generated IPv6 destination IP assigned to this location. Gateway counts all DNS requests sent to this IP as requests under this location. */ ip?: string | null; /** Show the primary destination IPv4 address from the pair identified dns_destination_ips_id. This field read-only. */ ipv4Destination?: string | null; /** Show the backup destination IPv4 address from the pair identified dns_destination_ips_id. This field read-only. */ ipv4DestinationBackup?: string | null; /** Controls how DNS response TTLs are capped for this location relative to the account `max_ttl_secs` setting. Omitting `max_ttl` on update resets it to `inherit`. */ maxTtl?: GatewayLocationsListResultItemMaxTtl | null; /** Specify the location name. */ name?: string | null; /** Specify the list of network ranges from which requests at this location originate. The list takes effect only if it is non-empty and the IPv4 endpoint is enabled for this location. */ networks?: GatewayLocationsListResultItemNetworksList | null; updatedAt?: string | null; } export const GatewayLocationsListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), clientDefault: S.optional( S.NullOr(S.Boolean).pipe(T.Body("client_default")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), dnsDestinationIpsId: S.optional( S.NullOr(S.String).pipe(T.Body("dns_destination_ips_id")), ), dnsDestinationIpv6BlockId: S.optional( S.NullOr(S.String).pipe(T.Body("dns_destination_ipv6_block_id")), ), dohSubdomain: S.optional(S.NullOr(S.String).pipe(T.Body("doh_subdomain"))), ecsSupport: S.optional(S.NullOr(S.Boolean).pipe(T.Body("ecs_support"))), endpoints: S.optional(S.NullOr(GatewayLocationsListResultItemEndpoints)), ip: S.optional(S.NullOr(S.String)), ipv4Destination: S.optional( S.NullOr(S.String).pipe(T.Body("ipv4_destination")), ), ipv4DestinationBackup: S.optional( S.NullOr(S.String).pipe(T.Body("ipv4_destination_backup")), ), maxTtl: S.optional( S.NullOr(GatewayLocationsListResultItemMaxTtl).pipe(T.Body("max_ttl")), ), name: S.optional(S.NullOr(S.String)), networks: S.optional(S.NullOr(GatewayLocationsListResultItemNetworksList)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "GatewayLocationsListResultItem", }) as any as S.Schema; export type GatewayLocationsListResultList = Array; export const GatewayLocationsListResultList = /*@__PURE__*/ S.Array( GatewayLocationsListResultItem, ) as any as S.Schema; export interface ListGatewayLocationsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: GatewayLocationsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListGatewayLocationsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: GatewayLocationsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayLocationsResponse", }) as any as S.Schema; export interface ListGatewayPacfilesRequest { accountId: string; } export const ListGatewayPacfilesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/pacfiles", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayPacfilesRequest", }) as any as S.Schema; export interface GatewayPacfilesListResultItem { id?: string | null; createdAt?: string | null; /** Detailed description of the PAC file. */ description?: string | null; /** Name of the PAC file. */ name?: string | null; /** URL-friendly version of the PAC file name. */ slug?: string | null; updatedAt?: string | null; /** Unique URL to download the PAC file. */ url?: string | null; } export const GatewayPacfilesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), description: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), slug: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), url: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "GatewayPacfilesListResultItem", }) as any as S.Schema; export type GatewayPacfilesListResultList = Array; export const GatewayPacfilesListResultList = /*@__PURE__*/ S.Array( GatewayPacfilesListResultItem, ) as any as S.Schema; export interface ListGatewayPacfilesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: GatewayPacfilesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListGatewayPacfilesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: GatewayPacfilesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayPacfilesResponse", }) as any as S.Schema; export interface ListGatewayProxyEndpointsRequest { accountId: string; } export const ListGatewayProxyEndpointsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/proxy_endpoints", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayProxyEndpointsRequest", }) as any as S.Schema; export type GatewayProxyEndpointsListResultItemIPIpsList = Array; export const GatewayProxyEndpointsListResultItemIPIpsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayProxyEndpointsListResultItemIPKind = "ip"; export const GatewayProxyEndpointsListResultItemIPKind = /*@__PURE__*/ S.String; export interface GatewayProxyEndpointsListResultItemIP { /** Specify the list of CIDRs to restrict ingress connections. */ ips?: GatewayProxyEndpointsListResultItemIPIpsList | null; /** Specify the name of the proxy endpoint. */ name: string; id?: string | null; createdAt?: string | null; /** The proxy endpoint kind */ kind?: GatewayProxyEndpointsListResultItemIPKind | null; /** Specify the subdomain to use as the destination in the proxy client. */ subdomain?: string | null; updatedAt?: string | null; } export const GatewayProxyEndpointsListResultItemIP = /*@__PURE__*/ S.suspend( () => S.Struct({ ips: S.optional(S.NullOr(GatewayProxyEndpointsListResultItemIPIpsList)), name: S.String, id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), kind: S.optional(S.NullOr(GatewayProxyEndpointsListResultItemIPKind)), subdomain: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "GatewayProxyEndpointsListResultItemIP", }) as any as S.Schema; export type GatewayProxyEndpointsListResultItemIdentityKind = "identity"; export const GatewayProxyEndpointsListResultItemIdentityKind = /*@__PURE__*/ S.String; export interface GatewayProxyEndpointsListResultItemIdentity { /** The proxy endpoint kind */ kind: GatewayProxyEndpointsListResultItemIdentityKind; /** Specify the name of the proxy endpoint. */ name: string; id?: string | null; createdAt?: string | null; /** Specify the subdomain to use as the destination in the proxy client. */ subdomain?: string | null; updatedAt?: string | null; } export const GatewayProxyEndpointsListResultItemIdentity = /*@__PURE__*/ S.suspend(() => S.Struct({ kind: GatewayProxyEndpointsListResultItemIdentityKind, name: S.String, id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), subdomain: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "GatewayProxyEndpointsListResultItemIdentity", }) as any as S.Schema; export type GatewayProxyEndpointsListResultItem = | GatewayProxyEndpointsListResultItemIP | GatewayProxyEndpointsListResultItemIdentity; export const GatewayProxyEndpointsListResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["ips", "name", "id", "createdAt", "kind", "subdomain", "updatedAt"], ["kind", "name", "id", "createdAt", "subdomain", "updatedAt"], ]), ); export type GatewayProxyEndpointsListResultList = Array; export const GatewayProxyEndpointsListResultList = /*@__PURE__*/ S.Array( GatewayProxyEndpointsListResultItem, ) as any as S.Schema; export interface ListGatewayProxyEndpointsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: GatewayProxyEndpointsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListGatewayProxyEndpointsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: GatewayProxyEndpointsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayProxyEndpointsResponse", }) as any as S.Schema; export interface ListGatewayRulesRequest { accountId: string; } export const ListGatewayRulesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/rules", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayRulesRequest", }) as any as S.Schema; export type GatewayRulesListResultItemAction = | "on" | "off" | "allow" | "block" | "scan" | "noscan" | "safesearch" | "ytrestricted" | "isolate" | "noisolate" | "override" | "l4_override" | "egress" | "resolve" | "quarantine" | "redirect"; export const GatewayRulesListResultItemAction = /*@__PURE__*/ S.String; export type GatewayRulesListResultItemFiltersItem = | "http" | "dns" | "l4" | "egress" | "dns_resolver"; export const GatewayRulesListResultItemFiltersItem = /*@__PURE__*/ S.String; export type GatewayRulesListResultItemFiltersList = Array; export const GatewayRulesListResultItemFiltersList = /*@__PURE__*/ S.Array( GatewayRulesListResultItemFiltersItem, ) as any as S.Schema; export type GatewayRulesListResultItemExpiration = GatewayRulesCreateResponseExpiration; export const GatewayRulesListResultItemExpiration = GatewayRulesCreateResponseExpiration; export type GatewayRulesListResultItemRuleSettingsAddHeadersValueList = Array; export const GatewayRulesListResultItemRuleSettingsAddHeadersValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayRulesListResultItemRuleSettingsAddHeadersMap = { [key: string]: | GatewayRulesListResultItemRuleSettingsAddHeadersValueList | undefined; }; export const GatewayRulesListResultItemRuleSettingsAddHeadersMap = /*@__PURE__*/ S.Record( S.String, GatewayRulesListResultItemRuleSettingsAddHeadersValueList, ) as any as S.Schema; export type GatewayRulesListResultItemRuleSettingsAuditSsh = GatewayRulesCreateResponseRuleSettingsAuditSsh; export const GatewayRulesListResultItemRuleSettingsAuditSsh = GatewayRulesCreateResponseRuleSettingsAuditSsh; export type GatewayRulesListResultItemRuleSettingsBisoAdminControlsCopy = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesListResultItemRuleSettingsBisoAdminControlsCopy = /*@__PURE__*/ S.String; export type GatewayRulesListResultItemRuleSettingsBisoAdminControlsDownload = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesListResultItemRuleSettingsBisoAdminControlsDownload = /*@__PURE__*/ S.String; export type GatewayRulesListResultItemRuleSettingsBisoAdminControlsKeyboard = | "enabled" | "disabled"; export const GatewayRulesListResultItemRuleSettingsBisoAdminControlsKeyboard = /*@__PURE__*/ S.String; export type GatewayRulesListResultItemRuleSettingsBisoAdminControlsPaste = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesListResultItemRuleSettingsBisoAdminControlsPaste = /*@__PURE__*/ S.String; export type GatewayRulesListResultItemRuleSettingsBisoAdminControlsPrinting = | "enabled" | "disabled"; export const GatewayRulesListResultItemRuleSettingsBisoAdminControlsPrinting = /*@__PURE__*/ S.String; export type GatewayRulesListResultItemRuleSettingsBisoAdminControlsUpload = | "enabled" | "disabled"; export const GatewayRulesListResultItemRuleSettingsBisoAdminControlsUpload = /*@__PURE__*/ S.String; export type GatewayRulesListResultItemRuleSettingsBisoAdminControlsVersion = | "v1" | "v2"; export const GatewayRulesListResultItemRuleSettingsBisoAdminControlsVersion = /*@__PURE__*/ S.String; export interface GatewayRulesListResultItemRuleSettingsBisoAdminControls { /** Configure copy behavior. If set to remote_only, users cannot copy isolated content from the remote browser to the local clipboard. If this field is absent, copying remains enabled. Applies only when version == "v2". */ copy?: GatewayRulesListResultItemRuleSettingsBisoAdminControlsCopy | null; /** Set to false to enable copy-pasting. Only applies when `version == "v1"`. */ dcp?: boolean | null; /** Set to false to enable downloading. Only applies when `version == "v1"`. */ dd?: boolean | null; /** Set to false to enable keyboard usage. Only applies when `version == "v1"`. */ dk?: boolean | null; /** Configure download behavior. When set to remote_only, users can view downloads but cannot save them. If this field is absent, downloading remains enabled. Applies only when version == "v2". */ download?: GatewayRulesListResultItemRuleSettingsBisoAdminControlsDownload | null; /** Set to false to enable printing. Only applies when `version == "v1"`. */ dp?: boolean | null; /** Set to false to enable uploading. Only applies when `version == "v1"`. */ du?: boolean | null; /** Configure keyboard usage behavior. If this field is absent, keyboard usage remains enabled. Applies only when version == "v2". */ keyboard?: GatewayRulesListResultItemRuleSettingsBisoAdminControlsKeyboard | null; /** Configure paste behavior. If set to remote_only, users cannot paste content from the local clipboard into isolated pages. If this field is absent, pasting remains enabled. Applies only when version == "v2". */ paste?: GatewayRulesListResultItemRuleSettingsBisoAdminControlsPaste | null; /** Configure print behavior. Default, Printing is enabled. Applies only when version == "v2". */ printing?: GatewayRulesListResultItemRuleSettingsBisoAdminControlsPrinting | null; /** Configure upload behavior. If this field is absent, uploading remains enabled. Applies only when version == "v2". */ upload?: GatewayRulesListResultItemRuleSettingsBisoAdminControlsUpload | null; /** Indicate which version of the browser isolation controls should apply. */ version?: GatewayRulesListResultItemRuleSettingsBisoAdminControlsVersion | null; /** Specify the watermark ID (UUID) to apply to the isolated browser session. When present, enables watermark rendering in the isolated browser. */ wmId?: string | null; } export const GatewayRulesListResultItemRuleSettingsBisoAdminControls = /*@__PURE__*/ S.suspend(() => S.Struct({ copy: S.optional( S.NullOr(GatewayRulesListResultItemRuleSettingsBisoAdminControlsCopy), ), dcp: S.optional(S.NullOr(S.Boolean)), dd: S.optional(S.NullOr(S.Boolean)), dk: S.optional(S.NullOr(S.Boolean)), download: S.optional( S.NullOr( GatewayRulesListResultItemRuleSettingsBisoAdminControlsDownload, ), ), dp: S.optional(S.NullOr(S.Boolean)), du: S.optional(S.NullOr(S.Boolean)), keyboard: S.optional( S.NullOr( GatewayRulesListResultItemRuleSettingsBisoAdminControlsKeyboard, ), ), paste: S.optional( S.NullOr(GatewayRulesListResultItemRuleSettingsBisoAdminControlsPaste), ), printing: S.optional( S.NullOr( GatewayRulesListResultItemRuleSettingsBisoAdminControlsPrinting, ), ), upload: S.optional( S.NullOr(GatewayRulesListResultItemRuleSettingsBisoAdminControlsUpload), ), version: S.optional( S.NullOr( GatewayRulesListResultItemRuleSettingsBisoAdminControlsVersion, ), ), wmId: S.optional(S.NullOr(S.String).pipe(T.Body("wm_id"))), }), ).annotate({ identifier: "GatewayRulesListResultItemRuleSettingsBisoAdminControls", }) as any as S.Schema; export type GatewayRulesListResultItemRuleSettingsBlockPage = GatewayRulesCreateResponseRuleSettingsBlockPage; export const GatewayRulesListResultItemRuleSettingsBlockPage = GatewayRulesCreateResponseRuleSettingsBlockPage; export type GatewayRulesListResultItemRuleSettingsCheckSession = GatewayRulesCreateResponseRuleSettingsCheckSession; export const GatewayRulesListResultItemRuleSettingsCheckSession = GatewayRulesCreateResponseRuleSettingsCheckSession; export type GatewayRulesListResultItemRuleSettingsDnsResolversIpv4Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item; export const GatewayRulesListResultItemRuleSettingsDnsResolversIpv4Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item; export type GatewayRulesListResultItemRuleSettingsDnsResolversIpv4List = Array; export const GatewayRulesListResultItemRuleSettingsDnsResolversIpv4List = /*@__PURE__*/ S.Array( GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item, ) as any as S.Schema; export type GatewayRulesListResultItemRuleSettingsDnsResolversIpv6Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item; export const GatewayRulesListResultItemRuleSettingsDnsResolversIpv6Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item; export type GatewayRulesListResultItemRuleSettingsDnsResolversIpv6List = Array; export const GatewayRulesListResultItemRuleSettingsDnsResolversIpv6List = /*@__PURE__*/ S.Array( GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item, ) as any as S.Schema; export interface GatewayRulesListResultItemRuleSettingsDnsResolvers { ipv4?: GatewayRulesListResultItemRuleSettingsDnsResolversIpv4List | null; ipv6?: GatewayRulesListResultItemRuleSettingsDnsResolversIpv6List | null; } export const GatewayRulesListResultItemRuleSettingsDnsResolvers = /*@__PURE__*/ S.suspend(() => S.Struct({ ipv4: S.optional( S.NullOr(GatewayRulesListResultItemRuleSettingsDnsResolversIpv4List), ), ipv6: S.optional( S.NullOr(GatewayRulesListResultItemRuleSettingsDnsResolversIpv6List), ), }), ).annotate({ identifier: "GatewayRulesListResultItemRuleSettingsDnsResolvers", }) as any as S.Schema; export type GatewayRulesListResultItemRuleSettingsEgress = GatewayRulesCreateResponseRuleSettingsEgress; export const GatewayRulesListResultItemRuleSettingsEgress = GatewayRulesCreateResponseRuleSettingsEgress; export type GatewayRulesListResultItemRuleSettingsForensicCopy = GatewayRulesCreateResponseRuleSettingsForensicCopy; export const GatewayRulesListResultItemRuleSettingsForensicCopy = GatewayRulesCreateResponseRuleSettingsForensicCopy; export type GatewayRulesListResultItemRuleSettingsL4override = GatewayRulesCreateResponseRuleSettingsL4override; export const GatewayRulesListResultItemRuleSettingsL4override = GatewayRulesCreateResponseRuleSettingsL4override; export type GatewayRulesListResultItemRuleSettingsNotificationSettings = GatewayRulesCreateResponseRuleSettingsNotificationSettings; export const GatewayRulesListResultItemRuleSettingsNotificationSettings = GatewayRulesCreateResponseRuleSettingsNotificationSettings; export type GatewayRulesListResultItemRuleSettingsOverrideIpsList = Array; export const GatewayRulesListResultItemRuleSettingsOverrideIpsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayRulesListResultItemRuleSettingsPayloadLog = GatewayRulesCreateResponseRuleSettingsPayloadLog; export const GatewayRulesListResultItemRuleSettingsPayloadLog = GatewayRulesCreateResponseRuleSettingsPayloadLog; export type GatewayRulesListResultItemRuleSettingsQuarantineFileTypesItem = | "exe" | "pdf" | "doc" | "docm" | "docx" | "rtf" | "ppt" | "pptx" | "xls" | "xlsm" | "xlsx" | "zip" | "rar"; export const GatewayRulesListResultItemRuleSettingsQuarantineFileTypesItem = /*@__PURE__*/ S.String; export type GatewayRulesListResultItemRuleSettingsQuarantineFileTypesList = Array; export const GatewayRulesListResultItemRuleSettingsQuarantineFileTypesList = /*@__PURE__*/ S.Array( GatewayRulesListResultItemRuleSettingsQuarantineFileTypesItem, ) as any as S.Schema; export interface GatewayRulesListResultItemRuleSettingsQuarantine { /** Specify the types of files to sandbox. */ fileTypes?: GatewayRulesListResultItemRuleSettingsQuarantineFileTypesList | null; } export const GatewayRulesListResultItemRuleSettingsQuarantine = /*@__PURE__*/ S.suspend(() => S.Struct({ fileTypes: S.optional( S.NullOr( GatewayRulesListResultItemRuleSettingsQuarantineFileTypesList, ).pipe(T.Body("file_types")), ), }), ).annotate({ identifier: "GatewayRulesListResultItemRuleSettingsQuarantine", }) as any as S.Schema; export type GatewayRulesListResultItemRuleSettingsRedirect = GatewayRulesCreateResponseRuleSettingsRedirect; export const GatewayRulesListResultItemRuleSettingsRedirect = GatewayRulesCreateResponseRuleSettingsRedirect; export type GatewayRulesListResultItemRuleSettingsResolveDnsInternallyFallback = | "none" | "public_dns"; export const GatewayRulesListResultItemRuleSettingsResolveDnsInternallyFallback = /*@__PURE__*/ S.String; export interface GatewayRulesListResultItemRuleSettingsResolveDnsInternally { /** Specify the fallback behavior to apply when the internal DNS response code differs from 'NOERROR' or when the response data contains only CNAME records for 'A' or 'AAAA' queries. */ fallback?: GatewayRulesListResultItemRuleSettingsResolveDnsInternallyFallback | null; /** Specify the internal DNS view identifier to pass to the internal DNS service. */ viewId?: string | null; } export const GatewayRulesListResultItemRuleSettingsResolveDnsInternally = /*@__PURE__*/ S.suspend(() => S.Struct({ fallback: S.optional( S.NullOr( GatewayRulesListResultItemRuleSettingsResolveDnsInternallyFallback, ), ), viewId: S.optional(S.NullOr(S.String).pipe(T.Body("view_id"))), }), ).annotate({ identifier: "GatewayRulesListResultItemRuleSettingsResolveDnsInternally", }) as any as S.Schema; export type GatewayRulesListResultItemRuleSettingsUntrustedCertAction = | "pass_through" | "block" | "error"; export const GatewayRulesListResultItemRuleSettingsUntrustedCertAction = /*@__PURE__*/ S.String; export interface GatewayRulesListResultItemRuleSettingsUntrustedCert { /** Defines the action performed when an untrusted certificate seen. The default action an error with HTTP code 526. */ action?: GatewayRulesListResultItemRuleSettingsUntrustedCertAction | null; } export const GatewayRulesListResultItemRuleSettingsUntrustedCert = /*@__PURE__*/ S.suspend(() => S.Struct({ action: S.optional( S.NullOr(GatewayRulesListResultItemRuleSettingsUntrustedCertAction), ), }), ).annotate({ identifier: "GatewayRulesListResultItemRuleSettingsUntrustedCert", }) as any as S.Schema; export interface GatewayRulesListResultItemRuleSettings { /** Add custom headers to allowed requests as key-value pairs. Use header names as keys that map to arrays of header values. Settable only for `http` rules with the action set to `allow`. */ addHeaders?: GatewayRulesListResultItemRuleSettingsAddHeadersMap | null; /** Set to enable MSP children to bypass this rule. Only parent MSP accounts can set this. this rule. Settable for all types of rules. */ allowChildBypass?: boolean | null; /** Define the settings for the Audit SSH action. Settable only for `l4` rules with `audit_ssh` action. */ auditSsh?: GatewayRulesCreateResponseRuleSettingsAuditSsh | null; /** Configure browser isolation behavior. Settable only for `http` rules with the action set to `isolate`. */ bisoAdminControls?: GatewayRulesListResultItemRuleSettingsBisoAdminControls | null; /** Configure custom block page settings. If missing or null, use the account settings. Settable only for `http` rules with the action set to `block`. */ blockPage?: GatewayRulesCreateResponseRuleSettingsBlockPage | null; /** Enable the custom block page. Settable only for `dns` rules with action `block`. */ blockPageEnabled?: boolean | null; /** Explain why the rule blocks the request. The custom block page shows this text (if enabled). Settable only for `dns`, `l4`, and `http` rules when the action set to `block`. */ blockReason?: string | null; /** Set to enable MSP accounts to bypass their parent's rules. Only MSP child accounts can set this. Settable for all types of rules. */ bypassParentRule?: boolean | null; /** Configure session check behavior. Settable only for `l4` and `http` rules with the action set to `allow`. */ checkSession?: GatewayRulesCreateResponseRuleSettingsCheckSession | null; /** Configure custom resolvers to route queries that match the resolver policy. Unused with 'resolve_dns_through_cloudflare' or 'resolve_dns_internally' settings. DNS queries get routed to the address closest to their origin. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ dnsResolvers?: GatewayRulesListResultItemRuleSettingsDnsResolvers | null; /** Configure how Gateway Proxy traffic egresses. You can enable this setting for rules with Egress actions and filters, or omit it to indicate local egress via WARP IPs. Settable only for `egress` rules. */ egress?: GatewayRulesCreateResponseRuleSettingsEgress | null; /** Configure whether a copy of the HTTP request will be sent to storage when the rule matches. */ forensicCopy?: GatewayRulesCreateResponseRuleSettingsForensicCopy | null; /** Ignore category matches at CNAME domains in a response. When off, evaluate categories in this rule against all CNAME domain categories in the response. Settable only for `dns` and `dns_resolver` rules. */ ignoreCnameCategoryMatches?: boolean | null; /** Specify whether to disable DNSSEC validation (for Allow actions) [INSECURE]. Settable only for `dns` rules. */ insecureDisableDnssecValidation?: boolean | null; /** Enable IPs in DNS resolver category blocks. The system blocks only domain name categories unless you enable this setting. Settable only for `dns` and `dns_resolver` rules. */ ipCategories?: boolean | null; /** Indicates whether to include IPs in DNS resolver indicator feed blocks. Default, indicator feeds block only domain names. Settable only for `dns` and `dns_resolver` rules. */ ipIndicatorFeeds?: boolean | null; /** Send matching traffic to the supplied destination IP address and port. Settable only for `l4` rules with the action set to `l4_override`. */ l4override?: GatewayRulesCreateResponseRuleSettingsL4override | null; /** Configure a notification to display on the user's device when this rule matched. Settable for all types of rules with the action set to `block`. */ notificationSettings?: GatewayRulesCreateResponseRuleSettingsNotificationSettings | null; /** Defines a hostname for override, for the matching DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideHost?: string | null; /** Defines a an IP or set of IPs for overriding matched DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideIps?: GatewayRulesListResultItemRuleSettingsOverrideIpsList | null; /** Configure DLP payload logging. Settable only for `http` rules. */ payloadLog?: GatewayRulesCreateResponseRuleSettingsPayloadLog | null; /** Configure settings that apply to quarantine rules. Settable only for `http` rules. */ quarantine?: GatewayRulesListResultItemRuleSettingsQuarantine | null; /** Apply settings to redirect rules. Settable only for `http` rules with the action set to `redirect`. */ redirect?: GatewayRulesCreateResponseRuleSettingsRedirect | null; /** Configure to forward the query to the internal DNS service, passing the specified 'view_id' as input. Not used when 'dns_resolvers' is specified or 'resolve_dns_through_cloudflare' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsInternally?: GatewayRulesListResultItemRuleSettingsResolveDnsInternally | null; /** Enable to send queries that match the policy to Cloudflare's default 1.1.1.1 DNS resolver. Cannot set when 'dns_resolvers' specified or 'resolve_dns_internally' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsThroughCloudflare?: boolean | null; /** Configure behavior when an upstream certificate is invalid or an SSL error occurs. Settable only for `http` rules with the action set to `allow`. */ untrustedCert?: GatewayRulesListResultItemRuleSettingsUntrustedCert | null; } export const GatewayRulesListResultItemRuleSettings = /*@__PURE__*/ S.suspend( () => S.Struct({ addHeaders: S.optional( S.NullOr(GatewayRulesListResultItemRuleSettingsAddHeadersMap).pipe( T.Body("add_headers"), ), ), allowChildBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_child_bypass")), ), auditSsh: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsAuditSsh).pipe( T.Body("audit_ssh"), ), ), bisoAdminControls: S.optional( S.NullOr(GatewayRulesListResultItemRuleSettingsBisoAdminControls).pipe( T.Body("biso_admin_controls"), ), ), blockPage: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsBlockPage).pipe( T.Body("block_page"), ), ), blockPageEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("block_page_enabled")), ), blockReason: S.optional(S.NullOr(S.String).pipe(T.Body("block_reason"))), bypassParentRule: S.optional( S.NullOr(S.Boolean).pipe(T.Body("bypass_parent_rule")), ), checkSession: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsCheckSession).pipe( T.Body("check_session"), ), ), dnsResolvers: S.optional( S.NullOr(GatewayRulesListResultItemRuleSettingsDnsResolvers).pipe( T.Body("dns_resolvers"), ), ), egress: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsEgress), ), forensicCopy: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsForensicCopy).pipe( T.Body("forensic_copy"), ), ), ignoreCnameCategoryMatches: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ignore_cname_category_matches")), ), insecureDisableDnssecValidation: S.optional( S.NullOr(S.Boolean).pipe(T.Body("insecure_disable_dnssec_validation")), ), ipCategories: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ip_categories")), ), ipIndicatorFeeds: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ip_indicator_feeds")), ), l4override: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsL4override), ), notificationSettings: S.optional( S.NullOr( GatewayRulesCreateResponseRuleSettingsNotificationSettings, ).pipe(T.Body("notification_settings")), ), overrideHost: S.optional( S.NullOr(S.String).pipe(T.Body("override_host")), ), overrideIps: S.optional( S.NullOr(GatewayRulesListResultItemRuleSettingsOverrideIpsList).pipe( T.Body("override_ips"), ), ), payloadLog: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsPayloadLog).pipe( T.Body("payload_log"), ), ), quarantine: S.optional( S.NullOr(GatewayRulesListResultItemRuleSettingsQuarantine), ), redirect: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsRedirect), ), resolveDnsInternally: S.optional( S.NullOr( GatewayRulesListResultItemRuleSettingsResolveDnsInternally, ).pipe(T.Body("resolve_dns_internally")), ), resolveDnsThroughCloudflare: S.optional( S.NullOr(S.Boolean).pipe(T.Body("resolve_dns_through_cloudflare")), ), untrustedCert: S.optional( S.NullOr(GatewayRulesListResultItemRuleSettingsUntrustedCert).pipe( T.Body("untrusted_cert"), ), ), }), ).annotate({ identifier: "GatewayRulesListResultItemRuleSettings", }) as any as S.Schema; export type GatewayRulesListResultItemSchedule = GatewayRulesCreateResponseSchedule; export const GatewayRulesListResultItemSchedule = GatewayRulesCreateResponseSchedule; export interface GatewayRulesListResultItem { /** Specify the action to perform when the associated traffic, identity, and device posture expressions either absent or evaluate to `true`. */ action: GatewayRulesListResultItemAction; /** Specify whether the rule is enabled. */ enabled: boolean; /** Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value. */ filters: GatewayRulesListResultItemFiltersList; /** Specify the rule name. */ name: string; /** Set the order of your rules. Lower values indicate higher precedence. At each processing phase, evaluate applicable rules in ascending order of this value. Refer to [Order of enforcement](http://developers.cloudflare.com/learning-paths/secure-internet-traffic/understand-policies/order-of-enforcement/#manage-precedence-with-terraform) to manage precedence via Terraform. */ precedence: number; /** Specify the wirefilter expression used for traffic matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ traffic: string; /** Identify the API resource with a UUID. */ id?: string | null; createdAt?: string | null; /** Indicate the date of deletion, if any. */ deletedAt?: string | null; /** Specify the rule description. */ description?: string | null; /** Specify the wirefilter expression used for device posture check. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ devicePosture?: string | null; /** Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This does not apply to HTTP or network policies. Settable only for `dns` rules. */ expiration?: GatewayRulesCreateResponseExpiration | null; /** Specify the wirefilter expression used for identity matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ identity?: string | null; /** Indicate that this rule is shared via the Orgs API and read only. */ readOnly?: boolean | null; /** Defines settings for this rule. Settings apply only to specific rule types and must use compatible selectors. If Terraform detects drift, confirm the setting supports your rule type and check whether the API modifies the value. Use API-returned values in your configuration to prevent drift. */ ruleSettings?: GatewayRulesListResultItemRuleSettings | null; /** Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules. */ schedule?: GatewayRulesCreateResponseSchedule | null; /** Indicate that this rule is sharable via the Orgs API. */ sharable?: boolean | null; /** Provide the account tag of the account that created the rule. */ sourceAccount?: string | null; updatedAt?: string | null; /** Indicate the version number of the rule(read-only). */ version?: number | null; /** Indicate a warning for a misconfigured rule, if any. */ warningStatus?: string | null; } export const GatewayRulesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ action: GatewayRulesListResultItemAction, enabled: S.Boolean, filters: GatewayRulesListResultItemFiltersList, name: S.String, precedence: S.Number, traffic: S.String, id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), description: S.optional(S.NullOr(S.String)), devicePosture: S.optional( S.NullOr(S.String).pipe(T.Body("device_posture")), ), expiration: S.optional(S.NullOr(GatewayRulesCreateResponseExpiration)), identity: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), ruleSettings: S.optional( S.NullOr(GatewayRulesListResultItemRuleSettings).pipe( T.Body("rule_settings"), ), ), schedule: S.optional(S.NullOr(GatewayRulesCreateResponseSchedule)), sharable: S.optional(S.NullOr(S.Boolean)), sourceAccount: S.optional( S.NullOr(S.String).pipe(T.Body("source_account")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), version: S.optional(S.NullOr(S.Number)), warningStatus: S.optional( S.NullOr(S.String).pipe(T.Body("warning_status")), ), }), ).annotate({ identifier: "GatewayRulesListResultItem", }) as any as S.Schema; export type GatewayRulesListResultList = Array; export const GatewayRulesListResultList = /*@__PURE__*/ S.Array( GatewayRulesListResultItem, ) as any as S.Schema; export interface ListGatewayRulesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: GatewayRulesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListGatewayRulesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: GatewayRulesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewayRulesResponse", }) as any as S.Schema; export interface ListGatewaysRequest { accountId: string; } export const ListGatewaysRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewaysRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ListGatewaysResponse { /** Specify the Cloudflare account ID. */ id?: string | null; /** Specify the gateway internal ID. */ gatewayTag?: string | null; /** Specify the provider name (usually Cloudflare). */ providerName?: string | null; } export const ListGatewaysResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), gatewayTag: S.optional(S.NullOr(S.String).pipe(T.Body("gateway_tag"))), providerName: S.optional(S.NullOr(S.String).pipe(T.Body("provider_name"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListGatewaysResponse", }) as any as S.Schema; export type IdentityProvidersScimGroupsListRequestCfResourceIdList = Array; export const IdentityProvidersScimGroupsListRequestCfResourceIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersScimGroupsListRequestIdpResourceIdList = Array; export const IdentityProvidersScimGroupsListRequestIdpResourceIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface ListIdentityProviderScimGroupsRequest { /** Identifier. */ accountId: string; /** UUID. */ identityProviderId: string; /** The unique Cloudflare-generated Id of the SCIM Group resource; also known as the "Id". */ cfResourceId?: IdentityProvidersScimGroupsListRequestCfResourceIdList; /** The IdP-generated Id of the SCIM Group resource; also known as the "external Id". */ idpResourceId?: IdentityProvidersScimGroupsListRequestIdpResourceIdList; /** The display name of the SCIM Group resource. */ name?: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; } export const ListIdentityProviderScimGroupsRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), identityProviderId: S.String.pipe(T.Label("identity_provider_id")), cfResourceId: S.optional( IdentityProvidersScimGroupsListRequestCfResourceIdList.pipe( T.Query("cf_resource_id"), ), ), idpResourceId: S.optional( IdentityProvidersScimGroupsListRequestIdpResourceIdList.pipe( T.Query("idp_resource_id"), ), ), name: S.optional(S.String.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/identity_providers/{identity_provider_id}/scim/groups", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListIdentityProviderScimGroupsRequest", }) as any as S.Schema; export interface IdentityProvidersScimGroupsListResultItemMeta { /** The timestamp of when the SCIM resource was created. */ created?: string | null; /** The timestamp of when the SCIM resource was last modified. */ lastModified?: string | null; } export const IdentityProvidersScimGroupsListResultItemMeta = /*@__PURE__*/ S.suspend(() => S.Struct({ created: S.optional(S.NullOr(S.String)), lastModified: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "IdentityProvidersScimGroupsListResultItemMeta", }) as any as S.Schema; export type IdentityProvidersScimGroupsListResultItemSchemasList = Array; export const IdentityProvidersScimGroupsListResultItemSchemasList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersScimGroupsListResultItem { /** The unique Cloudflare-generated Id of the SCIM resource. */ id?: string | null; /** The display name of the SCIM Group resource. */ displayName?: string | null; /** The IdP-generated Id of the SCIM resource. */ externalId?: string | null; /** The metadata of the SCIM resource. */ meta?: IdentityProvidersScimGroupsListResultItemMeta | null; /** The list of URIs which indicate the attributes contained within a SCIM resource. */ schemas?: IdentityProvidersScimGroupsListResultItemSchemasList | null; } export const IdentityProvidersScimGroupsListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), displayName: S.optional(S.NullOr(S.String)), externalId: S.optional(S.NullOr(S.String)), meta: S.optional(S.NullOr(IdentityProvidersScimGroupsListResultItemMeta)), schemas: S.optional( S.NullOr(IdentityProvidersScimGroupsListResultItemSchemasList), ), }), ).annotate({ identifier: "IdentityProvidersScimGroupsListResultItem", }) as any as S.Schema; export type IdentityProvidersScimGroupsListResultList = Array; export const IdentityProvidersScimGroupsListResultList = /*@__PURE__*/ S.Array( IdentityProvidersScimGroupsListResultItem, ) as any as S.Schema; export interface ListIdentityProviderScimGroupsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: IdentityProvidersScimGroupsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListIdentityProviderScimGroupsResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: IdentityProvidersScimGroupsListResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListIdentityProviderScimGroupsResponse", }) as any as S.Schema; export type IdentityProvidersScimUsersListRequestCfResourceIdList = Array; export const IdentityProvidersScimUsersListRequestCfResourceIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersScimUsersListRequestIdpResourceIdList = Array; export const IdentityProvidersScimUsersListRequestIdpResourceIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface ListIdentityProviderScimUsersRequest { /** Identifier. */ accountId: string; /** UUID. */ identityProviderId: string; /** The unique Cloudflare-generated Id of the SCIM User resource; also known as the "Id". */ cfResourceId?: IdentityProvidersScimUsersListRequestCfResourceIdList; /** The email address of the SCIM User resource. */ email?: string; /** The IdP-generated Id of the SCIM User resource; also known as the "external Id". */ idpResourceId?: IdentityProvidersScimUsersListRequestIdpResourceIdList; /** The name of the SCIM User resource. */ name?: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; /** The username of the SCIM User resource. */ username?: string; } export const ListIdentityProviderScimUsersRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), identityProviderId: S.String.pipe(T.Label("identity_provider_id")), cfResourceId: S.optional( IdentityProvidersScimUsersListRequestCfResourceIdList.pipe( T.Query("cf_resource_id"), ), ), email: S.optional(S.String.pipe(T.Query())), idpResourceId: S.optional( IdentityProvidersScimUsersListRequestIdpResourceIdList.pipe( T.Query("idp_resource_id"), ), ), name: S.optional(S.String.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), username: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/identity_providers/{identity_provider_id}/scim/users", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListIdentityProviderScimUsersRequest", }) as any as S.Schema; export interface IdentityProvidersScimUsersListResultItemEmailsItem { /** Indicates if the email address is the primary email belonging to the SCIM User resource. */ primary?: boolean | null; /** Indicates the type of the email address. */ type?: string | null; /** The email address of the SCIM User resource. */ value?: string | null; } export const IdentityProvidersScimUsersListResultItemEmailsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ primary: S.optional(S.NullOr(S.Boolean)), type: S.optional(S.NullOr(S.String)), value: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "IdentityProvidersScimUsersListResultItemEmailsItem", }) as any as S.Schema; export type IdentityProvidersScimUsersListResultItemEmailsList = Array; export const IdentityProvidersScimUsersListResultItemEmailsList = /*@__PURE__*/ S.Array( IdentityProvidersScimUsersListResultItemEmailsItem, ) as any as S.Schema; export type IdentityProvidersScimUsersListResultItemMeta = IdentityProvidersScimGroupsListResultItemMeta; export const IdentityProvidersScimUsersListResultItemMeta = IdentityProvidersScimGroupsListResultItemMeta; export type IdentityProvidersScimUsersListResultItemSchemasList = Array; export const IdentityProvidersScimUsersListResultItemSchemasList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersScimUsersListResultItem { /** The unique Cloudflare-generated Id of the SCIM resource. */ id?: string | null; /** Determines the status of the SCIM User resource. */ active?: boolean | null; /** The name of the SCIM User resource. */ displayName?: string | null; emails?: IdentityProvidersScimUsersListResultItemEmailsList | null; /** The IdP-generated Id of the SCIM resource. */ externalId?: string | null; /** The metadata of the SCIM resource. */ meta?: IdentityProvidersScimGroupsListResultItemMeta | null; /** The list of URIs which indicate the attributes contained within a SCIM resource. */ schemas?: IdentityProvidersScimUsersListResultItemSchemasList | null; } export const IdentityProvidersScimUsersListResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), active: S.optional(S.NullOr(S.Boolean)), displayName: S.optional(S.NullOr(S.String)), emails: S.optional( S.NullOr(IdentityProvidersScimUsersListResultItemEmailsList), ), externalId: S.optional(S.NullOr(S.String)), meta: S.optional(S.NullOr(IdentityProvidersScimGroupsListResultItemMeta)), schemas: S.optional( S.NullOr(IdentityProvidersScimUsersListResultItemSchemasList), ), }), ).annotate({ identifier: "IdentityProvidersScimUsersListResultItem", }) as any as S.Schema; export type IdentityProvidersScimUsersListResultList = Array; export const IdentityProvidersScimUsersListResultList = /*@__PURE__*/ S.Array( IdentityProvidersScimUsersListResultItem, ) as any as S.Schema; export interface ListIdentityProviderScimUsersResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: IdentityProvidersScimUsersListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListIdentityProviderScimUsersResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: IdentityProvidersScimUsersListResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListIdentityProviderScimUsersResponse", }) as any as S.Schema; export interface ListIdentityProvidersForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; /** Indicates to Access to only retrieve identity providers that have the System for Cross-Domain Identity Management (SCIM) enabled. */ scimEnabled?: string; } export const ListIdentityProvidersForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), scimEnabled: S.optional(S.String.pipe(T.Query("scim_enabled"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/identity_providers", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListIdentityProvidersForAccountRequest", }) as any as S.Schema; export type IdentityProvidersListResultItemAzureADConfigClaimsList = Array; export const IdentityProvidersListResultItemAzureADConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersListResultItemAzureADConfigPrompt = | "login" | "select_account" | "none"; export const IdentityProvidersListResultItemAzureADConfigPrompt = /*@__PURE__*/ S.String; export interface IdentityProvidersListResultItemAzureADConfig { /** Custom claims */ claims?: IdentityProvidersListResultItemAzureADConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** Should Cloudflare try to load authentication contexts from your account */ conditionalAccessEnabled?: boolean | null; /** Your Azure directory uuid */ directoryId?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Indicates the type of user interaction that is required. prompt=login forces the user to enter their credentials on that request, negating single-sign on. prompt=none is the opposite. It ensures that the user isn't presented with any interactive prompt. If the request can't be completed silently by using single-sign on, the Microsoft identity platform returns an interaction_required error. prompt=select_account interrupts single sign-on providing account selection experience listing all the accounts either in session or any remembered account or an option to choose to use a different account altogether. */ prompt?: IdentityProvidersListResultItemAzureADConfigPrompt | null; /** Should Cloudflare try to load groups from your account */ supportGroups?: boolean | null; } export const IdentityProvidersListResultItemAzureADConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersListResultItemAzureADConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), conditionalAccessEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("conditional_access_enabled")), ), directoryId: S.optional(S.NullOr(S.String).pipe(T.Body("directory_id"))), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), prompt: S.optional( S.NullOr(IdentityProvidersListResultItemAzureADConfigPrompt), ), supportGroups: S.optional( S.NullOr(S.Boolean).pipe(T.Body("support_groups")), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAzureADConfig", }) as any as S.Schema; export type IdentityProvidersListResultItemAzureADType = | "onetimepin" | "azureAD" | "saml" | "centrify" | "facebook" | "github" | "google-apps" | "google" | "linkedin" | "oidc" | "okta" | "onelogin" | "pingone" | "yandex" | "cloudflare"; export const IdentityProvidersListResultItemAzureADType = /*@__PURE__*/ S.String; export type IdentityProvidersListResultItemAzureADSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersListResultItemAzureADSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersListResultItemAzureADSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersListResultItemAzureADSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export type IdentityProvidersListResultItemAzureADScimConfigIdentityUpdateBehavior = | "automatic" | "reauth" | "no_action"; export const IdentityProvidersListResultItemAzureADScimConfigIdentityUpdateBehavior = /*@__PURE__*/ S.String; export interface IdentityProvidersListResultItemAzureADScimConfig { /** A flag to enable or disable SCIM for the identity provider. */ enabled?: boolean | null; /** Indicates how a SCIM event updates a user identity used for policy evaluation. Use "automatic" to automatically update a user's identity and augment it with fields from the SCIM user resource. Use "reauth" to force re-authentication on group membership updates, user identity update will only occur after successful re-authentication. With "reauth" identities will not contain fields from the SCIM user resource. With "no_action" identities will not be changed by SCIM updates in any way and users will not be prompted to reauthenticate. */ identityUpdateBehavior?: IdentityProvidersListResultItemAzureADScimConfigIdentityUpdateBehavior | null; /** The base URL of Cloudflare's SCIM V2.0 API endpoint. */ scimBaseUrl?: string | null; /** A flag to remove a user's seat in Zero Trust when they have been deprovisioned in the Identity Provider. This cannot be enabled unless user_deprovision is also enabled. */ seatDeprovision?: boolean | null; /** A read-only token generated when the SCIM integration is enabled for the first time. It is redacted on subsequent requests. If you lose this you will need to refresh it at /access/identity_providers/:idpID/refresh_scim_secret. */ secret?: string | null; /** A flag to enable revoking a user's session in Access and Gateway when they have been deprovisioned in the Identity Provider. */ userDeprovision?: boolean | null; } export const IdentityProvidersListResultItemAzureADScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), identityUpdateBehavior: S.optional( S.NullOr( IdentityProvidersListResultItemAzureADScimConfigIdentityUpdateBehavior, ).pipe(T.Body("identity_update_behavior")), ), scimBaseUrl: S.optional(S.NullOr(S.String).pipe(T.Body("scim_base_url"))), seatDeprovision: S.optional( S.NullOr(S.Boolean).pipe(T.Body("seat_deprovision")), ), secret: S.optional(S.NullOr(S.String)), userDeprovision: S.optional( S.NullOr(S.Boolean).pipe(T.Body("user_deprovision")), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAzureADScimConfig", }) as any as S.Schema; export interface IdentityProvidersListResultItemAzureAD { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersListResultItemAzureADConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersListResultItemAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersListResultItemAzureADScimConfig | null; } export const IdentityProvidersListResultItemAzureAD = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersListResultItemAzureADConfig, name: S.String, type: IdentityProvidersListResultItemAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersListResultItemAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAzureAD", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessCentrifyConfigClaimsList = Array; export const IdentityProvidersListResultItemAccessCentrifyConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersListResultItemAccessCentrifyConfig { /** Your centrify account url */ centrifyAccount?: string | null; /** Your centrify app id */ centrifyAppId?: string | null; /** Custom claims */ claims?: IdentityProvidersListResultItemAccessCentrifyConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; } export const IdentityProvidersListResultItemAccessCentrifyConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ centrifyAccount: S.optional( S.NullOr(S.String).pipe(T.Body("centrify_account")), ), centrifyAppId: S.optional( S.NullOr(S.String).pipe(T.Body("centrify_app_id")), ), claims: S.optional( S.NullOr(IdentityProvidersListResultItemAccessCentrifyConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessCentrifyConfig", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessCentrifySamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersListResultItemAccessCentrifySamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersListResultItemAccessCentrifySamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersListResultItemAccessCentrifySamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersListResultItemAccessCentrify { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersListResultItemAccessCentrifyConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersListResultItemAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersListResultItemAzureADScimConfig | null; } export const IdentityProvidersListResultItemAccessCentrify = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersListResultItemAccessCentrifyConfig, name: S.String, type: IdentityProvidersListResultItemAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersListResultItemAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessCentrify", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessFacebookConfig = IdentityProvidersCreateResultAccessFacebookConfig; export const IdentityProvidersListResultItemAccessFacebookConfig = IdentityProvidersCreateResultAccessFacebookConfig; export type IdentityProvidersListResultItemAccessFacebookSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersListResultItemAccessFacebookSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersListResultItemAccessFacebookSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersListResultItemAccessFacebookSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersListResultItemAccessFacebook { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessFacebookConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersListResultItemAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersListResultItemAzureADScimConfig | null; } export const IdentityProvidersListResultItemAccessFacebook = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessFacebookConfig, name: S.String, type: IdentityProvidersListResultItemAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersListResultItemAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessFacebook", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessGitHubSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersListResultItemAccessGitHubSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersListResultItemAccessGitHubSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersListResultItemAccessGitHubSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export type IdentityProvidersListResultItemAccessGitHub = IdentityProvidersListResultItemAccessFacebook; export const IdentityProvidersListResultItemAccessGitHub = IdentityProvidersListResultItemAccessFacebook; export type IdentityProvidersListResultItemAccessGoogleConfigClaimsList = Array; export const IdentityProvidersListResultItemAccessGoogleConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersListResultItemAccessGoogleConfig { /** Custom claims */ claims?: IdentityProvidersListResultItemAccessGoogleConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; } export const IdentityProvidersListResultItemAccessGoogleConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersListResultItemAccessGoogleConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessGoogleConfig", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessGoogleSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersListResultItemAccessGoogleSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersListResultItemAccessGoogleSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersListResultItemAccessGoogleSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersListResultItemAccessGoogle { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersListResultItemAccessGoogleConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersListResultItemAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersListResultItemAzureADScimConfig | null; } export const IdentityProvidersListResultItemAccessGoogle = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersListResultItemAccessGoogleConfig, name: S.String, type: IdentityProvidersListResultItemAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersListResultItemAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessGoogle", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessGoogleAppsConfigClaimsList = Array; export const IdentityProvidersListResultItemAccessGoogleAppsConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersListResultItemAccessGoogleAppsConfig { /** Your companies TLD */ appsDomain?: string | null; /** Custom claims */ claims?: IdentityProvidersListResultItemAccessGoogleAppsConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; } export const IdentityProvidersListResultItemAccessGoogleAppsConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ appsDomain: S.optional(S.NullOr(S.String).pipe(T.Body("apps_domain"))), claims: S.optional( S.NullOr( IdentityProvidersListResultItemAccessGoogleAppsConfigClaimsList, ), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessGoogleAppsConfig", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessGoogleAppsSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersListResultItemAccessGoogleAppsSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersListResultItemAccessGoogleAppsSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersListResultItemAccessGoogleAppsSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersListResultItemAccessGoogleApps { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersListResultItemAccessGoogleAppsConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersListResultItemAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersListResultItemAzureADScimConfig | null; } export const IdentityProvidersListResultItemAccessGoogleApps = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersListResultItemAccessGoogleAppsConfig, name: S.String, type: IdentityProvidersListResultItemAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersListResultItemAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessGoogleApps", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessLinkedinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersListResultItemAccessLinkedinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersListResultItemAccessLinkedinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersListResultItemAccessLinkedinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export type IdentityProvidersListResultItemAccessLinkedin = IdentityProvidersListResultItemAccessFacebook; export const IdentityProvidersListResultItemAccessLinkedin = IdentityProvidersListResultItemAccessFacebook; export type IdentityProvidersListResultItemAccessOIDCConfigClaimsList = Array; export const IdentityProvidersListResultItemAccessOIDCConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersListResultItemAccessOIDCConfigScopesList = Array; export const IdentityProvidersListResultItemAccessOIDCConfigScopesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersListResultItemAccessOIDCConfig { /** The authorization_endpoint URL of your IdP */ authUrl?: string | null; /** The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens */ certsUrl?: string | null; /** Custom claims */ claims?: IdentityProvidersListResultItemAccessOIDCConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Enable Proof Key for Code Exchange (PKCE) */ pkceEnabled?: boolean | null; /** OAuth scopes */ scopes?: IdentityProvidersListResultItemAccessOIDCConfigScopesList | null; /** The token_endpoint URL of your IdP */ tokenUrl?: string | null; } export const IdentityProvidersListResultItemAccessOIDCConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ authUrl: S.optional(S.NullOr(S.String).pipe(T.Body("auth_url"))), certsUrl: S.optional(S.NullOr(S.String).pipe(T.Body("certs_url"))), claims: S.optional( S.NullOr(IdentityProvidersListResultItemAccessOIDCConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), pkceEnabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("pkce_enabled"))), scopes: S.optional( S.NullOr(IdentityProvidersListResultItemAccessOIDCConfigScopesList), ), tokenUrl: S.optional(S.NullOr(S.String).pipe(T.Body("token_url"))), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessOIDCConfig", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessOIDCSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersListResultItemAccessOIDCSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersListResultItemAccessOIDCSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersListResultItemAccessOIDCSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersListResultItemAccessOIDC { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersListResultItemAccessOIDCConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersListResultItemAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersListResultItemAzureADScimConfig | null; } export const IdentityProvidersListResultItemAccessOIDC = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersListResultItemAccessOIDCConfig, name: S.String, type: IdentityProvidersListResultItemAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersListResultItemAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessOIDC", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessOktaConfigClaimsList = Array; export const IdentityProvidersListResultItemAccessOktaConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersListResultItemAccessOktaConfig { /** Your okta authorization server id */ authorizationServerId?: string | null; /** Custom claims */ claims?: IdentityProvidersListResultItemAccessOktaConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Your okta account url */ oktaAccount?: string | null; } export const IdentityProvidersListResultItemAccessOktaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ authorizationServerId: S.optional( S.NullOr(S.String).pipe(T.Body("authorization_server_id")), ), claims: S.optional( S.NullOr(IdentityProvidersListResultItemAccessOktaConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), oktaAccount: S.optional(S.NullOr(S.String).pipe(T.Body("okta_account"))), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessOktaConfig", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessOktaSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersListResultItemAccessOktaSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersListResultItemAccessOktaSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersListResultItemAccessOktaSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersListResultItemAccessOkta { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersListResultItemAccessOktaConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersListResultItemAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersListResultItemAzureADScimConfig | null; } export const IdentityProvidersListResultItemAccessOkta = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersListResultItemAccessOktaConfig, name: S.String, type: IdentityProvidersListResultItemAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersListResultItemAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessOkta", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessOneloginConfigClaimsList = Array; export const IdentityProvidersListResultItemAccessOneloginConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersListResultItemAccessOneloginConfig { /** Custom claims */ claims?: IdentityProvidersListResultItemAccessOneloginConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Your OneLogin account url */ oneloginAccount?: string | null; } export const IdentityProvidersListResultItemAccessOneloginConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersListResultItemAccessOneloginConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), oneloginAccount: S.optional( S.NullOr(S.String).pipe(T.Body("onelogin_account")), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessOneloginConfig", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessOneloginSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersListResultItemAccessOneloginSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersListResultItemAccessOneloginSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersListResultItemAccessOneloginSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersListResultItemAccessOnelogin { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersListResultItemAccessOneloginConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersListResultItemAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersListResultItemAzureADScimConfig | null; } export const IdentityProvidersListResultItemAccessOnelogin = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersListResultItemAccessOneloginConfig, name: S.String, type: IdentityProvidersListResultItemAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersListResultItemAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessOnelogin", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessPingoneConfigClaimsList = Array; export const IdentityProvidersListResultItemAccessPingoneConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersListResultItemAccessPingoneConfig { /** Custom claims */ claims?: IdentityProvidersListResultItemAccessPingoneConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Your PingOne environment identifier */ pingEnvId?: string | null; } export const IdentityProvidersListResultItemAccessPingoneConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersListResultItemAccessPingoneConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), pingEnvId: S.optional(S.NullOr(S.String).pipe(T.Body("ping_env_id"))), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessPingoneConfig", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessPingoneSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersListResultItemAccessPingoneSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersListResultItemAccessPingoneSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersListResultItemAccessPingoneSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersListResultItemAccessPingone { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersListResultItemAccessPingoneConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersListResultItemAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersListResultItemAzureADScimConfig | null; } export const IdentityProvidersListResultItemAccessPingone = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersListResultItemAccessPingoneConfig, name: S.String, type: IdentityProvidersListResultItemAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersListResultItemAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessPingone", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessSAMLConfigAttributesList = Array; export const IdentityProvidersListResultItemAccessSAMLConfigAttributesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersListResultItemAccessSAMLConfigHeaderAttributesItem = IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesItem; export const IdentityProvidersListResultItemAccessSAMLConfigHeaderAttributesItem = IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesItem; export type IdentityProvidersListResultItemAccessSAMLConfigHeaderAttributesList = Array; export const IdentityProvidersListResultItemAccessSAMLConfigHeaderAttributesList = /*@__PURE__*/ S.Array( IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesItem, ) as any as S.Schema; export type IdentityProvidersListResultItemAccessSAMLConfigIdpPublicCertsList = Array; export const IdentityProvidersListResultItemAccessSAMLConfigIdpPublicCertsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersListResultItemAccessSAMLConfig { /** A list of SAML attribute names that will be added to your signed JWT token and can be used in SAML policy rules. */ attributes?: IdentityProvidersListResultItemAccessSAMLConfigAttributesList | null; /** The attribute name for email in the SAML response. */ emailAttributeName?: string | null; /** Enable SAML assertion encryption. When enabled, the Identity Provider will encrypt */ enableEncryption?: boolean | null; /** Add a list of attribute names that will be returned in the response header from the Access callback. */ headerAttributes?: IdentityProvidersListResultItemAccessSAMLConfigHeaderAttributesList | null; /** X509 certificate to verify the signature in the SAML authentication response */ idpPublicCerts?: IdentityProvidersListResultItemAccessSAMLConfigIdpPublicCertsList | null; /** IdP Entity ID or Issuer URL */ issuerUrl?: string | null; /** Sign the SAML authentication request with Access credentials. To verify the signature, use the public key from the Access certs endpoints. */ signRequest?: boolean | null; /** URL to send the SAML authentication requests to */ ssoTargetUrl?: string | null; } export const IdentityProvidersListResultItemAccessSAMLConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ attributes: S.optional( S.NullOr(IdentityProvidersListResultItemAccessSAMLConfigAttributesList), ), emailAttributeName: S.optional( S.NullOr(S.String).pipe(T.Body("email_attribute_name")), ), enableEncryption: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_encryption")), ), headerAttributes: S.optional( S.NullOr( IdentityProvidersListResultItemAccessSAMLConfigHeaderAttributesList, ).pipe(T.Body("header_attributes")), ), idpPublicCerts: S.optional( S.NullOr( IdentityProvidersListResultItemAccessSAMLConfigIdpPublicCertsList, ).pipe(T.Body("idp_public_certs")), ), issuerUrl: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_url"))), signRequest: S.optional(S.NullOr(S.Boolean).pipe(T.Body("sign_request"))), ssoTargetUrl: S.optional( S.NullOr(S.String).pipe(T.Body("sso_target_url")), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessSAMLConfig", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessSAMLSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersListResultItemAccessSAMLSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersListResultItemAccessSAMLSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersListResultItemAccessSAMLSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersListResultItemAccessSAML { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersListResultItemAccessSAMLConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersListResultItemAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersListResultItemAzureADScimConfig | null; } export const IdentityProvidersListResultItemAccessSAML = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersListResultItemAccessSAMLConfig, name: S.String, type: IdentityProvidersListResultItemAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersListResultItemAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessSAML", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessYandexSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersListResultItemAccessYandexSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersListResultItemAccessYandexSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersListResultItemAccessYandexSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export type IdentityProvidersListResultItemAccessYandex = IdentityProvidersListResultItemAccessFacebook; export const IdentityProvidersListResultItemAccessYandex = IdentityProvidersListResultItemAccessFacebook; export type IdentityProvidersListResultItemAccessOnetimepinConfig = IdentityProvidersCreateResultAccessOnetimepinConfig; export const IdentityProvidersListResultItemAccessOnetimepinConfig = IdentityProvidersCreateResultAccessOnetimepinConfig; export type IdentityProvidersListResultItemAccessOnetimepinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersListResultItemAccessOnetimepinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersListResultItemAccessOnetimepinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersListResultItemAccessOnetimepinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersListResultItemAccessOnetimepin { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessOnetimepinConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersListResultItemAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersListResultItemAzureADScimConfig | null; } export const IdentityProvidersListResultItemAccessOnetimepin = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessOnetimepinConfig, name: S.String, type: IdentityProvidersListResultItemAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersListResultItemAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessOnetimepin", }) as any as S.Schema; export type IdentityProvidersListResultItemAccessCloudflareConfig = IdentityProvidersCreateResultAccessCloudflareConfig; export const IdentityProvidersListResultItemAccessCloudflareConfig = IdentityProvidersCreateResultAccessCloudflareConfig; export type IdentityProvidersListResultItemAccessCloudflareSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersListResultItemAccessCloudflareSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersListResultItemAccessCloudflareSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersListResultItemAccessCloudflareSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersListResultItemAccessCloudflare { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessCloudflareConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersListResultItemAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersListResultItemAzureADScimConfig | null; } export const IdentityProvidersListResultItemAccessCloudflare = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessCloudflareConfig, name: S.String, type: IdentityProvidersListResultItemAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersListResultItemAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersListResultItemAccessCloudflare", }) as any as S.Schema; export type IdentityProvidersListResultItem = | IdentityProvidersListResultItemAzureAD | IdentityProvidersListResultItemAccessCentrify | IdentityProvidersListResultItemAccessFacebook | IdentityProvidersListResultItemAccessFacebook | IdentityProvidersListResultItemAccessGoogle | IdentityProvidersListResultItemAccessGoogleApps | IdentityProvidersListResultItemAccessFacebook | IdentityProvidersListResultItemAccessOIDC | IdentityProvidersListResultItemAccessOkta | IdentityProvidersListResultItemAccessOnelogin | IdentityProvidersListResultItemAccessPingone | IdentityProvidersListResultItemAccessSAML | IdentityProvidersListResultItemAccessFacebook | IdentityProvidersListResultItemAccessOnetimepin | IdentityProvidersListResultItemAccessCloudflare; export const IdentityProvidersListResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], ]), ); export type IdentityProvidersListResultList = Array; export const IdentityProvidersListResultList = /*@__PURE__*/ S.Array( IdentityProvidersListResultItem, ) as any as S.Schema; export interface ListIdentityProvidersResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: IdentityProvidersListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListIdentityProvidersResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: IdentityProvidersListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListIdentityProvidersResponse", }) as any as S.Schema; export interface ListIdentityProvidersForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** Page number of results. */ page?: number; /** Number of results per page. */ perPage?: number; /** Indicates to Access to only retrieve identity providers that have the System for Cross-Domain Identity Management (SCIM) enabled. */ scimEnabled?: string; } export const ListIdentityProvidersForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), scimEnabled: S.optional(S.String.pipe(T.Query("scim_enabled"))), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/identity_providers", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListIdentityProvidersForZoneRequest", }) as any as S.Schema; export interface ListNetworkHostnameRoutesRequest { /** Cloudflare account ID */ accountId: string; /** The hostname route ID. */ id?: string; /** If set, only list hostname routes with the given comment. */ comment?: string; /** If provided, include only resources that were created (and not deleted) before this time. URL encoded. */ existedAt?: string; /** If set, only list hostname routes that contain a substring of the given value, the filter is case-insensitive. */ hostname?: string; /** If `true`, only return deleted hostname routes. If `false`, exclude deleted hostname routes. */ isDeleted?: boolean; /** Page number of paginated results. */ page?: number; /** Number of results to display. */ perPage?: number; /** If set, only list hostname routes that point to a specific tunnel. */ tunnelId?: string; } export const ListNetworkHostnameRoutesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.optional(S.String.pipe(T.Query())), comment: S.optional(S.String.pipe(T.Query())), existedAt: S.optional(S.String.pipe(T.Query("existed_at"))), hostname: S.optional(S.String.pipe(T.Query())), isDeleted: S.optional(S.Boolean.pipe(T.Query("is_deleted"))), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), tunnelId: S.optional(S.String.pipe(T.Query("tunnel_id"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/zerotrust/routes/hostname", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListNetworkHostnameRoutesRequest", }) as any as S.Schema; export type NetworksHostnameRoutesListResultItemTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const NetworksHostnameRoutesListResultItemTunType = /*@__PURE__*/ S.String; export interface NetworksHostnameRoutesListResultItem { /** The hostname route ID. */ id?: string | null; /** An optional description of the hostname route. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** The hostname of the route. */ hostname?: string | null; /** The type of tunnel. */ tunType?: NetworksHostnameRoutesListResultItemTunType | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** A user-friendly name for a tunnel. */ tunnelName?: string | null; } export const NetworksHostnameRoutesListResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), hostname: S.optional(S.NullOr(S.String)), tunType: S.optional( S.NullOr(NetworksHostnameRoutesListResultItemTunType).pipe( T.Body("tun_type"), ), ), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), tunnelName: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_name"))), }), ).annotate({ identifier: "NetworksHostnameRoutesListResultItem", }) as any as S.Schema; export type NetworksHostnameRoutesListResultList = Array; export const NetworksHostnameRoutesListResultList = /*@__PURE__*/ S.Array( NetworksHostnameRoutesListResultItem, ) as any as S.Schema; export interface ListNetworkHostnameRoutesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: NetworksHostnameRoutesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListNetworkHostnameRoutesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: NetworksHostnameRoutesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListNetworkHostnameRoutesResponse", }) as any as S.Schema; export type NetworksRoutesListRequestTunTypes = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const NetworksRoutesListRequestTunTypes = /*@__PURE__*/ S.String; export type NetworksRoutesListRequestTunTypesList = Array< NetworksRoutesListRequestTunTypes | (string & {}) >; export const NetworksRoutesListRequestTunTypesList = /*@__PURE__*/ S.Array( NetworksRoutesListRequestTunTypes, ) as any as S.Schema; export interface ListNetworkRoutesRequest { /** Cloudflare account ID */ accountId: string; /** Optional remark describing the route. */ comment?: string; /** If provided, include only resources that were created (and not deleted) before this time. URL encoded. */ existedAt?: string; /** If `true`, only include deleted routes. If `false`, exclude deleted routes. If empty, all routes will be included. */ isDeleted?: boolean; /** If set, only list routes that are contained within this IP range. */ networkSubset?: string; /** If set, only list routes that contain this IP range. */ networkSuperset?: string; /** Page number of paginated results. */ page?: number; /** Number of results to display. */ perPage?: number; /** UUID of the route. */ routeId?: string; /** The types of tunnels to filter by, separated by commas. */ tunTypes?: NetworksRoutesListRequestTunTypesList; /** UUID of the tunnel. */ tunnelId?: string; /** UUID of the virtual network. */ virtualNetworkId?: string; } export const ListNetworkRoutesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), comment: S.optional(S.String.pipe(T.Query())), existedAt: S.optional(S.String.pipe(T.Query("existed_at"))), isDeleted: S.optional(S.Boolean.pipe(T.Query("is_deleted"))), networkSubset: S.optional(S.String.pipe(T.Query("network_subset"))), networkSuperset: S.optional(S.String.pipe(T.Query("network_superset"))), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), routeId: S.optional(S.String.pipe(T.Query("route_id"))), tunTypes: S.optional( NetworksRoutesListRequestTunTypesList.pipe(T.Query("tun_types")), ), tunnelId: S.optional(S.String.pipe(T.Query("tunnel_id"))), virtualNetworkId: S.optional(S.String.pipe(T.Query("virtual_network_id"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/teamnet/routes", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListNetworkRoutesRequest", }) as any as S.Schema; export type NetworksRoutesListResultItemTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const NetworksRoutesListResultItemTunType = /*@__PURE__*/ S.String; export interface NetworksRoutesListResultItem { /** UUID of the route. */ id?: string | null; /** Optional remark describing the route. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** The private IPv4 or IPv6 range connected by the route, in CIDR notation. */ network?: string | null; /** The type of tunnel. */ tunType?: NetworksRoutesListResultItemTunType | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** A user-friendly name for a tunnel. */ tunnelName?: string | null; /** UUID of the virtual network. */ virtualNetworkId?: string | null; /** A user-friendly name for the virtual network. */ virtualNetworkName?: string | null; } export const NetworksRoutesListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), network: S.optional(S.NullOr(S.String)), tunType: S.optional( S.NullOr(NetworksRoutesListResultItemTunType).pipe(T.Body("tun_type")), ), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), tunnelName: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_name"))), virtualNetworkId: S.optional( S.NullOr(S.String).pipe(T.Body("virtual_network_id")), ), virtualNetworkName: S.optional( S.NullOr(S.String).pipe(T.Body("virtual_network_name")), ), }), ).annotate({ identifier: "NetworksRoutesListResultItem", }) as any as S.Schema; export type NetworksRoutesListResultList = Array; export const NetworksRoutesListResultList = /*@__PURE__*/ S.Array( NetworksRoutesListResultItem, ) as any as S.Schema; export interface ListNetworkRoutesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: NetworksRoutesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListNetworkRoutesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: NetworksRoutesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListNetworkRoutesResponse", }) as any as S.Schema; export type NetworksSubnetsListRequestAddressFamily = "v4" | "v6"; export const NetworksSubnetsListRequestAddressFamily = /*@__PURE__*/ S.String; export type NetworksSubnetsListRequestSortOrder = "asc" | "desc"; export const NetworksSubnetsListRequestSortOrder = /*@__PURE__*/ S.String; export type NetworksSubnetsListRequestSubnetTypes = | "cloudflare_source" | "warp"; export const NetworksSubnetsListRequestSubnetTypes = /*@__PURE__*/ S.String; export interface ListNetworkSubnetsRequest { /** Cloudflare account ID */ accountId: string; /** If set, only include subnets in the given address family - `v4` or `v6` */ addressFamily?: NetworksSubnetsListRequestAddressFamily | (string & {}); /** If set, only list subnets with the given comment. */ comment?: string; /** If provided, include only resources that were created (and not deleted) before this time. URL encoded. */ existedAt?: string; /** If `true`, only include default subnets. If `false`, exclude default subnets subnets. If not set, all subnets will be included. */ isDefaultNetwork?: boolean; /** If `true`, only include deleted subnets. If `false`, exclude deleted subnets. If not set, all subnets will be included. */ isDeleted?: boolean; /** If set, only list subnets with the given name */ name?: string; /** If set, only list the subnet whose network exactly matches the given CIDR. */ network?: string; /** Page number of paginated results. */ page?: number; /** Number of results to display. */ perPage?: number; /** Sort order of the results. `asc` means oldest to newest, `desc` means newest to oldest. If not set, they will not be in any particular order. */ sortOrder?: NetworksSubnetsListRequestSortOrder | (string & {}); /** If set, the types of subnets to include, separated by comma. */ subnetTypes?: NetworksSubnetsListRequestSubnetTypes | (string & {}); } export const ListNetworkSubnetsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), addressFamily: S.optional( NetworksSubnetsListRequestAddressFamily.pipe(T.Query("address_family")), ), comment: S.optional(S.String.pipe(T.Query())), existedAt: S.optional(S.String.pipe(T.Query("existed_at"))), isDefaultNetwork: S.optional(S.Boolean.pipe(T.Query("is_default_network"))), isDeleted: S.optional(S.Boolean.pipe(T.Query("is_deleted"))), name: S.optional(S.String.pipe(T.Query())), network: S.optional(S.String.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), sortOrder: S.optional( NetworksSubnetsListRequestSortOrder.pipe(T.Query("sort_order")), ), subnetTypes: S.optional( NetworksSubnetsListRequestSubnetTypes.pipe(T.Query("subnet_types")), ), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/zerotrust/subnets", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListNetworkSubnetsRequest", }) as any as S.Schema; export type NetworksSubnetsListResultItemSubnetType = | "cloudflare_source" | "warp"; export const NetworksSubnetsListResultItemSubnetType = /*@__PURE__*/ S.String; export interface NetworksSubnetsListResultItem { /** The UUID of the subnet. */ id?: string | null; /** An optional description of the subnet. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** If `true`, this is the default subnet for the account. There can only be one default subnet per account. */ isDefaultNetwork?: boolean | null; /** A user-friendly name for the subnet. */ name?: string | null; /** The private IPv4 or IPv6 range defining the subnet, in CIDR notation. */ network?: string | null; /** The type of subnet. */ subnetType?: NetworksSubnetsListResultItemSubnetType | null; } export const NetworksSubnetsListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), isDefaultNetwork: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_default_network")), ), name: S.optional(S.NullOr(S.String)), network: S.optional(S.NullOr(S.String)), subnetType: S.optional( S.NullOr(NetworksSubnetsListResultItemSubnetType).pipe( T.Body("subnet_type"), ), ), }), ).annotate({ identifier: "NetworksSubnetsListResultItem", }) as any as S.Schema; export type NetworksSubnetsListResultList = Array; export const NetworksSubnetsListResultList = /*@__PURE__*/ S.Array( NetworksSubnetsListResultItem, ) as any as S.Schema; export interface ListNetworkSubnetsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: NetworksSubnetsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListNetworkSubnetsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: NetworksSubnetsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListNetworkSubnetsResponse", }) as any as S.Schema; export interface ListNetworkVirtualNetworksRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the virtual network. */ id?: string; /** If `true`, only include the default virtual network. If `false`, exclude the default virtual network. If empty, all virtual networks will be included. */ isDefault?: boolean; /** If `true`, only include the default virtual network. If `false`, exclude the default virtual network. If empty, all virtual networks will be included. */ isDefaultNetwork?: boolean; /** If `true`, only include deleted virtual networks. If `false`, exclude deleted virtual networks. If empty, all virtual networks will be included. */ isDeleted?: boolean; /** A user-friendly name for the virtual network. */ name?: string; } export const ListNetworkVirtualNetworksRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.optional(S.String.pipe(T.Query())), isDefault: S.optional(S.Boolean.pipe(T.Query("is_default"))), isDefaultNetwork: S.optional(S.Boolean.pipe(T.Query("is_default_network"))), isDeleted: S.optional(S.Boolean.pipe(T.Query("is_deleted"))), name: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/teamnet/virtual_networks", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListNetworkVirtualNetworksRequest", }) as any as S.Schema; export interface NetworksVirtualNetworksListResultItem { /** UUID of the virtual network. */ id: string; /** Optional remark describing the virtual network. */ comment: string; /** Timestamp of when the resource was created. */ createdAt: string; /** If `true`, this virtual network is the default for the account. */ isDefaultNetwork: boolean; /** A user-friendly name for the virtual network. */ name: string; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; } export const NetworksVirtualNetworksListResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, comment: S.String, createdAt: S.String.pipe(T.Body("created_at")), isDefaultNetwork: S.Boolean.pipe(T.Body("is_default_network")), name: S.String, deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), }), ).annotate({ identifier: "NetworksVirtualNetworksListResultItem", }) as any as S.Schema; export type NetworksVirtualNetworksListResultList = Array; export const NetworksVirtualNetworksListResultList = /*@__PURE__*/ S.Array( NetworksVirtualNetworksListResultItem, ) as any as S.Schema; export interface ListNetworkVirtualNetworksResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: NetworksVirtualNetworksListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListNetworkVirtualNetworksResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: NetworksVirtualNetworksListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListNetworkVirtualNetworksResponse", }) as any as S.Schema; export interface ListOrganizationsForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; } export const ListOrganizationsForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/organizations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListOrganizationsForAccountRequest", }) as any as S.Schema; export type OrganizationsListResponseCustomPages = OrganizationsCreateResponseCustomPages; export const OrganizationsListResponseCustomPages = OrganizationsCreateResponseCustomPages; export type OrganizationsListResponseDenyUnmatchedRequestsExemptedZoneNamesList = Array; export const OrganizationsListResponseDenyUnmatchedRequestsExemptedZoneNamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type OrganizationsListResponseLoginDesign = OrganizationsCreateResponseLoginDesign; export const OrganizationsListResponseLoginDesign = OrganizationsCreateResponseLoginDesign; export type OrganizationsListResponseMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key" | "piv_key"; export const OrganizationsListResponseMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type OrganizationsListResponseMfaConfigAllowedAuthenticatorsList = Array; export const OrganizationsListResponseMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( OrganizationsListResponseMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface OrganizationsListResponseMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: OrganizationsListResponseMfaConfigAllowedAuthenticatorsList | null; /** Allows a user to skip MFA via Authentication Method Reference (AMR) matching when the AMR claim provided by the IdP the user used to authenticate contains "mfa". Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). */ amrMatchingSessionDuration?: string | null; /** Specifies a Cloudflare List of required FIDO2 authenticator device AAGUIDs. */ requiredAaguids?: string | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const OrganizationsListResponseMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( OrganizationsListResponseMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), amrMatchingSessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("amr_matching_session_duration")), ), requiredAaguids: S.optional( S.NullOr(S.String).pipe(T.Body("required_aaguids")), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "OrganizationsListResponseMfaConfig", }) as any as S.Schema; export type OrganizationsListResponseMfaPivKeyRequirementsPinPolicy = | "never" | "once" | "always"; export const OrganizationsListResponseMfaPivKeyRequirementsPinPolicy = /*@__PURE__*/ S.String; export type OrganizationsListResponseMfaPivKeyRequirementsSshKeySizeItem = | 256 | 384 | 521 | 2048 | 3072 | 4096; export const OrganizationsListResponseMfaPivKeyRequirementsSshKeySizeItem = /*@__PURE__*/ S.Number; export type OrganizationsListResponseMfaPivKeyRequirementsSshKeySizeList = Array; export const OrganizationsListResponseMfaPivKeyRequirementsSshKeySizeList = /*@__PURE__*/ S.Array( OrganizationsListResponseMfaPivKeyRequirementsSshKeySizeItem, ) as any as S.Schema; export type OrganizationsListResponseMfaPivKeyRequirementsSshKeyTypeItem = | "ecdsa" | "ed25519" | "rsa"; export const OrganizationsListResponseMfaPivKeyRequirementsSshKeyTypeItem = /*@__PURE__*/ S.String; export type OrganizationsListResponseMfaPivKeyRequirementsSshKeyTypeList = Array; export const OrganizationsListResponseMfaPivKeyRequirementsSshKeyTypeList = /*@__PURE__*/ S.Array( OrganizationsListResponseMfaPivKeyRequirementsSshKeyTypeItem, ) as any as S.Schema; export type OrganizationsListResponseMfaPivKeyRequirementsTouchPolicy = | "never" | "always" | "cached"; export const OrganizationsListResponseMfaPivKeyRequirementsTouchPolicy = /*@__PURE__*/ S.String; export interface OrganizationsListResponseMfaPivKeyRequirements { /** Defines when a PIN is required to use the SSH key. Valid values: `never` (no PIN required), `once` (PIN required once per session), `always` (PIN required for each use). */ pinPolicy?: OrganizationsListResponseMfaPivKeyRequirementsPinPolicy | null; /** Requires the PIV key to be stored on a FIPS 140-2 Level 1 or higher validated device. */ requireFipsDevice?: boolean | null; /** Specifies the allowed SSH key sizes in bits. Valid sizes depend on key type. Ed25519 has a fixed key size and does not accept this parameter. */ sshKeySize?: OrganizationsListResponseMfaPivKeyRequirementsSshKeySizeList | null; /** Specifies the allowed SSH key types. Valid values are `ecdsa`, `ed25519`, and `rsa`. */ sshKeyType?: OrganizationsListResponseMfaPivKeyRequirementsSshKeyTypeList | null; /** Defines when physical touch is required to use the SSH key. Valid values: `never` (no touch required), `always` (touch required for each use), `cached` (touch cached for 15 seconds). */ touchPolicy?: OrganizationsListResponseMfaPivKeyRequirementsTouchPolicy | null; } export const OrganizationsListResponseMfaPivKeyRequirements = /*@__PURE__*/ S.suspend(() => S.Struct({ pinPolicy: S.optional( S.NullOr(OrganizationsListResponseMfaPivKeyRequirementsPinPolicy).pipe( T.Body("pin_policy"), ), ), requireFipsDevice: S.optional( S.NullOr(S.Boolean).pipe(T.Body("require_fips_device")), ), sshKeySize: S.optional( S.NullOr( OrganizationsListResponseMfaPivKeyRequirementsSshKeySizeList, ).pipe(T.Body("ssh_key_size")), ), sshKeyType: S.optional( S.NullOr( OrganizationsListResponseMfaPivKeyRequirementsSshKeyTypeList, ).pipe(T.Body("ssh_key_type")), ), touchPolicy: S.optional( S.NullOr( OrganizationsListResponseMfaPivKeyRequirementsTouchPolicy, ).pipe(T.Body("touch_policy")), ), }), ).annotate({ identifier: "OrganizationsListResponseMfaPivKeyRequirements", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ListOrganizationsResponse { /** When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value. */ allowAuthenticateViaWarp?: boolean | null; /** The unique subdomain assigned to your Zero Trust organization. */ authDomain?: string | null; /** When set to `true`, users skip the identity provider selection step during login. */ autoRedirectToIdentity?: boolean | null; customPages?: OrganizationsCreateResponseCustomPages | null; /** Determines whether to deny all requests to Cloudflare-protected resources that lack an associated Access application. If enabled, you must explicitly configure an Access application and policy to allow traffic to your Cloudflare-protected resources. For domains you want to be public across all subdomains, add the domain to the `deny_unmatched_requests_exempted_zone_names` array. */ denyUnmatchedRequests?: boolean | null; /** Contains zone names to exempt from the `deny_unmatched_requests` feature. Requests to a subdomain in an exempted zone will block unauthenticated traffic by default if there is a configured Access application and policy that matches the request. */ denyUnmatchedRequestsExemptedZoneNames?: OrganizationsListResponseDenyUnmatchedRequestsExemptedZoneNamesList | null; /** Lock all settings as Read-Only in the Dashboard, regardless of user permission. Updates may only be made via the API or Terraform for this account when enabled. */ isUiReadOnly?: boolean | null; loginDesign?: OrganizationsCreateResponseLoginDesign | null; /** Configures multi-factor authentication (MFA) settings for an organization. */ mfaConfig?: OrganizationsListResponseMfaConfig | null; /** Configures PIV key requirements for MFA using hardware security keys. */ mfaPivKeyRequirements?: OrganizationsListResponseMfaPivKeyRequirements | null; /** Determines whether global MFA settings apply to applications by default. The organization must have MFA enabled with at least one authentication method and a session duration configured. Note: 'allowed_authenticators' cannot only contain 'piv_key' if the organization has any non-infrastructure applications because PIV keys are only compatible with infrastructure apps. */ mfaRequiredForAllApps?: boolean | null; /** The name of your Zero Trust organization. */ name?: string | null; /** The amount of time that tokens issued for applications will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; /** A description of the reason why the UI read only field is being toggled. */ uiReadOnlyToggleReason?: string | null; /** The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format `300ms` or `2h45m`. Valid time units are: `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. */ userSeatExpirationInactiveTime?: string | null; /** The amount of time that tokens issued for applications will be valid. Must be in the format `30m` or `2h45m`. Valid time units are: m, h. */ warpAuthSessionDuration?: string | null; } export const ListOrganizationsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), authDomain: S.optional(S.NullOr(S.String).pipe(T.Body("auth_domain"))), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customPages: S.optional( S.NullOr(OrganizationsCreateResponseCustomPages).pipe( T.Body("custom_pages"), ), ), denyUnmatchedRequests: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deny_unmatched_requests")), ), denyUnmatchedRequestsExemptedZoneNames: S.optional( S.NullOr( OrganizationsListResponseDenyUnmatchedRequestsExemptedZoneNamesList, ).pipe(T.Body("deny_unmatched_requests_exempted_zone_names")), ), isUiReadOnly: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_ui_read_only")), ), loginDesign: S.optional( S.NullOr(OrganizationsCreateResponseLoginDesign).pipe( T.Body("login_design"), ), ), mfaConfig: S.optional( S.NullOr(OrganizationsListResponseMfaConfig).pipe(T.Body("mfa_config")), ), mfaPivKeyRequirements: S.optional( S.NullOr(OrganizationsListResponseMfaPivKeyRequirements).pipe( T.Body("mfa_piv_key_requirements"), ), ), mfaRequiredForAllApps: S.optional( S.NullOr(S.Boolean).pipe(T.Body("mfa_required_for_all_apps")), ), name: S.optional(S.NullOr(S.String)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), uiReadOnlyToggleReason: S.optional( S.NullOr(S.String).pipe(T.Body("ui_read_only_toggle_reason")), ), userSeatExpirationInactiveTime: S.optional( S.NullOr(S.String).pipe(T.Body("user_seat_expiration_inactive_time")), ), warpAuthSessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("warp_auth_session_duration")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListOrganizationsResponse", }) as any as S.Schema; export interface ListOrganizationsForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; } export const ListOrganizationsForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), }) .pipe( T.Http({ method: "GET", uri: "/zones/{zone_id}/access/organizations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListOrganizationsForZoneRequest", }) as any as S.Schema; export interface ListResourceLibraryApplicationsRequest { accountId: string; /** Filter applications using key:value format. Supported filter keys: */ filter?: string; /** Limit of number of results to return (max 250). */ limit?: number; /** Offset of results to return. */ offset?: number; /** Order results by field name and direction (e.g., name:asc). Ignored when search is provided; results are ranked by relevance instead. */ orderBy?: string; /** Fuzzy search across application name and hostnames. Results are ranked by relevance. Must be between 2 and 200 characters. Can be combined with filter parameters. */ search?: string; } export const ListResourceLibraryApplicationsRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), filter: S.optional(S.String.pipe(T.Query())), limit: S.optional(S.Number.pipe(T.Query())), offset: S.optional(S.Number.pipe(T.Query())), orderBy: S.optional(S.String.pipe(T.Query("order_by"))), search: S.optional(S.String.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/resource-library/applications", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListResourceLibraryApplicationsRequest", }) as any as S.Schema; export type ResourceLibraryApplicationsListResultItemHostnamesList = Array; export const ResourceLibraryApplicationsListResultItemHostnamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type ResourceLibraryApplicationsListResultItemIpSubnetsList = Array; export const ResourceLibraryApplicationsListResultItemIpSubnetsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type ResourceLibraryApplicationsListResultItemPortProtocolsList = Array; export const ResourceLibraryApplicationsListResultItemPortProtocolsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type ResourceLibraryApplicationsListResultItemSupportDomainsList = Array; export const ResourceLibraryApplicationsListResultItemSupportDomainsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type ResourceLibraryApplicationsListResultItemSupportedItem = | "GATEWAY" | "ACCESS" | "CASB"; export const ResourceLibraryApplicationsListResultItemSupportedItem = /*@__PURE__*/ S.String; export type ResourceLibraryApplicationsListResultItemSupportedList = Array; export const ResourceLibraryApplicationsListResultItemSupportedList = /*@__PURE__*/ S.Array( ResourceLibraryApplicationsListResultItemSupportedItem, ) as any as S.Schema; export interface ResourceLibraryApplicationsListResultItem { /** Returns the application ID. */ id: string; /** Confidence score for the application. Returns -1 when no score is available. */ applicationConfidenceScore: number; /** Returns the application source. */ applicationSource: string; /** Returns the application type. */ applicationType: string; /** Returns the application type description. */ applicationTypeDescription: string; /** Returns the application creation time. */ createdAt: string; /** GenAI score for the application. Returns -1 when no score is available. */ genAiScore: number; /** Returns the list of hostnames for the application. */ hostnames: ResourceLibraryApplicationsListResultItemHostnamesList; /** Returns the human readable ID. */ humanId: string; /** Returns the list of IP subnets for the application. */ ipSubnets: ResourceLibraryApplicationsListResultItemIpSubnetsList; /** Returns the application name. */ name: string; /** Returns the list of port protocols for the application. */ portProtocols: ResourceLibraryApplicationsListResultItemPortProtocolsList; /** Returns the list of support domains for the application. */ supportDomains: ResourceLibraryApplicationsListResultItemSupportDomainsList; /** Cloudflare products that support this application. */ supported: ResourceLibraryApplicationsListResultItemSupportedList; /** Returns the application update time. */ updatedAt: string; /** Returns the application version. */ version: string; /** Returns the score composition breakdown for the application. */ applicationScoreComposition?: unknown | null; /** Returns the Intel API ID for the application. */ intelId?: number | null; } export const ResourceLibraryApplicationsListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, applicationConfidenceScore: S.Number.pipe( T.Body("application_confidence_score"), ), applicationSource: S.String.pipe(T.Body("application_source")), applicationType: S.String.pipe(T.Body("application_type")), applicationTypeDescription: S.String.pipe( T.Body("application_type_description"), ), createdAt: S.String.pipe(T.Body("created_at")), genAiScore: S.Number.pipe(T.Body("gen_ai_score")), hostnames: ResourceLibraryApplicationsListResultItemHostnamesList, humanId: S.String.pipe(T.Body("human_id")), ipSubnets: ResourceLibraryApplicationsListResultItemIpSubnetsList.pipe( T.Body("ip_subnets"), ), name: S.String, portProtocols: ResourceLibraryApplicationsListResultItemPortProtocolsList.pipe( T.Body("port_protocols"), ), supportDomains: ResourceLibraryApplicationsListResultItemSupportDomainsList.pipe( T.Body("support_domains"), ), supported: ResourceLibraryApplicationsListResultItemSupportedList, updatedAt: S.String.pipe(T.Body("updated_at")), version: S.String, applicationScoreComposition: S.optional( S.NullOr(S.Unknown).pipe(T.Body("application_score_composition")), ), intelId: S.optional(S.NullOr(S.Number).pipe(T.Body("intel_id"))), }), ).annotate({ identifier: "ResourceLibraryApplicationsListResultItem", }) as any as S.Schema; export type ResourceLibraryApplicationsListResultList = Array; export const ResourceLibraryApplicationsListResultList = /*@__PURE__*/ S.Array( ResourceLibraryApplicationsListResultItem, ) as any as S.Schema; export interface ListResourceLibraryApplicationsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: ResourceLibraryApplicationsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListResourceLibraryApplicationsResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: ResourceLibraryApplicationsListResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListResourceLibraryApplicationsResponse", }) as any as S.Schema; export interface ListResourceLibraryCategoriesRequest { accountId: string; /** Limit of number of results to return. */ limit?: number; /** Offset of results to return. */ offset?: number; } export const ListResourceLibraryCategoriesRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), limit: S.optional(S.Number.pipe(T.Query())), offset: S.optional(S.Number.pipe(T.Query())), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/resource-library/categories", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListResourceLibraryCategoriesRequest", }) as any as S.Schema; export interface ResourceLibraryCategoriesListResultItem { /** Returns the category ID. */ id: string; /** Returns the category creation time. */ createdAt: string; /** Returns the category description. */ description: string; /** Returns the category name. */ name: string; } export const ResourceLibraryCategoriesListResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), description: S.String, name: S.String, }), ).annotate({ identifier: "ResourceLibraryCategoriesListResultItem", }) as any as S.Schema; export type ResourceLibraryCategoriesListResultList = Array; export const ResourceLibraryCategoriesListResultList = /*@__PURE__*/ S.Array( ResourceLibraryCategoriesListResultItem, ) as any as S.Schema; export interface ListResourceLibraryCategoriesResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: ResourceLibraryCategoriesListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListResourceLibraryCategoriesResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: ResourceLibraryCategoriesListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListResourceLibraryCategoriesResponse", }) as any as S.Schema; export interface ListRiskScoringIntegrationsRequest { accountId: string; } export const ListRiskScoringIntegrationsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/zt_risk_scoring/integrations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListRiskScoringIntegrationsRequest", }) as any as S.Schema; export type RiskScoringIntegrationsListResultItemIntegrationType = "Okta"; export const RiskScoringIntegrationsListResultItemIntegrationType = /*@__PURE__*/ S.String; export interface RiskScoringIntegrationsListResultItem { /** The id of the integration, a UUIDv4. */ id: string; /** The Cloudflare account tag. */ accountTag: string; /** Whether this integration is enabled and should export changes in risk score. */ active: boolean; /** When the integration was created in RFC3339 format. */ createdAt: string; integrationType: RiskScoringIntegrationsListResultItemIntegrationType; /** A reference ID defined by the client. */ referenceId: string; /** The base URL for the tenant. E.g. "https://tenant.okta.com". */ tenantUrl: string; /** The URL for the Shared Signals Framework configuration, e.g. "/.well-known/sse-configuration/{integration_uuid}/". https://openid.net/specs/openid-sse-framework-1_0.html#rfc.section.6.2.1. */ wellKnownUrl: string; } export const RiskScoringIntegrationsListResultItem = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, accountTag: S.String.pipe(T.Body("account_tag")), active: S.Boolean, createdAt: S.String.pipe(T.Body("created_at")), integrationType: RiskScoringIntegrationsListResultItemIntegrationType.pipe( T.Body("integration_type"), ), referenceId: S.String.pipe(T.Body("reference_id")), tenantUrl: S.String.pipe(T.Body("tenant_url")), wellKnownUrl: S.String.pipe(T.Body("well_known_url")), }), ).annotate({ identifier: "RiskScoringIntegrationsListResultItem", }) as any as S.Schema; export type RiskScoringIntegrationsListResultList = Array; export const RiskScoringIntegrationsListResultList = /*@__PURE__*/ S.Array( RiskScoringIntegrationsListResultItem, ) as any as S.Schema; export interface ListRiskScoringIntegrationsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: RiskScoringIntegrationsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListRiskScoringIntegrationsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: RiskScoringIntegrationsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListRiskScoringIntegrationsResponse", }) as any as S.Schema; export interface ListTenantGatewayRuleRequest { accountId: string; } export const ListTenantGatewayRuleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/gateway/rules/tenant", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListTenantGatewayRuleRequest", }) as any as S.Schema; export type GatewayRulesListTenantResultItemAction = | "on" | "off" | "allow" | "block" | "scan" | "noscan" | "safesearch" | "ytrestricted" | "isolate" | "noisolate" | "override" | "l4_override" | "egress" | "resolve" | "quarantine" | "redirect"; export const GatewayRulesListTenantResultItemAction = /*@__PURE__*/ S.String; export type GatewayRulesListTenantResultItemFiltersItem = | "http" | "dns" | "l4" | "egress" | "dns_resolver"; export const GatewayRulesListTenantResultItemFiltersItem = /*@__PURE__*/ S.String; export type GatewayRulesListTenantResultItemFiltersList = Array; export const GatewayRulesListTenantResultItemFiltersList = /*@__PURE__*/ S.Array( GatewayRulesListTenantResultItemFiltersItem, ) as any as S.Schema; export type GatewayRulesListTenantResultItemExpiration = GatewayRulesCreateResponseExpiration; export const GatewayRulesListTenantResultItemExpiration = GatewayRulesCreateResponseExpiration; export type GatewayRulesListTenantResultItemRuleSettingsAddHeadersValueList = Array; export const GatewayRulesListTenantResultItemRuleSettingsAddHeadersValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayRulesListTenantResultItemRuleSettingsAddHeadersMap = { [key: string]: | GatewayRulesListTenantResultItemRuleSettingsAddHeadersValueList | undefined; }; export const GatewayRulesListTenantResultItemRuleSettingsAddHeadersMap = /*@__PURE__*/ S.Record( S.String, GatewayRulesListTenantResultItemRuleSettingsAddHeadersValueList, ) as any as S.Schema; export type GatewayRulesListTenantResultItemRuleSettingsAuditSsh = GatewayRulesCreateResponseRuleSettingsAuditSsh; export const GatewayRulesListTenantResultItemRuleSettingsAuditSsh = GatewayRulesCreateResponseRuleSettingsAuditSsh; export type GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsCopy = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsCopy = /*@__PURE__*/ S.String; export type GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsDownload = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsDownload = /*@__PURE__*/ S.String; export type GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsKeyboard = | "enabled" | "disabled"; export const GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsKeyboard = /*@__PURE__*/ S.String; export type GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsPaste = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsPaste = /*@__PURE__*/ S.String; export type GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsPrinting = | "enabled" | "disabled"; export const GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsPrinting = /*@__PURE__*/ S.String; export type GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsUpload = | "enabled" | "disabled"; export const GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsUpload = /*@__PURE__*/ S.String; export type GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsVersion = | "v1" | "v2"; export const GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsVersion = /*@__PURE__*/ S.String; export interface GatewayRulesListTenantResultItemRuleSettingsBisoAdminControls { /** Configure copy behavior. If set to remote_only, users cannot copy isolated content from the remote browser to the local clipboard. If this field is absent, copying remains enabled. Applies only when version == "v2". */ copy?: GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsCopy | null; /** Set to false to enable copy-pasting. Only applies when `version == "v1"`. */ dcp?: boolean | null; /** Set to false to enable downloading. Only applies when `version == "v1"`. */ dd?: boolean | null; /** Set to false to enable keyboard usage. Only applies when `version == "v1"`. */ dk?: boolean | null; /** Configure download behavior. When set to remote_only, users can view downloads but cannot save them. If this field is absent, downloading remains enabled. Applies only when version == "v2". */ download?: GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsDownload | null; /** Set to false to enable printing. Only applies when `version == "v1"`. */ dp?: boolean | null; /** Set to false to enable uploading. Only applies when `version == "v1"`. */ du?: boolean | null; /** Configure keyboard usage behavior. If this field is absent, keyboard usage remains enabled. Applies only when version == "v2". */ keyboard?: GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsKeyboard | null; /** Configure paste behavior. If set to remote_only, users cannot paste content from the local clipboard into isolated pages. If this field is absent, pasting remains enabled. Applies only when version == "v2". */ paste?: GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsPaste | null; /** Configure print behavior. Default, Printing is enabled. Applies only when version == "v2". */ printing?: GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsPrinting | null; /** Configure upload behavior. If this field is absent, uploading remains enabled. Applies only when version == "v2". */ upload?: GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsUpload | null; /** Indicate which version of the browser isolation controls should apply. */ version?: GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsVersion | null; /** Specify the watermark ID (UUID) to apply to the isolated browser session. When present, enables watermark rendering in the isolated browser. */ wmId?: string | null; } export const GatewayRulesListTenantResultItemRuleSettingsBisoAdminControls = /*@__PURE__*/ S.suspend(() => S.Struct({ copy: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsCopy, ), ), dcp: S.optional(S.NullOr(S.Boolean)), dd: S.optional(S.NullOr(S.Boolean)), dk: S.optional(S.NullOr(S.Boolean)), download: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsDownload, ), ), dp: S.optional(S.NullOr(S.Boolean)), du: S.optional(S.NullOr(S.Boolean)), keyboard: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsKeyboard, ), ), paste: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsPaste, ), ), printing: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsPrinting, ), ), upload: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsUpload, ), ), version: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsBisoAdminControlsVersion, ), ), wmId: S.optional(S.NullOr(S.String).pipe(T.Body("wm_id"))), }), ).annotate({ identifier: "GatewayRulesListTenantResultItemRuleSettingsBisoAdminControls", }) as any as S.Schema; export type GatewayRulesListTenantResultItemRuleSettingsBlockPage = GatewayRulesCreateResponseRuleSettingsBlockPage; export const GatewayRulesListTenantResultItemRuleSettingsBlockPage = GatewayRulesCreateResponseRuleSettingsBlockPage; export type GatewayRulesListTenantResultItemRuleSettingsCheckSession = GatewayRulesCreateResponseRuleSettingsCheckSession; export const GatewayRulesListTenantResultItemRuleSettingsCheckSession = GatewayRulesCreateResponseRuleSettingsCheckSession; export type GatewayRulesListTenantResultItemRuleSettingsDnsResolversIpv4Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item; export const GatewayRulesListTenantResultItemRuleSettingsDnsResolversIpv4Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item; export type GatewayRulesListTenantResultItemRuleSettingsDnsResolversIpv4List = Array; export const GatewayRulesListTenantResultItemRuleSettingsDnsResolversIpv4List = /*@__PURE__*/ S.Array( GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item, ) as any as S.Schema; export type GatewayRulesListTenantResultItemRuleSettingsDnsResolversIpv6Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item; export const GatewayRulesListTenantResultItemRuleSettingsDnsResolversIpv6Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item; export type GatewayRulesListTenantResultItemRuleSettingsDnsResolversIpv6List = Array; export const GatewayRulesListTenantResultItemRuleSettingsDnsResolversIpv6List = /*@__PURE__*/ S.Array( GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item, ) as any as S.Schema; export interface GatewayRulesListTenantResultItemRuleSettingsDnsResolvers { ipv4?: GatewayRulesListTenantResultItemRuleSettingsDnsResolversIpv4List | null; ipv6?: GatewayRulesListTenantResultItemRuleSettingsDnsResolversIpv6List | null; } export const GatewayRulesListTenantResultItemRuleSettingsDnsResolvers = /*@__PURE__*/ S.suspend(() => S.Struct({ ipv4: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsDnsResolversIpv4List, ), ), ipv6: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsDnsResolversIpv6List, ), ), }), ).annotate({ identifier: "GatewayRulesListTenantResultItemRuleSettingsDnsResolvers", }) as any as S.Schema; export type GatewayRulesListTenantResultItemRuleSettingsEgress = GatewayRulesCreateResponseRuleSettingsEgress; export const GatewayRulesListTenantResultItemRuleSettingsEgress = GatewayRulesCreateResponseRuleSettingsEgress; export type GatewayRulesListTenantResultItemRuleSettingsForensicCopy = GatewayRulesCreateResponseRuleSettingsForensicCopy; export const GatewayRulesListTenantResultItemRuleSettingsForensicCopy = GatewayRulesCreateResponseRuleSettingsForensicCopy; export type GatewayRulesListTenantResultItemRuleSettingsL4override = GatewayRulesCreateResponseRuleSettingsL4override; export const GatewayRulesListTenantResultItemRuleSettingsL4override = GatewayRulesCreateResponseRuleSettingsL4override; export type GatewayRulesListTenantResultItemRuleSettingsNotificationSettings = GatewayRulesCreateResponseRuleSettingsNotificationSettings; export const GatewayRulesListTenantResultItemRuleSettingsNotificationSettings = GatewayRulesCreateResponseRuleSettingsNotificationSettings; export type GatewayRulesListTenantResultItemRuleSettingsOverrideIpsList = Array; export const GatewayRulesListTenantResultItemRuleSettingsOverrideIpsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayRulesListTenantResultItemRuleSettingsPayloadLog = GatewayRulesCreateResponseRuleSettingsPayloadLog; export const GatewayRulesListTenantResultItemRuleSettingsPayloadLog = GatewayRulesCreateResponseRuleSettingsPayloadLog; export type GatewayRulesListTenantResultItemRuleSettingsQuarantineFileTypesItem = | "exe" | "pdf" | "doc" | "docm" | "docx" | "rtf" | "ppt" | "pptx" | "xls" | "xlsm" | "xlsx" | "zip" | "rar"; export const GatewayRulesListTenantResultItemRuleSettingsQuarantineFileTypesItem = /*@__PURE__*/ S.String; export type GatewayRulesListTenantResultItemRuleSettingsQuarantineFileTypesList = Array; export const GatewayRulesListTenantResultItemRuleSettingsQuarantineFileTypesList = /*@__PURE__*/ S.Array( GatewayRulesListTenantResultItemRuleSettingsQuarantineFileTypesItem, ) as any as S.Schema; export interface GatewayRulesListTenantResultItemRuleSettingsQuarantine { /** Specify the types of files to sandbox. */ fileTypes?: GatewayRulesListTenantResultItemRuleSettingsQuarantineFileTypesList | null; } export const GatewayRulesListTenantResultItemRuleSettingsQuarantine = /*@__PURE__*/ S.suspend(() => S.Struct({ fileTypes: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsQuarantineFileTypesList, ).pipe(T.Body("file_types")), ), }), ).annotate({ identifier: "GatewayRulesListTenantResultItemRuleSettingsQuarantine", }) as any as S.Schema; export type GatewayRulesListTenantResultItemRuleSettingsRedirect = GatewayRulesCreateResponseRuleSettingsRedirect; export const GatewayRulesListTenantResultItemRuleSettingsRedirect = GatewayRulesCreateResponseRuleSettingsRedirect; export type GatewayRulesListTenantResultItemRuleSettingsResolveDnsInternallyFallback = | "none" | "public_dns"; export const GatewayRulesListTenantResultItemRuleSettingsResolveDnsInternallyFallback = /*@__PURE__*/ S.String; export interface GatewayRulesListTenantResultItemRuleSettingsResolveDnsInternally { /** Specify the fallback behavior to apply when the internal DNS response code differs from 'NOERROR' or when the response data contains only CNAME records for 'A' or 'AAAA' queries. */ fallback?: GatewayRulesListTenantResultItemRuleSettingsResolveDnsInternallyFallback | null; /** Specify the internal DNS view identifier to pass to the internal DNS service. */ viewId?: string | null; } export const GatewayRulesListTenantResultItemRuleSettingsResolveDnsInternally = /*@__PURE__*/ S.suspend(() => S.Struct({ fallback: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsResolveDnsInternallyFallback, ), ), viewId: S.optional(S.NullOr(S.String).pipe(T.Body("view_id"))), }), ).annotate({ identifier: "GatewayRulesListTenantResultItemRuleSettingsResolveDnsInternally", }) as any as S.Schema; export type GatewayRulesListTenantResultItemRuleSettingsUntrustedCertAction = | "pass_through" | "block" | "error"; export const GatewayRulesListTenantResultItemRuleSettingsUntrustedCertAction = /*@__PURE__*/ S.String; export interface GatewayRulesListTenantResultItemRuleSettingsUntrustedCert { /** Defines the action performed when an untrusted certificate seen. The default action an error with HTTP code 526. */ action?: GatewayRulesListTenantResultItemRuleSettingsUntrustedCertAction | null; } export const GatewayRulesListTenantResultItemRuleSettingsUntrustedCert = /*@__PURE__*/ S.suspend(() => S.Struct({ action: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsUntrustedCertAction, ), ), }), ).annotate({ identifier: "GatewayRulesListTenantResultItemRuleSettingsUntrustedCert", }) as any as S.Schema; export interface GatewayRulesListTenantResultItemRuleSettings { /** Add custom headers to allowed requests as key-value pairs. Use header names as keys that map to arrays of header values. Settable only for `http` rules with the action set to `allow`. */ addHeaders?: GatewayRulesListTenantResultItemRuleSettingsAddHeadersMap | null; /** Set to enable MSP children to bypass this rule. Only parent MSP accounts can set this. this rule. Settable for all types of rules. */ allowChildBypass?: boolean | null; /** Define the settings for the Audit SSH action. Settable only for `l4` rules with `audit_ssh` action. */ auditSsh?: GatewayRulesCreateResponseRuleSettingsAuditSsh | null; /** Configure browser isolation behavior. Settable only for `http` rules with the action set to `isolate`. */ bisoAdminControls?: GatewayRulesListTenantResultItemRuleSettingsBisoAdminControls | null; /** Configure custom block page settings. If missing or null, use the account settings. Settable only for `http` rules with the action set to `block`. */ blockPage?: GatewayRulesCreateResponseRuleSettingsBlockPage | null; /** Enable the custom block page. Settable only for `dns` rules with action `block`. */ blockPageEnabled?: boolean | null; /** Explain why the rule blocks the request. The custom block page shows this text (if enabled). Settable only for `dns`, `l4`, and `http` rules when the action set to `block`. */ blockReason?: string | null; /** Set to enable MSP accounts to bypass their parent's rules. Only MSP child accounts can set this. Settable for all types of rules. */ bypassParentRule?: boolean | null; /** Configure session check behavior. Settable only for `l4` and `http` rules with the action set to `allow`. */ checkSession?: GatewayRulesCreateResponseRuleSettingsCheckSession | null; /** Configure custom resolvers to route queries that match the resolver policy. Unused with 'resolve_dns_through_cloudflare' or 'resolve_dns_internally' settings. DNS queries get routed to the address closest to their origin. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ dnsResolvers?: GatewayRulesListTenantResultItemRuleSettingsDnsResolvers | null; /** Configure how Gateway Proxy traffic egresses. You can enable this setting for rules with Egress actions and filters, or omit it to indicate local egress via WARP IPs. Settable only for `egress` rules. */ egress?: GatewayRulesCreateResponseRuleSettingsEgress | null; /** Configure whether a copy of the HTTP request will be sent to storage when the rule matches. */ forensicCopy?: GatewayRulesCreateResponseRuleSettingsForensicCopy | null; /** Ignore category matches at CNAME domains in a response. When off, evaluate categories in this rule against all CNAME domain categories in the response. Settable only for `dns` and `dns_resolver` rules. */ ignoreCnameCategoryMatches?: boolean | null; /** Specify whether to disable DNSSEC validation (for Allow actions) [INSECURE]. Settable only for `dns` rules. */ insecureDisableDnssecValidation?: boolean | null; /** Enable IPs in DNS resolver category blocks. The system blocks only domain name categories unless you enable this setting. Settable only for `dns` and `dns_resolver` rules. */ ipCategories?: boolean | null; /** Indicates whether to include IPs in DNS resolver indicator feed blocks. Default, indicator feeds block only domain names. Settable only for `dns` and `dns_resolver` rules. */ ipIndicatorFeeds?: boolean | null; /** Send matching traffic to the supplied destination IP address and port. Settable only for `l4` rules with the action set to `l4_override`. */ l4override?: GatewayRulesCreateResponseRuleSettingsL4override | null; /** Configure a notification to display on the user's device when this rule matched. Settable for all types of rules with the action set to `block`. */ notificationSettings?: GatewayRulesCreateResponseRuleSettingsNotificationSettings | null; /** Defines a hostname for override, for the matching DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideHost?: string | null; /** Defines a an IP or set of IPs for overriding matched DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideIps?: GatewayRulesListTenantResultItemRuleSettingsOverrideIpsList | null; /** Configure DLP payload logging. Settable only for `http` rules. */ payloadLog?: GatewayRulesCreateResponseRuleSettingsPayloadLog | null; /** Configure settings that apply to quarantine rules. Settable only for `http` rules. */ quarantine?: GatewayRulesListTenantResultItemRuleSettingsQuarantine | null; /** Apply settings to redirect rules. Settable only for `http` rules with the action set to `redirect`. */ redirect?: GatewayRulesCreateResponseRuleSettingsRedirect | null; /** Configure to forward the query to the internal DNS service, passing the specified 'view_id' as input. Not used when 'dns_resolvers' is specified or 'resolve_dns_through_cloudflare' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsInternally?: GatewayRulesListTenantResultItemRuleSettingsResolveDnsInternally | null; /** Enable to send queries that match the policy to Cloudflare's default 1.1.1.1 DNS resolver. Cannot set when 'dns_resolvers' specified or 'resolve_dns_internally' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsThroughCloudflare?: boolean | null; /** Configure behavior when an upstream certificate is invalid or an SSL error occurs. Settable only for `http` rules with the action set to `allow`. */ untrustedCert?: GatewayRulesListTenantResultItemRuleSettingsUntrustedCert | null; } export const GatewayRulesListTenantResultItemRuleSettings = /*@__PURE__*/ S.suspend(() => S.Struct({ addHeaders: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsAddHeadersMap, ).pipe(T.Body("add_headers")), ), allowChildBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_child_bypass")), ), auditSsh: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsAuditSsh).pipe( T.Body("audit_ssh"), ), ), bisoAdminControls: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsBisoAdminControls, ).pipe(T.Body("biso_admin_controls")), ), blockPage: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsBlockPage).pipe( T.Body("block_page"), ), ), blockPageEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("block_page_enabled")), ), blockReason: S.optional(S.NullOr(S.String).pipe(T.Body("block_reason"))), bypassParentRule: S.optional( S.NullOr(S.Boolean).pipe(T.Body("bypass_parent_rule")), ), checkSession: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsCheckSession).pipe( T.Body("check_session"), ), ), dnsResolvers: S.optional( S.NullOr(GatewayRulesListTenantResultItemRuleSettingsDnsResolvers).pipe( T.Body("dns_resolvers"), ), ), egress: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsEgress), ), forensicCopy: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsForensicCopy).pipe( T.Body("forensic_copy"), ), ), ignoreCnameCategoryMatches: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ignore_cname_category_matches")), ), insecureDisableDnssecValidation: S.optional( S.NullOr(S.Boolean).pipe(T.Body("insecure_disable_dnssec_validation")), ), ipCategories: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ip_categories")), ), ipIndicatorFeeds: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ip_indicator_feeds")), ), l4override: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsL4override), ), notificationSettings: S.optional( S.NullOr( GatewayRulesCreateResponseRuleSettingsNotificationSettings, ).pipe(T.Body("notification_settings")), ), overrideHost: S.optional( S.NullOr(S.String).pipe(T.Body("override_host")), ), overrideIps: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsOverrideIpsList, ).pipe(T.Body("override_ips")), ), payloadLog: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsPayloadLog).pipe( T.Body("payload_log"), ), ), quarantine: S.optional( S.NullOr(GatewayRulesListTenantResultItemRuleSettingsQuarantine), ), redirect: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsRedirect), ), resolveDnsInternally: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsResolveDnsInternally, ).pipe(T.Body("resolve_dns_internally")), ), resolveDnsThroughCloudflare: S.optional( S.NullOr(S.Boolean).pipe(T.Body("resolve_dns_through_cloudflare")), ), untrustedCert: S.optional( S.NullOr( GatewayRulesListTenantResultItemRuleSettingsUntrustedCert, ).pipe(T.Body("untrusted_cert")), ), }), ).annotate({ identifier: "GatewayRulesListTenantResultItemRuleSettings", }) as any as S.Schema; export type GatewayRulesListTenantResultItemSchedule = GatewayRulesCreateResponseSchedule; export const GatewayRulesListTenantResultItemSchedule = GatewayRulesCreateResponseSchedule; export interface GatewayRulesListTenantResultItem { /** Specify the action to perform when the associated traffic, identity, and device posture expressions either absent or evaluate to `true`. */ action: GatewayRulesListTenantResultItemAction; /** Specify whether the rule is enabled. */ enabled: boolean; /** Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value. */ filters: GatewayRulesListTenantResultItemFiltersList; /** Specify the rule name. */ name: string; /** Set the order of your rules. Lower values indicate higher precedence. At each processing phase, evaluate applicable rules in ascending order of this value. Refer to [Order of enforcement](http://developers.cloudflare.com/learning-paths/secure-internet-traffic/understand-policies/order-of-enforcement/#manage-precedence-with-terraform) to manage precedence via Terraform. */ precedence: number; /** Specify the wirefilter expression used for traffic matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ traffic: string; /** Identify the API resource with a UUID. */ id?: string | null; createdAt?: string | null; /** Indicate the date of deletion, if any. */ deletedAt?: string | null; /** Specify the rule description. */ description?: string | null; /** Specify the wirefilter expression used for device posture check. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ devicePosture?: string | null; /** Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This does not apply to HTTP or network policies. Settable only for `dns` rules. */ expiration?: GatewayRulesCreateResponseExpiration | null; /** Specify the wirefilter expression used for identity matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ identity?: string | null; /** Indicate that this rule is shared via the Orgs API and read only. */ readOnly?: boolean | null; /** Defines settings for this rule. Settings apply only to specific rule types and must use compatible selectors. If Terraform detects drift, confirm the setting supports your rule type and check whether the API modifies the value. Use API-returned values in your configuration to prevent drift. */ ruleSettings?: GatewayRulesListTenantResultItemRuleSettings | null; /** Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules. */ schedule?: GatewayRulesCreateResponseSchedule | null; /** Indicate that this rule is sharable via the Orgs API. */ sharable?: boolean | null; /** Provide the account tag of the account that created the rule. */ sourceAccount?: string | null; updatedAt?: string | null; /** Indicate the version number of the rule(read-only). */ version?: number | null; /** Indicate a warning for a misconfigured rule, if any. */ warningStatus?: string | null; } export const GatewayRulesListTenantResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ action: GatewayRulesListTenantResultItemAction, enabled: S.Boolean, filters: GatewayRulesListTenantResultItemFiltersList, name: S.String, precedence: S.Number, traffic: S.String, id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), description: S.optional(S.NullOr(S.String)), devicePosture: S.optional( S.NullOr(S.String).pipe(T.Body("device_posture")), ), expiration: S.optional(S.NullOr(GatewayRulesCreateResponseExpiration)), identity: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), ruleSettings: S.optional( S.NullOr(GatewayRulesListTenantResultItemRuleSettings).pipe( T.Body("rule_settings"), ), ), schedule: S.optional(S.NullOr(GatewayRulesCreateResponseSchedule)), sharable: S.optional(S.NullOr(S.Boolean)), sourceAccount: S.optional( S.NullOr(S.String).pipe(T.Body("source_account")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), version: S.optional(S.NullOr(S.Number)), warningStatus: S.optional( S.NullOr(S.String).pipe(T.Body("warning_status")), ), }), ).annotate({ identifier: "GatewayRulesListTenantResultItem", }) as any as S.Schema; export type GatewayRulesListTenantResultList = Array; export const GatewayRulesListTenantResultList = /*@__PURE__*/ S.Array( GatewayRulesListTenantResultItem, ) as any as S.Schema; export interface ListTenantGatewayRuleResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: GatewayRulesListTenantResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListTenantGatewayRuleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: GatewayRulesListTenantResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListTenantGatewayRuleResponse", }) as any as S.Schema; export type TunnelsCloudflaredListRequestStatus = | "inactive" | "degraded" | "healthy" | "down"; export const TunnelsCloudflaredListRequestStatus = /*@__PURE__*/ S.String; export interface ListTunnelCloudflaredsRequest { /** Cloudflare account ID */ accountId: string; excludePrefix?: string; /** If provided, include only resources that were created (and not deleted) before this time. URL encoded. */ existedAt?: string; includePrefix?: string; /** If `true`, only include deleted tunnels. If `false`, exclude deleted tunnels. If empty, all tunnels will be included. */ isDeleted?: boolean; /** A user-friendly name for a tunnel. */ name?: string; /** Page number of paginated results. */ page?: number; /** Number of results to display. */ perPage?: number; /** The status of the tunnel. Valid values are `inactive` (tunnel has never been run), `degraded` (tunnel is active and able to serve traffic but in an unhealthy state), `healthy` (tunnel is active and able to serve traffic), or `down` (tunnel can not serve traffic as it has no connections to the Cloudflare Edge). */ status?: TunnelsCloudflaredListRequestStatus | (string & {}); /** UUID of the tunnel. */ uuid?: string; wasActiveAt?: string; wasInactiveAt?: string; } export const ListTunnelCloudflaredsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), excludePrefix: S.optional(S.String.pipe(T.Query("exclude_prefix"))), existedAt: S.optional(S.String.pipe(T.Query("existed_at"))), includePrefix: S.optional(S.String.pipe(T.Query("include_prefix"))), isDeleted: S.optional(S.Boolean.pipe(T.Query("is_deleted"))), name: S.optional(S.String.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), status: S.optional(TunnelsCloudflaredListRequestStatus.pipe(T.Query())), uuid: S.optional(S.String.pipe(T.Query())), wasActiveAt: S.optional(S.String.pipe(T.Query("was_active_at"))), wasInactiveAt: S.optional(S.String.pipe(T.Query("was_inactive_at"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/cfd_tunnel", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListTunnelCloudflaredsRequest", }) as any as S.Schema; export type TunnelsCloudflaredListResultItemConfigSrc = "local" | "cloudflare"; export const TunnelsCloudflaredListResultItemConfigSrc = /*@__PURE__*/ S.String; export type TunnelsCloudflaredListResultItemConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export const TunnelsCloudflaredListResultItemConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export type TunnelsCloudflaredListResultItemConnectionsList = Array; export const TunnelsCloudflaredListResultItemConnectionsList = /*@__PURE__*/ S.Array( TunnelsCloudflaredCreateResponseConnectionsItem, ) as any as S.Schema; export type TunnelsCloudflaredListResultItemStatus = | "inactive" | "degraded" | "healthy" | "down"; export const TunnelsCloudflaredListResultItemStatus = /*@__PURE__*/ S.String; export type TunnelsCloudflaredListResultItemTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const TunnelsCloudflaredListResultItemTunType = /*@__PURE__*/ S.String; export interface TunnelsCloudflaredListResultItem { /** UUID of the tunnel. */ id?: string | null; /** Cloudflare account ID */ accountTag?: string | null; /** Indicates if this is a locally or remotely configured tunnel. If `local`, manage the tunnel using a YAML file on the origin machine. If `cloudflare`, manage the tunnel on the Zero Trust dashboard. */ configSrc?: TunnelsCloudflaredListResultItemConfigSrc | null; /** The Cloudflare Tunnel connections between your origin and Cloudflare's edge. */ connections?: TunnelsCloudflaredListResultItemConnectionsList | null; /** Timestamp of when the tunnel established at least one connection to Cloudflare's edge. If `null`, the tunnel is inactive. */ connsActiveAt?: string | null; /** Timestamp of when the tunnel became inactive (no connections to Cloudflare's edge). If `null`, the tunnel is active. */ connsInactiveAt?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** Metadata associated with the tunnel. */ metadata?: unknown | null; /** A user-friendly name for a tunnel. */ name?: string | null; /** If `true`, the tunnel can be configured remotely from the Zero Trust dashboard. If `false`, the tunnel must be configured locally on the origin machine. */ remoteConfig?: boolean | null; /** The status of the tunnel. Valid values are `inactive` (tunnel has never been run), `degraded` (tunnel is active and able to serve traffic but in an unhealthy state), `healthy` (tunnel is active and able to serve traffic), or `down` (tunnel can not serve traffic as it has no connections to the Cloudflare Edge). */ status?: TunnelsCloudflaredListResultItemStatus | null; /** The type of tunnel. */ tunType?: TunnelsCloudflaredListResultItemTunType | null; } export const TunnelsCloudflaredListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), accountTag: S.optional(S.NullOr(S.String).pipe(T.Body("account_tag"))), configSrc: S.optional( S.NullOr(TunnelsCloudflaredListResultItemConfigSrc).pipe( T.Body("config_src"), ), ), connections: S.optional( S.NullOr(TunnelsCloudflaredListResultItemConnectionsList), ), connsActiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_active_at")), ), connsInactiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_inactive_at")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), metadata: S.optional(S.NullOr(S.Unknown)), name: S.optional(S.NullOr(S.String)), remoteConfig: S.optional(S.NullOr(S.Boolean).pipe(T.Body("remote_config"))), status: S.optional(S.NullOr(TunnelsCloudflaredListResultItemStatus)), tunType: S.optional( S.NullOr(TunnelsCloudflaredListResultItemTunType).pipe( T.Body("tun_type"), ), ), }), ).annotate({ identifier: "TunnelsCloudflaredListResultItem", }) as any as S.Schema; export type TunnelsCloudflaredListResultList = Array; export const TunnelsCloudflaredListResultList = /*@__PURE__*/ S.Array( TunnelsCloudflaredListResultItem, ) as any as S.Schema; export interface ListTunnelCloudflaredsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: TunnelsCloudflaredListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListTunnelCloudflaredsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: TunnelsCloudflaredListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListTunnelCloudflaredsResponse", }) as any as S.Schema; export type TunnelsListRequestStatus = | "inactive" | "degraded" | "healthy" | "down"; export const TunnelsListRequestStatus = /*@__PURE__*/ S.String; export type TunnelsListRequestTunTypes = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const TunnelsListRequestTunTypes = /*@__PURE__*/ S.String; export type TunnelsListRequestTunTypesList = Array< TunnelsListRequestTunTypes | (string & {}) >; export const TunnelsListRequestTunTypesList = /*@__PURE__*/ S.Array( TunnelsListRequestTunTypes, ) as any as S.Schema; export interface ListTunnelsRequest { /** Cloudflare account ID */ accountId: string; excludePrefix?: string; /** If provided, include only resources that were created (and not deleted) before this time. URL encoded. */ existedAt?: string; includePrefix?: string; /** If `true`, only include deleted tunnels. If `false`, exclude deleted tunnels. If empty, all tunnels will be included. */ isDeleted?: boolean; /** A user-friendly name for the tunnel. */ name?: string; /** Page number of paginated results. */ page?: number; /** Number of results to display. */ perPage?: number; /** The status of the tunnel. Valid values are `inactive` (tunnel has never been run), `degraded` (tunnel is active and able to serve traffic but in an unhealthy state), `healthy` (tunnel is active and able to serve traffic), or `down` (tunnel can not serve traffic as it has no connections to the Cloudflare Edge). */ status?: TunnelsListRequestStatus | (string & {}); /** The types of tunnels to filter by, separated by commas. */ tunTypes?: TunnelsListRequestTunTypesList; /** UUID of the tunnel. */ uuid?: string; wasActiveAt?: string; wasInactiveAt?: string; } export const ListTunnelsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), excludePrefix: S.optional(S.String.pipe(T.Query("exclude_prefix"))), existedAt: S.optional(S.String.pipe(T.Query("existed_at"))), includePrefix: S.optional(S.String.pipe(T.Query("include_prefix"))), isDeleted: S.optional(S.Boolean.pipe(T.Query("is_deleted"))), name: S.optional(S.String.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), status: S.optional(TunnelsListRequestStatus.pipe(T.Query())), tunTypes: S.optional( TunnelsListRequestTunTypesList.pipe(T.Query("tun_types")), ), uuid: S.optional(S.String.pipe(T.Query())), wasActiveAt: S.optional(S.String.pipe(T.Query("was_active_at"))), wasInactiveAt: S.optional(S.String.pipe(T.Query("was_inactive_at"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/tunnels", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListTunnelsRequest", }) as any as S.Schema; export type TunnelsListResultItemCloudflareTunnelConfigSrc = | "local" | "cloudflare"; export const TunnelsListResultItemCloudflareTunnelConfigSrc = /*@__PURE__*/ S.String; export type TunnelsListResultItemCloudflareTunnelConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export const TunnelsListResultItemCloudflareTunnelConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export type TunnelsListResultItemCloudflareTunnelConnectionsList = Array; export const TunnelsListResultItemCloudflareTunnelConnectionsList = /*@__PURE__*/ S.Array( TunnelsCloudflaredCreateResponseConnectionsItem, ) as any as S.Schema; export type TunnelsListResultItemCloudflareTunnelStatus = | "inactive" | "degraded" | "healthy" | "down"; export const TunnelsListResultItemCloudflareTunnelStatus = /*@__PURE__*/ S.String; export type TunnelsListResultItemCloudflareTunnelTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const TunnelsListResultItemCloudflareTunnelTunType = /*@__PURE__*/ S.String; export interface TunnelsListResultItemCloudflareTunnel { /** UUID of the tunnel. */ id?: string | null; /** Cloudflare account ID */ accountTag?: string | null; /** Indicates if this is a locally or remotely configured tunnel. If `local`, manage the tunnel using a YAML file on the origin machine. If `cloudflare`, manage the tunnel on the Zero Trust dashboard. */ configSrc?: TunnelsListResultItemCloudflareTunnelConfigSrc | null; /** The Cloudflare Tunnel connections between your origin and Cloudflare's edge. */ connections?: TunnelsListResultItemCloudflareTunnelConnectionsList | null; /** Timestamp of when the tunnel established at least one connection to Cloudflare's edge. If `null`, the tunnel is inactive. */ connsActiveAt?: string | null; /** Timestamp of when the tunnel became inactive (no connections to Cloudflare's edge). If `null`, the tunnel is active. */ connsInactiveAt?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** Metadata associated with the tunnel. */ metadata?: unknown | null; /** A user-friendly name for a tunnel. */ name?: string | null; /** If `true`, the tunnel can be configured remotely from the Zero Trust dashboard. If `false`, the tunnel must be configured locally on the origin machine. */ remoteConfig?: boolean | null; /** The status of the tunnel. Valid values are `inactive` (tunnel has never been run), `degraded` (tunnel is active and able to serve traffic but in an unhealthy state), `healthy` (tunnel is active and able to serve traffic), or `down` (tunnel can not serve traffic as it has no connections to the Cloudflare Edge). */ status?: TunnelsListResultItemCloudflareTunnelStatus | null; /** The type of tunnel. */ tunType?: TunnelsListResultItemCloudflareTunnelTunType | null; } export const TunnelsListResultItemCloudflareTunnel = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), accountTag: S.optional(S.NullOr(S.String).pipe(T.Body("account_tag"))), configSrc: S.optional( S.NullOr(TunnelsListResultItemCloudflareTunnelConfigSrc).pipe( T.Body("config_src"), ), ), connections: S.optional( S.NullOr(TunnelsListResultItemCloudflareTunnelConnectionsList), ), connsActiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_active_at")), ), connsInactiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_inactive_at")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), metadata: S.optional(S.NullOr(S.Unknown)), name: S.optional(S.NullOr(S.String)), remoteConfig: S.optional( S.NullOr(S.Boolean).pipe(T.Body("remote_config")), ), status: S.optional(S.NullOr(TunnelsListResultItemCloudflareTunnelStatus)), tunType: S.optional( S.NullOr(TunnelsListResultItemCloudflareTunnelTunType).pipe( T.Body("tun_type"), ), ), }), ).annotate({ identifier: "TunnelsListResultItemCloudflareTunnel", }) as any as S.Schema; export type TunnelsListResultItemTunnelWARPConnectorTunnelConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export const TunnelsListResultItemTunnelWARPConnectorTunnelConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export type TunnelsListResultItemTunnelWARPConnectorTunnelConnectionsList = Array; export const TunnelsListResultItemTunnelWARPConnectorTunnelConnectionsList = /*@__PURE__*/ S.Array( TunnelsCloudflaredCreateResponseConnectionsItem, ) as any as S.Schema; export type TunnelsListResultItemTunnelWARPConnectorTunnelStatus = | "inactive" | "degraded" | "healthy" | "down"; export const TunnelsListResultItemTunnelWARPConnectorTunnelStatus = /*@__PURE__*/ S.String; export type TunnelsListResultItemTunnelWARPConnectorTunnelTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const TunnelsListResultItemTunnelWARPConnectorTunnelTunType = /*@__PURE__*/ S.String; export interface TunnelsListResultItemTunnelWARPConnectorTunnel { /** UUID of the tunnel. */ id?: string | null; /** Cloudflare account ID */ accountTag?: string | null; /** The Cloudflare Tunnel connections between your origin and Cloudflare's edge. */ connections?: TunnelsListResultItemTunnelWARPConnectorTunnelConnectionsList | null; /** Timestamp of when the tunnel established at least one connection to Cloudflare's edge. If `null`, the tunnel is inactive. */ connsActiveAt?: string | null; /** Timestamp of when the tunnel became inactive (no connections to Cloudflare's edge). If `null`, the tunnel is active. */ connsInactiveAt?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** Metadata associated with the tunnel. */ metadata?: unknown | null; /** A user-friendly name for a tunnel. */ name?: string | null; /** The status of the tunnel. Valid values are `inactive` (tunnel has never been run), `degraded` (tunnel is active and able to serve traffic but in an unhealthy state), `healthy` (tunnel is active and able to serve traffic), or `down` (tunnel can not serve traffic as it has no connections to the Cloudflare Edge). */ status?: TunnelsListResultItemTunnelWARPConnectorTunnelStatus | null; /** The type of tunnel. */ tunType?: TunnelsListResultItemTunnelWARPConnectorTunnelTunType | null; } export const TunnelsListResultItemTunnelWARPConnectorTunnel = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), accountTag: S.optional(S.NullOr(S.String).pipe(T.Body("account_tag"))), connections: S.optional( S.NullOr(TunnelsListResultItemTunnelWARPConnectorTunnelConnectionsList), ), connsActiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_active_at")), ), connsInactiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_inactive_at")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), metadata: S.optional(S.NullOr(S.Unknown)), name: S.optional(S.NullOr(S.String)), status: S.optional( S.NullOr(TunnelsListResultItemTunnelWARPConnectorTunnelStatus), ), tunType: S.optional( S.NullOr(TunnelsListResultItemTunnelWARPConnectorTunnelTunType).pipe( T.Body("tun_type"), ), ), }), ).annotate({ identifier: "TunnelsListResultItemTunnelWARPConnectorTunnel", }) as any as S.Schema; export type TunnelsListResultItem = | TunnelsListResultItemCloudflareTunnel | TunnelsListResultItemTunnelWARPConnectorTunnel; export const TunnelsListResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "accountTag", "configSrc", "connections", "connsActiveAt", "connsInactiveAt", "createdAt", "deletedAt", "metadata", "name", "remoteConfig", "status", "tunType", ], [ "id", "accountTag", "connections", "connsActiveAt", "connsInactiveAt", "createdAt", "deletedAt", "metadata", "name", "status", "tunType", ], ]), ); export type TunnelsListResultList = Array; export const TunnelsListResultList = /*@__PURE__*/ S.Array( TunnelsListResultItem, ) as any as S.Schema; export interface ListTunnelsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: TunnelsListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListTunnelsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: TunnelsListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListTunnelsResponse", }) as any as S.Schema; export type TunnelsWarpConnectorListRequestStatus = | "inactive" | "degraded" | "healthy" | "down"; export const TunnelsWarpConnectorListRequestStatus = /*@__PURE__*/ S.String; export interface ListTunnelWarpConnectorsRequest { /** Cloudflare account ID */ accountId: string; excludePrefix?: string; /** If provided, include only resources that were created (and not deleted) before this time. URL encoded. */ existedAt?: string; includePrefix?: string; /** If `true`, only include deleted tunnels. If `false`, exclude deleted tunnels. If empty, all tunnels will be included. */ isDeleted?: boolean; /** A user-friendly name for the tunnel. */ name?: string; /** Page number of paginated results. */ page?: number; /** Number of results to display. */ perPage?: number; /** The status of the tunnel. Valid values are `inactive` (tunnel has never been run), `degraded` (tunnel is active and able to serve traffic but in an unhealthy state), `healthy` (tunnel is active and able to serve traffic), or `down` (tunnel can not serve traffic as it has no connections to the Cloudflare Edge). */ status?: TunnelsWarpConnectorListRequestStatus | (string & {}); /** UUID of the tunnel. */ uuid?: string; wasActiveAt?: string; wasInactiveAt?: string; } export const ListTunnelWarpConnectorsRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), excludePrefix: S.optional(S.String.pipe(T.Query("exclude_prefix"))), existedAt: S.optional(S.String.pipe(T.Query("existed_at"))), includePrefix: S.optional(S.String.pipe(T.Query("include_prefix"))), isDeleted: S.optional(S.Boolean.pipe(T.Query("is_deleted"))), name: S.optional(S.String.pipe(T.Query())), page: S.optional(S.Number.pipe(T.Query())), perPage: S.optional(S.Number.pipe(T.Query("per_page"))), status: S.optional(TunnelsWarpConnectorListRequestStatus.pipe(T.Query())), uuid: S.optional(S.String.pipe(T.Query())), wasActiveAt: S.optional(S.String.pipe(T.Query("was_active_at"))), wasInactiveAt: S.optional(S.String.pipe(T.Query("was_inactive_at"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/warp_connector", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListTunnelWarpConnectorsRequest", }) as any as S.Schema; export type TunnelsWarpConnectorListResultItemConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export const TunnelsWarpConnectorListResultItemConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export type TunnelsWarpConnectorListResultItemConnectionsList = Array; export const TunnelsWarpConnectorListResultItemConnectionsList = /*@__PURE__*/ S.Array( TunnelsCloudflaredCreateResponseConnectionsItem, ) as any as S.Schema; export type TunnelsWarpConnectorListResultItemStatus = | "inactive" | "degraded" | "healthy" | "down"; export const TunnelsWarpConnectorListResultItemStatus = /*@__PURE__*/ S.String; export type TunnelsWarpConnectorListResultItemTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const TunnelsWarpConnectorListResultItemTunType = /*@__PURE__*/ S.String; export interface TunnelsWarpConnectorListResultItem { /** UUID of the tunnel. */ id?: string | null; /** Cloudflare account ID */ accountTag?: string | null; /** The Cloudflare Tunnel connections between your origin and Cloudflare's edge. */ connections?: TunnelsWarpConnectorListResultItemConnectionsList | null; /** Timestamp of when the tunnel established at least one connection to Cloudflare's edge. If `null`, the tunnel is inactive. */ connsActiveAt?: string | null; /** Timestamp of when the tunnel became inactive (no connections to Cloudflare's edge). If `null`, the tunnel is active. */ connsInactiveAt?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** Metadata associated with the tunnel. */ metadata?: unknown | null; /** A user-friendly name for a tunnel. */ name?: string | null; /** The status of the tunnel. Valid values are `inactive` (tunnel has never been run), `degraded` (tunnel is active and able to serve traffic but in an unhealthy state), `healthy` (tunnel is active and able to serve traffic), or `down` (tunnel can not serve traffic as it has no connections to the Cloudflare Edge). */ status?: TunnelsWarpConnectorListResultItemStatus | null; /** The type of tunnel. */ tunType?: TunnelsWarpConnectorListResultItemTunType | null; } export const TunnelsWarpConnectorListResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), accountTag: S.optional(S.NullOr(S.String).pipe(T.Body("account_tag"))), connections: S.optional( S.NullOr(TunnelsWarpConnectorListResultItemConnectionsList), ), connsActiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_active_at")), ), connsInactiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_inactive_at")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), metadata: S.optional(S.NullOr(S.Unknown)), name: S.optional(S.NullOr(S.String)), status: S.optional(S.NullOr(TunnelsWarpConnectorListResultItemStatus)), tunType: S.optional( S.NullOr(TunnelsWarpConnectorListResultItemTunType).pipe( T.Body("tun_type"), ), ), }), ).annotate({ identifier: "TunnelsWarpConnectorListResultItem", }) as any as S.Schema; export type TunnelsWarpConnectorListResultList = Array; export const TunnelsWarpConnectorListResultList = /*@__PURE__*/ S.Array( TunnelsWarpConnectorListResultItem, ) as any as S.Schema; export interface ListTunnelWarpConnectorsResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: TunnelsWarpConnectorListResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const ListTunnelWarpConnectorsResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: TunnelsWarpConnectorListResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ListTunnelWarpConnectorsResponse", }) as any as S.Schema; export interface LiveDexFleetStatusRequest { /** Unique identifier linked to an account. */ accountId: string; /** Number of minutes before current time. */ sinceMinutes: number; } export const LiveDexFleetStatusRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), sinceMinutes: S.Number.pipe(T.Query("since_minutes")), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/fleet-status/live", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "LiveDexFleetStatusRequest", }) as any as S.Schema; export interface DexFleetStatusLiveResponseDeviceStatsByColoItem { /** Number of unique devices */ uniqueDevicesTotal?: number | null; value?: string | null; } export const DexFleetStatusLiveResponseDeviceStatsByColoItem = /*@__PURE__*/ S.suspend(() => S.Struct({ uniqueDevicesTotal: S.optional(S.NullOr(S.Number)), value: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DexFleetStatusLiveResponseDeviceStatsByColoItem", }) as any as S.Schema; export type DexFleetStatusLiveResponseDeviceStatsByColoList = Array; export const DexFleetStatusLiveResponseDeviceStatsByColoList = /*@__PURE__*/ S.Array( DexFleetStatusLiveResponseDeviceStatsByColoItem, ) as any as S.Schema; export type DexFleetStatusLiveResponseDeviceStatsByModeItem = DexFleetStatusLiveResponseDeviceStatsByColoItem; export const DexFleetStatusLiveResponseDeviceStatsByModeItem = DexFleetStatusLiveResponseDeviceStatsByColoItem; export type DexFleetStatusLiveResponseDeviceStatsByModeList = Array; export const DexFleetStatusLiveResponseDeviceStatsByModeList = /*@__PURE__*/ S.Array( DexFleetStatusLiveResponseDeviceStatsByColoItem, ) as any as S.Schema; export type DexFleetStatusLiveResponseDeviceStatsByPlatformItem = DexFleetStatusLiveResponseDeviceStatsByColoItem; export const DexFleetStatusLiveResponseDeviceStatsByPlatformItem = DexFleetStatusLiveResponseDeviceStatsByColoItem; export type DexFleetStatusLiveResponseDeviceStatsByPlatformList = Array; export const DexFleetStatusLiveResponseDeviceStatsByPlatformList = /*@__PURE__*/ S.Array( DexFleetStatusLiveResponseDeviceStatsByColoItem, ) as any as S.Schema; export type DexFleetStatusLiveResponseDeviceStatsByStatusItem = DexFleetStatusLiveResponseDeviceStatsByColoItem; export const DexFleetStatusLiveResponseDeviceStatsByStatusItem = DexFleetStatusLiveResponseDeviceStatsByColoItem; export type DexFleetStatusLiveResponseDeviceStatsByStatusList = Array; export const DexFleetStatusLiveResponseDeviceStatsByStatusList = /*@__PURE__*/ S.Array( DexFleetStatusLiveResponseDeviceStatsByColoItem, ) as any as S.Schema; export type DexFleetStatusLiveResponseDeviceStatsByVersionItem = DexFleetStatusLiveResponseDeviceStatsByColoItem; export const DexFleetStatusLiveResponseDeviceStatsByVersionItem = DexFleetStatusLiveResponseDeviceStatsByColoItem; export type DexFleetStatusLiveResponseDeviceStatsByVersionList = Array; export const DexFleetStatusLiveResponseDeviceStatsByVersionList = /*@__PURE__*/ S.Array( DexFleetStatusLiveResponseDeviceStatsByColoItem, ) as any as S.Schema; export interface DexFleetStatusLiveResponseDeviceStats { byColo?: DexFleetStatusLiveResponseDeviceStatsByColoList | null; byMode?: DexFleetStatusLiveResponseDeviceStatsByModeList | null; byPlatform?: DexFleetStatusLiveResponseDeviceStatsByPlatformList | null; byStatus?: DexFleetStatusLiveResponseDeviceStatsByStatusList | null; byVersion?: DexFleetStatusLiveResponseDeviceStatsByVersionList | null; /** Number of unique devices */ uniqueDevicesTotal?: number | null; } export const DexFleetStatusLiveResponseDeviceStats = /*@__PURE__*/ S.suspend( () => S.Struct({ byColo: S.optional( S.NullOr(DexFleetStatusLiveResponseDeviceStatsByColoList), ), byMode: S.optional( S.NullOr(DexFleetStatusLiveResponseDeviceStatsByModeList), ), byPlatform: S.optional( S.NullOr(DexFleetStatusLiveResponseDeviceStatsByPlatformList), ), byStatus: S.optional( S.NullOr(DexFleetStatusLiveResponseDeviceStatsByStatusList), ), byVersion: S.optional( S.NullOr(DexFleetStatusLiveResponseDeviceStatsByVersionList), ), uniqueDevicesTotal: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexFleetStatusLiveResponseDeviceStats", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface LiveDexFleetStatusResponse { deviceStats?: DexFleetStatusLiveResponseDeviceStats | null; } export const LiveDexFleetStatusResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ deviceStats: S.optional(S.NullOr(DexFleetStatusLiveResponseDeviceStats)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "LiveDexFleetStatusResponse", }) as any as S.Schema; export interface OverTimeDexFleetStatusRequest { /** Unique identifier linked to an account. */ accountId: string; /** Start of the time range to query. Timestamp can be provided in ISO 8601 datetime format or milliseconds since epoch. */ from: string; /** End of the time range to query. Timestamp can be provided in ISO 8601 datetime format or milliseconds since epoch. */ to: string; /** Cloudflare colo airport code. */ colo?: string; /** Device-specific ID, given as UUID. */ deviceId?: string; } export const OverTimeDexFleetStatusRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), from: S.String.pipe(T.Query()), to: S.String.pipe(T.Query()), colo: S.optional(S.String.pipe(T.Query())), deviceId: S.optional(S.String.pipe(T.Query("device_id"))), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/fleet-status/over-time", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "OverTimeDexFleetStatusRequest", }) as any as S.Schema; export interface DexFleetStatusOverTimeResponseDeviceStatsByModeItem { timestamp?: string | null; /** Number of unique devices */ uniqueDevicesTotal?: number | null; value?: string | null; } export const DexFleetStatusOverTimeResponseDeviceStatsByModeItem = /*@__PURE__*/ S.suspend(() => S.Struct({ timestamp: S.optional(S.NullOr(S.String)), uniqueDevicesTotal: S.optional(S.NullOr(S.Number)), value: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DexFleetStatusOverTimeResponseDeviceStatsByModeItem", }) as any as S.Schema; export type DexFleetStatusOverTimeResponseDeviceStatsByModeList = Array; export const DexFleetStatusOverTimeResponseDeviceStatsByModeList = /*@__PURE__*/ S.Array( DexFleetStatusOverTimeResponseDeviceStatsByModeItem, ) as any as S.Schema; export type DexFleetStatusOverTimeResponseDeviceStatsByStatusItem = DexFleetStatusOverTimeResponseDeviceStatsByModeItem; export const DexFleetStatusOverTimeResponseDeviceStatsByStatusItem = DexFleetStatusOverTimeResponseDeviceStatsByModeItem; export type DexFleetStatusOverTimeResponseDeviceStatsByStatusList = Array; export const DexFleetStatusOverTimeResponseDeviceStatsByStatusList = /*@__PURE__*/ S.Array( DexFleetStatusOverTimeResponseDeviceStatsByModeItem, ) as any as S.Schema; export interface DexFleetStatusOverTimeResponseDeviceStats { byMode?: DexFleetStatusOverTimeResponseDeviceStatsByModeList | null; byStatus?: DexFleetStatusOverTimeResponseDeviceStatsByStatusList | null; /** Number of unique devices */ uniqueDevicesTotal?: number | null; } export const DexFleetStatusOverTimeResponseDeviceStats = /*@__PURE__*/ S.suspend(() => S.Struct({ byMode: S.optional( S.NullOr(DexFleetStatusOverTimeResponseDeviceStatsByModeList), ), byStatus: S.optional( S.NullOr(DexFleetStatusOverTimeResponseDeviceStatsByStatusList), ), uniqueDevicesTotal: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexFleetStatusOverTimeResponseDeviceStats", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface OverTimeDexFleetStatusResponse { deviceStats?: DexFleetStatusOverTimeResponseDeviceStats | null; } export const OverTimeDexFleetStatusResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ deviceStats: S.optional( S.NullOr(DexFleetStatusOverTimeResponseDeviceStats), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "OverTimeDexFleetStatusResponse", }) as any as S.Schema; export interface PatchAccessApplicationSettingForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** Identifier. */ appId: string; /** Enables loading application content in an iFrame. */ allowIframe?: boolean; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean; } export const PatchAccessApplicationSettingForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), appId: S.String.pipe(T.Label("app_id")), allowIframe: S.optional(S.Boolean.pipe(T.Body("allow_iframe"))), skipInterstitial: S.optional(S.Boolean.pipe(T.Body("skip_interstitial"))), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/access/apps/{app_id}/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchAccessApplicationSettingForAccountRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchAccessApplicationSettingResponse { /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; } export const PatchAccessApplicationSettingResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchAccessApplicationSettingResponse", }) as any as S.Schema; export interface PatchAccessApplicationSettingForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** Identifier. */ appId: string; /** Enables loading application content in an iFrame. */ allowIframe?: boolean; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean; } export const PatchAccessApplicationSettingForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), appId: S.String.pipe(T.Label("app_id")), allowIframe: S.optional(S.Boolean.pipe(T.Body("allow_iframe"))), skipInterstitial: S.optional(S.Boolean.pipe(T.Body("skip_interstitial"))), }) .pipe( T.Http({ method: "PATCH", uri: "/zones/{zone_id}/access/apps/{app_id}/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchAccessApplicationSettingForZoneRequest", }) as any as S.Schema; export interface PatchConnectivitySettingRequest { /** Cloudflare account ID */ accountId: string; /** A flag to enable the ICMP proxy for the account network. */ icmpProxyEnabled?: boolean; /** A flag to enable WARP to WARP traffic. */ offrampWarpEnabled?: boolean; } export const PatchConnectivitySettingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), icmpProxyEnabled: S.optional(S.Boolean.pipe(T.Body("icmp_proxy_enabled"))), offrampWarpEnabled: S.optional( S.Boolean.pipe(T.Body("offramp_warp_enabled")), ), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/zerotrust/connectivity_settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchConnectivitySettingRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchConnectivitySettingResponse { /** A flag to enable the ICMP proxy for the account network. */ icmpProxyEnabled?: boolean | null; /** A flag to enable WARP to WARP traffic. */ offrampWarpEnabled?: boolean | null; } export const PatchConnectivitySettingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ icmpProxyEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("icmp_proxy_enabled")), ), offrampWarpEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("offramp_warp_enabled")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchConnectivitySettingResponse", }) as any as S.Schema; export type DevicesDeploymentGroupsEditRequestPolicyIdsList = Array; export const DevicesDeploymentGroupsEditRequestPolicyIdsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesDeploymentGroupsEditRequestVersionConfigItem = DevicesDeploymentGroupsCreateRequestVersionConfigItem; export const DevicesDeploymentGroupsEditRequestVersionConfigItem = DevicesDeploymentGroupsCreateRequestVersionConfigItem; export type DevicesDeploymentGroupsEditRequestVersionConfigList = Array; export const DevicesDeploymentGroupsEditRequestVersionConfigList = /*@__PURE__*/ S.Array( DevicesDeploymentGroupsCreateRequestVersionConfigItem, ) as any as S.Schema; export interface PatchDeviceDeploymentGroupRequest { accountId: string; groupId: string; /** A user-friendly name for the deployment group. */ name?: string; /** Replaces the entire list of policy IDs. */ policyIds?: DevicesDeploymentGroupsEditRequestPolicyIdsList; /** Replaces the entire version_config array. */ versionConfig?: DevicesDeploymentGroupsEditRequestVersionConfigList; } export const PatchDeviceDeploymentGroupRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), groupId: S.String.pipe(T.Label("group_id")), name: S.optional(S.String), policyIds: S.optional( DevicesDeploymentGroupsEditRequestPolicyIdsList.pipe( T.Body("policy_ids"), ), ), versionConfig: S.optional( DevicesDeploymentGroupsEditRequestVersionConfigList.pipe( T.Body("version_config"), ), ), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/devices/deployment-groups/{group_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDeviceDeploymentGroupRequest", }) as any as S.Schema; export type DevicesDeploymentGroupsEditResponseVersionConfigItem = DevicesDeploymentGroupsCreateRequestVersionConfigItem; export const DevicesDeploymentGroupsEditResponseVersionConfigItem = DevicesDeploymentGroupsCreateRequestVersionConfigItem; export type DevicesDeploymentGroupsEditResponseVersionConfigList = Array; export const DevicesDeploymentGroupsEditResponseVersionConfigList = /*@__PURE__*/ S.Array( DevicesDeploymentGroupsCreateRequestVersionConfigItem, ) as any as S.Schema; export type DevicesDeploymentGroupsEditResponsePolicyIdsList = Array; export const DevicesDeploymentGroupsEditResponsePolicyIdsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchDeviceDeploymentGroupResponse { /** The ID of the deployment group. */ id: string; /** The RFC3339Nano timestamp when the deployment group was created. */ createdAt: string; /** A user-friendly name for the deployment group. */ name: string; /** The RFC3339Nano timestamp when the deployment group was last updated. */ updatedAt: string; /** Contains version configurations for different target environments. */ versionConfig: DevicesDeploymentGroupsEditResponseVersionConfigList; /** Contains a list of policy IDs assigned to this deployment group. */ policyIds?: DevicesDeploymentGroupsEditResponsePolicyIdsList | null; } export const PatchDeviceDeploymentGroupResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), versionConfig: DevicesDeploymentGroupsEditResponseVersionConfigList.pipe( T.Body("version_config"), ), policyIds: S.optional( S.NullOr(DevicesDeploymentGroupsEditResponsePolicyIdsList).pipe( T.Body("policy_ids"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDeviceDeploymentGroupResponse", }) as any as S.Schema; export interface PatchDeviceIpProfileRequest { accountId: string; profileId: string; /** An optional description of the Device IP profile. */ description?: string; /** Whether the Device IP profile is enabled. */ enabled?: boolean; /** The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes". */ match?: string; /** A user-friendly name for the Device IP profile. */ name?: string; /** The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field. */ precedence?: number; /** The ID of the Subnet. */ subnetId?: string; } export const PatchDeviceIpProfileRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), profileId: S.String.pipe(T.Label("profile_id")), description: S.optional(S.String), enabled: S.optional(S.Boolean), match: S.optional(S.String), name: S.optional(S.String), precedence: S.optional(S.Number), subnetId: S.optional(S.String.pipe(T.Body("subnet_id"))), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/devices/ip-profiles/{profile_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDeviceIpProfileRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchDeviceIpProfileResponse { /** The ID of the Device IP profile. */ id: string; /** The RFC3339Nano timestamp when the Device IP profile was created. */ createdAt: string; /** An optional description of the Device IP profile. */ description: string; /** Whether the Device IP profile is enabled. */ enabled: boolean; /** The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes". */ match: string; /** A user-friendly name for the Device IP profile. */ name: string; /** The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field. */ precedence: number; /** The ID of the Subnet. */ subnetId: string; /** The RFC3339Nano timestamp when the Device IP profile was last updated. */ updatedAt: string; } export const PatchDeviceIpProfileResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), description: S.String, enabled: S.Boolean, match: S.String, name: S.String, precedence: S.Number, subnetId: S.String.pipe(T.Body("subnet_id")), updatedAt: S.String.pipe(T.Body("updated_at")), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDeviceIpProfileResponse", }) as any as S.Schema; export type DevicesPoliciesCustomEditRequestDnsSearchSuffixesItem = DevicesPoliciesCustomCreateRequestDnsSearchSuffixesItem; export const DevicesPoliciesCustomEditRequestDnsSearchSuffixesItem = DevicesPoliciesCustomCreateRequestDnsSearchSuffixesItem; export type DevicesPoliciesCustomEditRequestDnsSearchSuffixesList = Array; export const DevicesPoliciesCustomEditRequestDnsSearchSuffixesList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateRequestDnsSearchSuffixesItem, ) as any as S.Schema; export type DevicesPoliciesCustomEditRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export const DevicesPoliciesCustomEditRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export type DevicesPoliciesCustomEditRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomEditRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export type DevicesPoliciesCustomEditRequestExcludeItem = | DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomEditRequestExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomEditRequestExcludeList = Array; export const DevicesPoliciesCustomEditRequestExcludeList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomEditRequestExcludeItem, ) as any as S.Schema; export type DevicesPoliciesCustomEditRequestGlobalAccelerationApiEndpointsList = Array; export const DevicesPoliciesCustomEditRequestGlobalAccelerationApiEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesCustomEditRequestGlobalAccelerationMasqueEndpointsList = Array; export const DevicesPoliciesCustomEditRequestGlobalAccelerationMasqueEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesCustomEditRequestGlobalAccelerationWireguardEndpointsList = Array; export const DevicesPoliciesCustomEditRequestGlobalAccelerationWireguardEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomEditRequestGlobalAcceleration { /** IP:port entries for the API endpoints. */ apiEndpoints: DevicesPoliciesCustomEditRequestGlobalAccelerationApiEndpointsList; /** Global acceleration settings are used only when "enabled". */ enabled: boolean; /** IP:port entries for the MASQUE tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ masqueEndpoints: DevicesPoliciesCustomEditRequestGlobalAccelerationMasqueEndpointsList; /** IP:port entries for the WireGuard tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ wireguardEndpoints: DevicesPoliciesCustomEditRequestGlobalAccelerationWireguardEndpointsList; } export const DevicesPoliciesCustomEditRequestGlobalAcceleration = /*@__PURE__*/ S.suspend(() => S.Struct({ apiEndpoints: DevicesPoliciesCustomEditRequestGlobalAccelerationApiEndpointsList.pipe( T.Body("api_endpoints"), ), enabled: S.Boolean, masqueEndpoints: DevicesPoliciesCustomEditRequestGlobalAccelerationMasqueEndpointsList.pipe( T.Body("masque_endpoints"), ), wireguardEndpoints: DevicesPoliciesCustomEditRequestGlobalAccelerationWireguardEndpointsList.pipe( T.Body("wireguard_endpoints"), ), }), ).annotate({ identifier: "DevicesPoliciesCustomEditRequestGlobalAcceleration", }) as any as S.Schema; export type DevicesPoliciesCustomEditRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export const DevicesPoliciesCustomEditRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export type DevicesPoliciesCustomEditRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomEditRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export type DevicesPoliciesCustomEditRequestIncludeItem = | DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomEditRequestIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomEditRequestIncludeList = Array; export const DevicesPoliciesCustomEditRequestIncludeList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomEditRequestIncludeItem, ) as any as S.Schema; export type DevicesPoliciesCustomEditRequestServiceModeV2 = DevicesPoliciesCustomCreateRequestServiceModeV2; export const DevicesPoliciesCustomEditRequestServiceModeV2 = DevicesPoliciesCustomCreateRequestServiceModeV2; export type DevicesPoliciesCustomEditRequestVirtualNetworksAllowedList = Array; export const DevicesPoliciesCustomEditRequestVirtualNetworksAllowedList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomEditRequestVirtualNetworks { /** List of virtual network IDs the device is allowed to access. When virtual_networks is set, at least one entry is required. */ allowed: DevicesPoliciesCustomEditRequestVirtualNetworksAllowedList; /** The default virtual network ID. Must be included in the `allowed` list. */ default: string; } export const DevicesPoliciesCustomEditRequestVirtualNetworks = /*@__PURE__*/ S.suspend(() => S.Struct({ allowed: DevicesPoliciesCustomEditRequestVirtualNetworksAllowedList, default: S.String, }), ).annotate({ identifier: "DevicesPoliciesCustomEditRequestVirtualNetworks", }) as any as S.Schema; export interface PatchDevicePolicyCustomRequest { accountId: string; policyId: string; /** Whether to allow the user to switch WARP between modes. */ allowModeSwitch?: boolean; /** Whether to receive update notifications when a new version of the client is available. */ allowUpdates?: boolean; /** Whether to allow devices to leave the organization. */ allowedToLeave?: boolean; /** The amount of time in seconds to reconnect after having been disabled. */ autoConnect?: number; /** Turn on the captive portal after the specified amount of time. */ captivePortal?: number; /** A description of the policy. */ description?: string; /** If the `dns_server` field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to `true`. */ disableAutoFallback?: boolean; /** List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear. */ dnsSearchSuffixes?: DevicesPoliciesCustomEditRequestDnsSearchSuffixesList; /** Whether the policy will be applied to matching devices. */ enabled?: boolean; /** List of routes excluded in the WARP client's tunnel. Both 'exclude' and 'include' cannot be set in the same request. */ exclude?: DevicesPoliciesCustomEditRequestExcludeList; /** Whether to add Microsoft IPs to Split Tunnel exclusions. */ excludeOfficeIps?: boolean; /** Global Acceleration settings for China. When configured, WARP clients connect to the Global Accelerator addresses instead of the default ones. Please contact your account representative to enable this feature on your account. See https://developers.cloudflare.com/china-network/concepts/global-acceleration/. */ globalAcceleration?: DevicesPoliciesCustomEditRequestGlobalAcceleration; /** List of routes included in the WARP client's tunnel. Both 'exclude' and 'include' cannot be set in the same request. */ include?: DevicesPoliciesCustomEditRequestIncludeList; /** The amount of time in minutes a user is allowed access to their LAN. A value of 0 will allow LAN access until the next WARP reconnection, such as a reboot or a laptop waking from sleep. Note that this field is omitted from the response if null or unset. */ lanAllowMinutes?: number; /** The size of the subnet for the local access network. Note that this field is omitted from the response if null or unset. */ lanAllowSubnetSize?: number; /** The wirefilter expression to match devices. Available values: "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.service_token_uuid", "identity.saml_attributes", "network", "os.name", "os.version". */ match?: string; /** The name of the device settings profile. */ name?: string; /** The precedence of the policy. Lower values indicate higher precedence. Policies will be evaluated in ascending order of this field. */ precedence?: number; /** Determines if the operating system will register WARP's local interface IP with your on-premises DNS server. */ registerInterfaceIpWithDns?: boolean; /** Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only). */ sccmVpnBoundarySupport?: boolean; serviceModeV2?: DevicesPoliciesCustomCreateRequestServiceModeV2; /** The URL to launch when the Send Feedback button is clicked. */ supportUrl?: string; /** Whether to allow the user to turn off the WARP switch and disconnect the client. */ switchLocked?: boolean; /** Determines which tunnel protocol to use. */ tunnelProtocol?: string; /** Virtual network access settings for the device. */ virtualNetworks?: DevicesPoliciesCustomEditRequestVirtualNetworks; } export const PatchDevicePolicyCustomRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), policyId: S.String.pipe(T.Label("policy_id")), allowModeSwitch: S.optional(S.Boolean.pipe(T.Body("allow_mode_switch"))), allowUpdates: S.optional(S.Boolean.pipe(T.Body("allow_updates"))), allowedToLeave: S.optional(S.Boolean.pipe(T.Body("allowed_to_leave"))), autoConnect: S.optional(S.Number.pipe(T.Body("auto_connect"))), captivePortal: S.optional(S.Number.pipe(T.Body("captive_portal"))), description: S.optional(S.String), disableAutoFallback: S.optional( S.Boolean.pipe(T.Body("disable_auto_fallback")), ), dnsSearchSuffixes: S.optional( DevicesPoliciesCustomEditRequestDnsSearchSuffixesList.pipe( T.Body("dns_search_suffixes"), ), ), enabled: S.optional(S.Boolean), exclude: S.optional(DevicesPoliciesCustomEditRequestExcludeList), excludeOfficeIps: S.optional(S.Boolean.pipe(T.Body("exclude_office_ips"))), globalAcceleration: S.optional( DevicesPoliciesCustomEditRequestGlobalAcceleration.pipe( T.Body("global_acceleration"), ), ), include: S.optional(DevicesPoliciesCustomEditRequestIncludeList), lanAllowMinutes: S.optional(S.Number.pipe(T.Body("lan_allow_minutes"))), lanAllowSubnetSize: S.optional( S.Number.pipe(T.Body("lan_allow_subnet_size")), ), match: S.optional(S.String), name: S.optional(S.String), precedence: S.optional(S.Number), registerInterfaceIpWithDns: S.optional( S.Boolean.pipe(T.Body("register_interface_ip_with_dns")), ), sccmVpnBoundarySupport: S.optional( S.Boolean.pipe(T.Body("sccm_vpn_boundary_support")), ), serviceModeV2: S.optional( DevicesPoliciesCustomCreateRequestServiceModeV2.pipe( T.Body("service_mode_v2"), ), ), supportUrl: S.optional(S.String.pipe(T.Body("support_url"))), switchLocked: S.optional(S.Boolean.pipe(T.Body("switch_locked"))), tunnelProtocol: S.optional(S.String.pipe(T.Body("tunnel_protocol"))), virtualNetworks: S.optional( DevicesPoliciesCustomEditRequestVirtualNetworks.pipe( T.Body("virtual_networks"), ), ), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/devices/policy/{policy_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDevicePolicyCustomRequest", }) as any as S.Schema; export type DevicesPoliciesCustomEditResponseDnsSearchSuffixesItem = DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem; export const DevicesPoliciesCustomEditResponseDnsSearchSuffixesItem = DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem; export type DevicesPoliciesCustomEditResponseDnsSearchSuffixesList = Array; export const DevicesPoliciesCustomEditResponseDnsSearchSuffixesList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem, ) as any as S.Schema; export type DevicesPoliciesCustomEditResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export const DevicesPoliciesCustomEditResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export type DevicesPoliciesCustomEditResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomEditResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export type DevicesPoliciesCustomEditResponseExcludeItem = | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomEditResponseExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomEditResponseExcludeList = Array; export const DevicesPoliciesCustomEditResponseExcludeList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomEditResponseExcludeItem, ) as any as S.Schema; export type DevicesPoliciesCustomEditResponseFallbackDomainsItemDnsServerList = Array; export const DevicesPoliciesCustomEditResponseFallbackDomainsItemDnsServerList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomEditResponseFallbackDomainsItem { /** The domain suffix to match when resolving locally. */ suffix: string; /** A description of the fallback domain, displayed in the client UI. */ description?: string | null; /** A list of IP addresses to handle domain resolution. */ dnsServer?: DevicesPoliciesCustomEditResponseFallbackDomainsItemDnsServerList | null; } export const DevicesPoliciesCustomEditResponseFallbackDomainsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ suffix: S.String, description: S.optional(S.NullOr(S.String)), dnsServer: S.optional( S.NullOr( DevicesPoliciesCustomEditResponseFallbackDomainsItemDnsServerList, ).pipe(T.Body("dns_server")), ), }), ).annotate({ identifier: "DevicesPoliciesCustomEditResponseFallbackDomainsItem", }) as any as S.Schema; export type DevicesPoliciesCustomEditResponseFallbackDomainsList = Array; export const DevicesPoliciesCustomEditResponseFallbackDomainsList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomEditResponseFallbackDomainsItem, ) as any as S.Schema; export type DevicesPoliciesCustomEditResponseGlobalAccelerationApiEndpointsList = Array; export const DevicesPoliciesCustomEditResponseGlobalAccelerationApiEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesCustomEditResponseGlobalAccelerationMasqueEndpointsList = Array; export const DevicesPoliciesCustomEditResponseGlobalAccelerationMasqueEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesCustomEditResponseGlobalAccelerationWireguardEndpointsList = Array; export const DevicesPoliciesCustomEditResponseGlobalAccelerationWireguardEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomEditResponseGlobalAcceleration { /** IP:port entries for the API endpoints. */ apiEndpoints: DevicesPoliciesCustomEditResponseGlobalAccelerationApiEndpointsList; /** Global acceleration settings are used only when "enabled". */ enabled: boolean; /** IP:port entries for the MASQUE tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ masqueEndpoints: DevicesPoliciesCustomEditResponseGlobalAccelerationMasqueEndpointsList; /** IP:port entries for the WireGuard tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ wireguardEndpoints: DevicesPoliciesCustomEditResponseGlobalAccelerationWireguardEndpointsList; } export const DevicesPoliciesCustomEditResponseGlobalAcceleration = /*@__PURE__*/ S.suspend(() => S.Struct({ apiEndpoints: DevicesPoliciesCustomEditResponseGlobalAccelerationApiEndpointsList.pipe( T.Body("api_endpoints"), ), enabled: S.Boolean, masqueEndpoints: DevicesPoliciesCustomEditResponseGlobalAccelerationMasqueEndpointsList.pipe( T.Body("masque_endpoints"), ), wireguardEndpoints: DevicesPoliciesCustomEditResponseGlobalAccelerationWireguardEndpointsList.pipe( T.Body("wireguard_endpoints"), ), }), ).annotate({ identifier: "DevicesPoliciesCustomEditResponseGlobalAcceleration", }) as any as S.Schema; export type DevicesPoliciesCustomEditResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export const DevicesPoliciesCustomEditResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export type DevicesPoliciesCustomEditResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomEditResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export type DevicesPoliciesCustomEditResponseIncludeItem = | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomEditResponseIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomEditResponseIncludeList = Array; export const DevicesPoliciesCustomEditResponseIncludeList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomEditResponseIncludeItem, ) as any as S.Schema; export type DevicesPoliciesCustomEditResponseServiceModeV2 = DevicesPoliciesCustomCreateResponseServiceModeV2; export const DevicesPoliciesCustomEditResponseServiceModeV2 = DevicesPoliciesCustomCreateResponseServiceModeV2; export type DevicesPoliciesCustomEditResponseTargetTestsItem = DevicesPoliciesCustomCreateResponseTargetTestsItem; export const DevicesPoliciesCustomEditResponseTargetTestsItem = DevicesPoliciesCustomCreateResponseTargetTestsItem; export type DevicesPoliciesCustomEditResponseTargetTestsList = Array; export const DevicesPoliciesCustomEditResponseTargetTestsList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateResponseTargetTestsItem, ) as any as S.Schema; export type DevicesPoliciesCustomEditResponseVirtualNetworksAllowedList = Array; export const DevicesPoliciesCustomEditResponseVirtualNetworksAllowedList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomEditResponseVirtualNetworks { /** List of virtual network IDs the device is allowed to access. When virtual_networks is set, at least one entry is required. */ allowed: DevicesPoliciesCustomEditResponseVirtualNetworksAllowedList; /** The default virtual network ID. Must be included in the `allowed` list. */ default: string; } export const DevicesPoliciesCustomEditResponseVirtualNetworks = /*@__PURE__*/ S.suspend(() => S.Struct({ allowed: DevicesPoliciesCustomEditResponseVirtualNetworksAllowedList, default: S.String, }), ).annotate({ identifier: "DevicesPoliciesCustomEditResponseVirtualNetworks", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchDevicePolicyCustomResponse { /** Whether to allow the user to switch WARP between modes. */ allowModeSwitch?: boolean | null; /** Whether to receive update notifications when a new version of the client is available. */ allowUpdates?: boolean | null; /** Whether to allow devices to leave the organization. */ allowedToLeave?: boolean | null; /** The amount of time in seconds to reconnect after having been disabled. */ autoConnect?: number | null; /** Turn on the captive portal after the specified amount of time. */ captivePortal?: number | null; /** Whether the policy is the default policy for an account. */ default?: boolean | null; /** A description of the policy. */ description?: string | null; /** If the `dns_server` field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to `true`. */ disableAutoFallback?: boolean | null; /** List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear. */ dnsSearchSuffixes?: DevicesPoliciesCustomEditResponseDnsSearchSuffixesList | null; /** Whether the policy will be applied to matching devices. */ enabled?: boolean | null; /** List of routes excluded in the WARP client's tunnel. */ exclude?: DevicesPoliciesCustomEditResponseExcludeList | null; /** Whether to add Microsoft IPs to Split Tunnel exclusions. */ excludeOfficeIps?: boolean | null; fallbackDomains?: DevicesPoliciesCustomEditResponseFallbackDomainsList | null; gatewayUniqueId?: string | null; /** Global Acceleration settings for China. When configured, WARP clients connect to the Global Accelerator addresses instead of the default ones. Please contact your account representative to enable this feature on your account. See https://developers.cloudflare.com/china-network/concepts/global-acceleration/. */ globalAcceleration?: DevicesPoliciesCustomEditResponseGlobalAcceleration | null; /** List of routes included in the WARP client's tunnel. */ include?: DevicesPoliciesCustomEditResponseIncludeList | null; /** The amount of time in minutes a user is allowed access to their LAN. A value of 0 will allow LAN access until the next WARP reconnection, such as a reboot or a laptop waking from sleep. Note that this field is omitted from the response if null or unset. */ lanAllowMinutes?: number | null; /** The size of the subnet for the local access network. Note that this field is omitted from the response if null or unset. */ lanAllowSubnetSize?: number | null; /** The wirefilter expression to match devices. Available values: "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.service_token_uuid", "identity.saml_attributes", "network", "os.name", "os.version". */ match?: string | null; /** The name of the device settings profile. */ name?: string | null; policyId?: string | null; /** The precedence of the policy. Lower values indicate higher precedence. Policies will be evaluated in ascending order of this field. */ precedence?: number | null; /** Determines if the operating system will register WARP's local interface IP with your on-premises DNS server. */ registerInterfaceIpWithDns?: boolean | null; /** Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only). */ sccmVpnBoundarySupport?: boolean | null; serviceModeV2?: DevicesPoliciesCustomCreateResponseServiceModeV2 | null; /** The URL to launch when the Send Feedback button is clicked. */ supportUrl?: string | null; /** Whether to allow the user to turn off the WARP switch and disconnect the client. */ switchLocked?: boolean | null; targetTests?: DevicesPoliciesCustomEditResponseTargetTestsList | null; /** Determines which tunnel protocol to use. */ tunnelProtocol?: string | null; /** Virtual network access settings for the device. */ virtualNetworks?: DevicesPoliciesCustomEditResponseVirtualNetworks | null; } export const PatchDevicePolicyCustomResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ allowModeSwitch: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_mode_switch")), ), allowUpdates: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_updates"))), allowedToLeave: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allowed_to_leave")), ), autoConnect: S.optional(S.NullOr(S.Number).pipe(T.Body("auto_connect"))), captivePortal: S.optional( S.NullOr(S.Number).pipe(T.Body("captive_portal")), ), default: S.optional(S.NullOr(S.Boolean)), description: S.optional(S.NullOr(S.String)), disableAutoFallback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("disable_auto_fallback")), ), dnsSearchSuffixes: S.optional( S.NullOr(DevicesPoliciesCustomEditResponseDnsSearchSuffixesList).pipe( T.Body("dns_search_suffixes"), ), ), enabled: S.optional(S.NullOr(S.Boolean)), exclude: S.optional(S.NullOr(DevicesPoliciesCustomEditResponseExcludeList)), excludeOfficeIps: S.optional( S.NullOr(S.Boolean).pipe(T.Body("exclude_office_ips")), ), fallbackDomains: S.optional( S.NullOr(DevicesPoliciesCustomEditResponseFallbackDomainsList).pipe( T.Body("fallback_domains"), ), ), gatewayUniqueId: S.optional( S.NullOr(S.String).pipe(T.Body("gateway_unique_id")), ), globalAcceleration: S.optional( S.NullOr(DevicesPoliciesCustomEditResponseGlobalAcceleration).pipe( T.Body("global_acceleration"), ), ), include: S.optional(S.NullOr(DevicesPoliciesCustomEditResponseIncludeList)), lanAllowMinutes: S.optional( S.NullOr(S.Number).pipe(T.Body("lan_allow_minutes")), ), lanAllowSubnetSize: S.optional( S.NullOr(S.Number).pipe(T.Body("lan_allow_subnet_size")), ), match: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policyId: S.optional(S.NullOr(S.String).pipe(T.Body("policy_id"))), precedence: S.optional(S.NullOr(S.Number)), registerInterfaceIpWithDns: S.optional( S.NullOr(S.Boolean).pipe(T.Body("register_interface_ip_with_dns")), ), sccmVpnBoundarySupport: S.optional( S.NullOr(S.Boolean).pipe(T.Body("sccm_vpn_boundary_support")), ), serviceModeV2: S.optional( S.NullOr(DevicesPoliciesCustomCreateResponseServiceModeV2).pipe( T.Body("service_mode_v2"), ), ), supportUrl: S.optional(S.NullOr(S.String).pipe(T.Body("support_url"))), switchLocked: S.optional(S.NullOr(S.Boolean).pipe(T.Body("switch_locked"))), targetTests: S.optional( S.NullOr(DevicesPoliciesCustomEditResponseTargetTestsList).pipe( T.Body("target_tests"), ), ), tunnelProtocol: S.optional( S.NullOr(S.String).pipe(T.Body("tunnel_protocol")), ), virtualNetworks: S.optional( S.NullOr(DevicesPoliciesCustomEditResponseVirtualNetworks).pipe( T.Body("virtual_networks"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDevicePolicyCustomResponse", }) as any as S.Schema; export type DevicesPoliciesDefaultEditRequestDnsSearchSuffixesItem = DevicesPoliciesCustomCreateRequestDnsSearchSuffixesItem; export const DevicesPoliciesDefaultEditRequestDnsSearchSuffixesItem = DevicesPoliciesCustomCreateRequestDnsSearchSuffixesItem; export type DevicesPoliciesDefaultEditRequestDnsSearchSuffixesList = Array; export const DevicesPoliciesDefaultEditRequestDnsSearchSuffixesList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateRequestDnsSearchSuffixesItem, ) as any as S.Schema; export type DevicesPoliciesDefaultEditRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export const DevicesPoliciesDefaultEditRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export type DevicesPoliciesDefaultEditRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesDefaultEditRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export type DevicesPoliciesDefaultEditRequestExcludeItem = | DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesDefaultEditRequestExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesDefaultEditRequestExcludeList = Array; export const DevicesPoliciesDefaultEditRequestExcludeList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultEditRequestExcludeItem, ) as any as S.Schema; export type DevicesPoliciesDefaultEditRequestGlobalAccelerationApiEndpointsList = Array; export const DevicesPoliciesDefaultEditRequestGlobalAccelerationApiEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesDefaultEditRequestGlobalAccelerationMasqueEndpointsList = Array; export const DevicesPoliciesDefaultEditRequestGlobalAccelerationMasqueEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesDefaultEditRequestGlobalAccelerationWireguardEndpointsList = Array; export const DevicesPoliciesDefaultEditRequestGlobalAccelerationWireguardEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesDefaultEditRequestGlobalAcceleration { /** IP:port entries for the API endpoints. */ apiEndpoints: DevicesPoliciesDefaultEditRequestGlobalAccelerationApiEndpointsList; /** Global acceleration settings are used only when "enabled". */ enabled: boolean; /** IP:port entries for the MASQUE tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ masqueEndpoints: DevicesPoliciesDefaultEditRequestGlobalAccelerationMasqueEndpointsList; /** IP:port entries for the WireGuard tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ wireguardEndpoints: DevicesPoliciesDefaultEditRequestGlobalAccelerationWireguardEndpointsList; } export const DevicesPoliciesDefaultEditRequestGlobalAcceleration = /*@__PURE__*/ S.suspend(() => S.Struct({ apiEndpoints: DevicesPoliciesDefaultEditRequestGlobalAccelerationApiEndpointsList.pipe( T.Body("api_endpoints"), ), enabled: S.Boolean, masqueEndpoints: DevicesPoliciesDefaultEditRequestGlobalAccelerationMasqueEndpointsList.pipe( T.Body("masque_endpoints"), ), wireguardEndpoints: DevicesPoliciesDefaultEditRequestGlobalAccelerationWireguardEndpointsList.pipe( T.Body("wireguard_endpoints"), ), }), ).annotate({ identifier: "DevicesPoliciesDefaultEditRequestGlobalAcceleration", }) as any as S.Schema; export type DevicesPoliciesDefaultEditRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export const DevicesPoliciesDefaultEditRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export type DevicesPoliciesDefaultEditRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesDefaultEditRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export type DevicesPoliciesDefaultEditRequestIncludeItem = | DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesDefaultEditRequestIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesDefaultEditRequestIncludeList = Array; export const DevicesPoliciesDefaultEditRequestIncludeList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultEditRequestIncludeItem, ) as any as S.Schema; export type DevicesPoliciesDefaultEditRequestServiceModeV2 = DevicesPoliciesCustomCreateRequestServiceModeV2; export const DevicesPoliciesDefaultEditRequestServiceModeV2 = DevicesPoliciesCustomCreateRequestServiceModeV2; export type DevicesPoliciesDefaultEditRequestVirtualNetworksAllowedList = Array; export const DevicesPoliciesDefaultEditRequestVirtualNetworksAllowedList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesDefaultEditRequestVirtualNetworks { /** List of virtual network IDs the device is allowed to access. When virtual_networks is set, at least one entry is required. */ allowed: DevicesPoliciesDefaultEditRequestVirtualNetworksAllowedList; /** The default virtual network ID. Must be included in the `allowed` list. */ default: string; } export const DevicesPoliciesDefaultEditRequestVirtualNetworks = /*@__PURE__*/ S.suspend(() => S.Struct({ allowed: DevicesPoliciesDefaultEditRequestVirtualNetworksAllowedList, default: S.String, }), ).annotate({ identifier: "DevicesPoliciesDefaultEditRequestVirtualNetworks", }) as any as S.Schema; export interface PatchDevicePolicyDefaultRequest { accountId: string; /** Whether to allow the user to switch WARP between modes. */ allowModeSwitch?: boolean; /** Whether to receive update notifications when a new version of the client is available. */ allowUpdates?: boolean; /** Whether to allow devices to leave the organization. */ allowedToLeave?: boolean; /** The amount of time in seconds to reconnect after having been disabled. */ autoConnect?: number; /** Turn on the captive portal after the specified amount of time. */ captivePortal?: number; /** If the `dns_server` field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to `true`. */ disableAutoFallback?: boolean; /** List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear. */ dnsSearchSuffixes?: DevicesPoliciesDefaultEditRequestDnsSearchSuffixesList; /** List of routes excluded in the WARP client's tunnel. Both 'exclude' and 'include' cannot be set in the same request. */ exclude?: DevicesPoliciesDefaultEditRequestExcludeList; /** Whether to add Microsoft IPs to Split Tunnel exclusions. */ excludeOfficeIps?: boolean; /** Global Acceleration settings for China. When configured, WARP clients connect to the Global Accelerator addresses instead of the default ones. Please contact your account representative to enable this feature on your account. See https://developers.cloudflare.com/china-network/concepts/global-acceleration/. */ globalAcceleration?: DevicesPoliciesDefaultEditRequestGlobalAcceleration; /** List of routes included in the WARP client's tunnel. Both 'exclude' and 'include' cannot be set in the same request. */ include?: DevicesPoliciesDefaultEditRequestIncludeList; /** The amount of time in minutes a user is allowed access to their LAN. A value of 0 will allow LAN access until the next WARP reconnection, such as a reboot or a laptop waking from sleep. Note that this field is omitted from the response if null or unset. */ lanAllowMinutes?: number; /** The size of the subnet for the local access network. Note that this field is omitted from the response if null or unset. */ lanAllowSubnetSize?: number; /** Determines if the operating system will register WARP's local interface IP with your on-premises DNS server. */ registerInterfaceIpWithDns?: boolean; /** Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only). */ sccmVpnBoundarySupport?: boolean; serviceModeV2?: DevicesPoliciesCustomCreateRequestServiceModeV2; /** The URL to launch when the Send Feedback button is clicked. */ supportUrl?: string; /** Whether to allow the user to turn off the WARP switch and disconnect the client. */ switchLocked?: boolean; /** Determines which tunnel protocol to use. */ tunnelProtocol?: string; /** Virtual network access settings for the device. */ virtualNetworks?: DevicesPoliciesDefaultEditRequestVirtualNetworks; } export const PatchDevicePolicyDefaultRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), allowModeSwitch: S.optional(S.Boolean.pipe(T.Body("allow_mode_switch"))), allowUpdates: S.optional(S.Boolean.pipe(T.Body("allow_updates"))), allowedToLeave: S.optional(S.Boolean.pipe(T.Body("allowed_to_leave"))), autoConnect: S.optional(S.Number.pipe(T.Body("auto_connect"))), captivePortal: S.optional(S.Number.pipe(T.Body("captive_portal"))), disableAutoFallback: S.optional( S.Boolean.pipe(T.Body("disable_auto_fallback")), ), dnsSearchSuffixes: S.optional( DevicesPoliciesDefaultEditRequestDnsSearchSuffixesList.pipe( T.Body("dns_search_suffixes"), ), ), exclude: S.optional(DevicesPoliciesDefaultEditRequestExcludeList), excludeOfficeIps: S.optional(S.Boolean.pipe(T.Body("exclude_office_ips"))), globalAcceleration: S.optional( DevicesPoliciesDefaultEditRequestGlobalAcceleration.pipe( T.Body("global_acceleration"), ), ), include: S.optional(DevicesPoliciesDefaultEditRequestIncludeList), lanAllowMinutes: S.optional(S.Number.pipe(T.Body("lan_allow_minutes"))), lanAllowSubnetSize: S.optional( S.Number.pipe(T.Body("lan_allow_subnet_size")), ), registerInterfaceIpWithDns: S.optional( S.Boolean.pipe(T.Body("register_interface_ip_with_dns")), ), sccmVpnBoundarySupport: S.optional( S.Boolean.pipe(T.Body("sccm_vpn_boundary_support")), ), serviceModeV2: S.optional( DevicesPoliciesCustomCreateRequestServiceModeV2.pipe( T.Body("service_mode_v2"), ), ), supportUrl: S.optional(S.String.pipe(T.Body("support_url"))), switchLocked: S.optional(S.Boolean.pipe(T.Body("switch_locked"))), tunnelProtocol: S.optional(S.String.pipe(T.Body("tunnel_protocol"))), virtualNetworks: S.optional( DevicesPoliciesDefaultEditRequestVirtualNetworks.pipe( T.Body("virtual_networks"), ), ), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/devices/policy", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDevicePolicyDefaultRequest", }) as any as S.Schema; export type DevicesPoliciesDefaultEditResponseDnsSearchSuffixesItem = DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem; export const DevicesPoliciesDefaultEditResponseDnsSearchSuffixesItem = DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem; export type DevicesPoliciesDefaultEditResponseDnsSearchSuffixesList = Array; export const DevicesPoliciesDefaultEditResponseDnsSearchSuffixesList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomCreateResponseDnsSearchSuffixesItem, ) as any as S.Schema; export type DevicesPoliciesDefaultEditResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export const DevicesPoliciesDefaultEditResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export type DevicesPoliciesDefaultEditResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesDefaultEditResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export type DevicesPoliciesDefaultEditResponseExcludeItem = | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesDefaultEditResponseExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesDefaultEditResponseExcludeList = Array; export const DevicesPoliciesDefaultEditResponseExcludeList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultEditResponseExcludeItem, ) as any as S.Schema; export type DevicesPoliciesDefaultEditResponseFallbackDomainsItemDnsServerList = Array; export const DevicesPoliciesDefaultEditResponseFallbackDomainsItemDnsServerList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesDefaultEditResponseFallbackDomainsItem { /** The domain suffix to match when resolving locally. */ suffix: string; /** A description of the fallback domain, displayed in the client UI. */ description?: string | null; /** A list of IP addresses to handle domain resolution. */ dnsServer?: DevicesPoliciesDefaultEditResponseFallbackDomainsItemDnsServerList | null; } export const DevicesPoliciesDefaultEditResponseFallbackDomainsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ suffix: S.String, description: S.optional(S.NullOr(S.String)), dnsServer: S.optional( S.NullOr( DevicesPoliciesDefaultEditResponseFallbackDomainsItemDnsServerList, ).pipe(T.Body("dns_server")), ), }), ).annotate({ identifier: "DevicesPoliciesDefaultEditResponseFallbackDomainsItem", }) as any as S.Schema; export type DevicesPoliciesDefaultEditResponseFallbackDomainsList = Array; export const DevicesPoliciesDefaultEditResponseFallbackDomainsList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultEditResponseFallbackDomainsItem, ) as any as S.Schema; export type DevicesPoliciesDefaultEditResponseGlobalAccelerationApiEndpointsList = Array; export const DevicesPoliciesDefaultEditResponseGlobalAccelerationApiEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesDefaultEditResponseGlobalAccelerationMasqueEndpointsList = Array; export const DevicesPoliciesDefaultEditResponseGlobalAccelerationMasqueEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPoliciesDefaultEditResponseGlobalAccelerationWireguardEndpointsList = Array; export const DevicesPoliciesDefaultEditResponseGlobalAccelerationWireguardEndpointsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesDefaultEditResponseGlobalAcceleration { /** IP:port entries for the API endpoints. */ apiEndpoints: DevicesPoliciesDefaultEditResponseGlobalAccelerationApiEndpointsList; /** Global acceleration settings are used only when "enabled". */ enabled: boolean; /** IP:port entries for the MASQUE tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ masqueEndpoints: DevicesPoliciesDefaultEditResponseGlobalAccelerationMasqueEndpointsList; /** IP:port entries for the WireGuard tunnel endpoints. Either wireguard_endpoints or masque_endpoints must be provided. */ wireguardEndpoints: DevicesPoliciesDefaultEditResponseGlobalAccelerationWireguardEndpointsList; } export const DevicesPoliciesDefaultEditResponseGlobalAcceleration = /*@__PURE__*/ S.suspend(() => S.Struct({ apiEndpoints: DevicesPoliciesDefaultEditResponseGlobalAccelerationApiEndpointsList.pipe( T.Body("api_endpoints"), ), enabled: S.Boolean, masqueEndpoints: DevicesPoliciesDefaultEditResponseGlobalAccelerationMasqueEndpointsList.pipe( T.Body("masque_endpoints"), ), wireguardEndpoints: DevicesPoliciesDefaultEditResponseGlobalAccelerationWireguardEndpointsList.pipe( T.Body("wireguard_endpoints"), ), }), ).annotate({ identifier: "DevicesPoliciesDefaultEditResponseGlobalAcceleration", }) as any as S.Schema; export type DevicesPoliciesDefaultEditResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export const DevicesPoliciesDefaultEditResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export type DevicesPoliciesDefaultEditResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesDefaultEditResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export type DevicesPoliciesDefaultEditResponseIncludeItem = | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesDefaultEditResponseIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesDefaultEditResponseIncludeList = Array; export const DevicesPoliciesDefaultEditResponseIncludeList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultEditResponseIncludeItem, ) as any as S.Schema; export type DevicesPoliciesDefaultEditResponseServiceModeV2 = DevicesPoliciesCustomCreateResponseServiceModeV2; export const DevicesPoliciesDefaultEditResponseServiceModeV2 = DevicesPoliciesCustomCreateResponseServiceModeV2; export type DevicesPoliciesDefaultEditResponseVirtualNetworksAllowedList = Array; export const DevicesPoliciesDefaultEditResponseVirtualNetworksAllowedList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesDefaultEditResponseVirtualNetworks { /** List of virtual network IDs the device is allowed to access. When virtual_networks is set, at least one entry is required. */ allowed: DevicesPoliciesDefaultEditResponseVirtualNetworksAllowedList; /** The default virtual network ID. Must be included in the `allowed` list. */ default: string; } export const DevicesPoliciesDefaultEditResponseVirtualNetworks = /*@__PURE__*/ S.suspend(() => S.Struct({ allowed: DevicesPoliciesDefaultEditResponseVirtualNetworksAllowedList, default: S.String, }), ).annotate({ identifier: "DevicesPoliciesDefaultEditResponseVirtualNetworks", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchDevicePolicyDefaultResponse { /** Whether to allow the user to switch WARP between modes. */ allowModeSwitch?: boolean | null; /** Whether to receive update notifications when a new version of the client is available. */ allowUpdates?: boolean | null; /** Whether to allow devices to leave the organization. */ allowedToLeave?: boolean | null; /** The amount of time in seconds to reconnect after having been disabled. */ autoConnect?: number | null; /** Turn on the captive portal after the specified amount of time. */ captivePortal?: number | null; /** Whether the policy will be applied to matching devices. */ default?: boolean | null; /** If the `dns_server` field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to `true`. */ disableAutoFallback?: boolean | null; /** List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear. */ dnsSearchSuffixes?: DevicesPoliciesDefaultEditResponseDnsSearchSuffixesList | null; /** Whether the policy will be applied to matching devices. */ enabled?: boolean | null; /** List of routes excluded in the WARP client's tunnel. */ exclude?: DevicesPoliciesDefaultEditResponseExcludeList | null; /** Whether to add Microsoft IPs to Split Tunnel exclusions. */ excludeOfficeIps?: boolean | null; fallbackDomains?: DevicesPoliciesDefaultEditResponseFallbackDomainsList | null; gatewayUniqueId?: string | null; /** Global Acceleration settings for China. When configured, WARP clients connect to the Global Accelerator addresses instead of the default ones. Please contact your account representative to enable this feature on your account. See https://developers.cloudflare.com/china-network/concepts/global-acceleration/. */ globalAcceleration?: DevicesPoliciesDefaultEditResponseGlobalAcceleration | null; /** List of routes included in the WARP client's tunnel. */ include?: DevicesPoliciesDefaultEditResponseIncludeList | null; policyId?: string | null; /** Determines if the operating system will register WARP's local interface IP with your on-premises DNS server. */ registerInterfaceIpWithDns?: boolean | null; /** Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only). */ sccmVpnBoundarySupport?: boolean | null; serviceModeV2?: DevicesPoliciesCustomCreateResponseServiceModeV2 | null; /** The URL to launch when the Send Feedback button is clicked. */ supportUrl?: string | null; /** Whether to allow the user to turn off the WARP switch and disconnect the client. */ switchLocked?: boolean | null; /** Determines which tunnel protocol to use. */ tunnelProtocol?: string | null; /** Virtual network access settings for the device. */ virtualNetworks?: DevicesPoliciesDefaultEditResponseVirtualNetworks | null; } export const PatchDevicePolicyDefaultResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ allowModeSwitch: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_mode_switch")), ), allowUpdates: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_updates"))), allowedToLeave: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allowed_to_leave")), ), autoConnect: S.optional(S.NullOr(S.Number).pipe(T.Body("auto_connect"))), captivePortal: S.optional( S.NullOr(S.Number).pipe(T.Body("captive_portal")), ), default: S.optional(S.NullOr(S.Boolean)), disableAutoFallback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("disable_auto_fallback")), ), dnsSearchSuffixes: S.optional( S.NullOr(DevicesPoliciesDefaultEditResponseDnsSearchSuffixesList).pipe( T.Body("dns_search_suffixes"), ), ), enabled: S.optional(S.NullOr(S.Boolean)), exclude: S.optional( S.NullOr(DevicesPoliciesDefaultEditResponseExcludeList), ), excludeOfficeIps: S.optional( S.NullOr(S.Boolean).pipe(T.Body("exclude_office_ips")), ), fallbackDomains: S.optional( S.NullOr(DevicesPoliciesDefaultEditResponseFallbackDomainsList).pipe( T.Body("fallback_domains"), ), ), gatewayUniqueId: S.optional( S.NullOr(S.String).pipe(T.Body("gateway_unique_id")), ), globalAcceleration: S.optional( S.NullOr(DevicesPoliciesDefaultEditResponseGlobalAcceleration).pipe( T.Body("global_acceleration"), ), ), include: S.optional( S.NullOr(DevicesPoliciesDefaultEditResponseIncludeList), ), policyId: S.optional(S.NullOr(S.String).pipe(T.Body("policy_id"))), registerInterfaceIpWithDns: S.optional( S.NullOr(S.Boolean).pipe(T.Body("register_interface_ip_with_dns")), ), sccmVpnBoundarySupport: S.optional( S.NullOr(S.Boolean).pipe(T.Body("sccm_vpn_boundary_support")), ), serviceModeV2: S.optional( S.NullOr(DevicesPoliciesCustomCreateResponseServiceModeV2).pipe( T.Body("service_mode_v2"), ), ), supportUrl: S.optional(S.NullOr(S.String).pipe(T.Body("support_url"))), switchLocked: S.optional(S.NullOr(S.Boolean).pipe(T.Body("switch_locked"))), tunnelProtocol: S.optional( S.NullOr(S.String).pipe(T.Body("tunnel_protocol")), ), virtualNetworks: S.optional( S.NullOr(DevicesPoliciesDefaultEditResponseVirtualNetworks).pipe( T.Body("virtual_networks"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDevicePolicyDefaultResponse", }) as any as S.Schema; export interface PatchDevicePolicyDefaultCertificateRequest { zoneId: string; /** The current status of the device policy certificate provisioning feature for WARP clients. */ enabled: boolean; } export const PatchDevicePolicyDefaultCertificateRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), enabled: S.Boolean, }) .pipe( T.Http({ method: "PATCH", uri: "/zones/{zone_id}/devices/policy/certificates", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDevicePolicyDefaultCertificateRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchDevicePolicyDefaultCertificateResponse { /** The current status of the device policy certificate provisioning feature for WARP clients. */ enabled: boolean; } export const PatchDevicePolicyDefaultCertificateResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDevicePolicyDefaultCertificateResponse", }) as any as S.Schema; export type DevicesPostureIntegrationsEditRequestConfig = { [key: string]: string | undefined; }; export const DevicesPostureIntegrationsEditRequestConfig = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export type DevicesPostureIntegrationsEditRequestType = | "workspace_one" | "crowdstrike_s2s" | "uptycs" | "intune" | "kolide" | "tanium_s2s" | "sentinelone_s2s" | "custom_s2s"; export const DevicesPostureIntegrationsEditRequestType = /*@__PURE__*/ S.String; export interface PatchDevicePostureIntegrationRequest { accountId: string; /** API UUID. */ integrationId: string; /** The configuration object containing third-party integration information. */ config?: DevicesPostureIntegrationsEditRequestConfig; /** The interval between each posture check with the third-party API. Use `m` for minutes (e.g. `5m`) and `h` for hours (e.g. `12h`). */ interval?: string; /** The name of the device posture integration. */ name?: string; /** The type of device posture integration. */ type?: DevicesPostureIntegrationsEditRequestType | (string & {}); } export const PatchDevicePostureIntegrationRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), integrationId: S.String.pipe(T.Label("integration_id")), config: S.optional(DevicesPostureIntegrationsEditRequestConfig), interval: S.optional(S.String), name: S.optional(S.String), type: S.optional(DevicesPostureIntegrationsEditRequestType), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/devices/posture/integration/{integration_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDevicePostureIntegrationRequest", }) as any as S.Schema; export type DevicesPostureIntegrationsEditResponseConfig = DevicesPostureIntegrationsCreateResponseConfig; export const DevicesPostureIntegrationsEditResponseConfig = DevicesPostureIntegrationsCreateResponseConfig; export type DevicesPostureIntegrationsEditResponseType = | "workspace_one" | "crowdstrike_s2s" | "uptycs" | "intune" | "kolide" | "tanium_s2s" | "sentinelone_s2s" | "custom_s2s"; export const DevicesPostureIntegrationsEditResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchDevicePostureIntegrationResponse { /** API UUID. */ id?: string | null; /** The configuration object containing third-party integration information. */ config?: DevicesPostureIntegrationsCreateResponseConfig | null; /** The interval between each posture check with the third-party API. Use `m` for minutes (e.g. `5m`) and `h` for hours (e.g. `12h`). */ interval?: string | null; /** The name of the device posture integration. */ name?: string | null; /** The type of device posture integration. */ type?: DevicesPostureIntegrationsEditResponseType | null; } export const PatchDevicePostureIntegrationResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), config: S.optional( S.NullOr(DevicesPostureIntegrationsCreateResponseConfig), ), interval: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(DevicesPostureIntegrationsEditResponseType)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDevicePostureIntegrationResponse", }) as any as S.Schema; export interface PatchDeviceSettingRequest { accountId: string; /** Sets the time limit, in seconds, that a user can use an override code to bypass WARP. */ disableForTime?: number; /** Controls whether the external emergency disconnect feature is enabled. */ externalEmergencySignalEnabled?: boolean; /** The SHA256 fingerprint (64 hexadecimal characters) of the HTTPS server certificate for the external_emergency_signal_url. If provided, the WARP client will use this value to verify the server's identity. The device will ignore any response if the server's certificate fingerprint does not exactly match this value. */ externalEmergencySignalFingerprint?: string; /** The interval at which the WARP client fetches the emergency disconnect signal, formatted as a duration string (e.g., "5m", "2m30s", "1h"). Minimum 30 seconds. */ externalEmergencySignalInterval?: string; /** The HTTPS URL from which to fetch the emergency disconnect signal. Must use HTTPS and have an IPv4 or IPv6 address as the host. */ externalEmergencySignalUrl?: string; /** Enable gateway proxy filtering on TCP. */ gatewayProxyEnabled?: boolean; /** Enable gateway proxy filtering on UDP. */ gatewayUdpProxyEnabled?: boolean; /** Enable installation of cloudflare managed root certificate. */ rootCertificateInstallationEnabled?: boolean; /** Enable using CGNAT virtual IPv4. */ useZtVirtualIp?: boolean; } export const PatchDeviceSettingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), disableForTime: S.optional(S.Number.pipe(T.Body("disable_for_time"))), externalEmergencySignalEnabled: S.optional( S.Boolean.pipe(T.Body("external_emergency_signal_enabled")), ), externalEmergencySignalFingerprint: S.optional( S.String.pipe(T.Body("external_emergency_signal_fingerprint")), ), externalEmergencySignalInterval: S.optional( S.String.pipe(T.Body("external_emergency_signal_interval")), ), externalEmergencySignalUrl: S.optional( S.String.pipe(T.Body("external_emergency_signal_url")), ), gatewayProxyEnabled: S.optional( S.Boolean.pipe(T.Body("gateway_proxy_enabled")), ), gatewayUdpProxyEnabled: S.optional( S.Boolean.pipe(T.Body("gateway_udp_proxy_enabled")), ), rootCertificateInstallationEnabled: S.optional( S.Boolean.pipe(T.Body("root_certificate_installation_enabled")), ), useZtVirtualIp: S.optional(S.Boolean.pipe(T.Body("use_zt_virtual_ip"))), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/devices/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDeviceSettingRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchDeviceSettingResponse { /** Sets the time limit, in seconds, that a user can use an override code to bypass WARP. */ disableForTime?: number | null; /** Controls whether the external emergency disconnect feature is enabled. */ externalEmergencySignalEnabled?: boolean | null; /** The SHA256 fingerprint (64 hexadecimal characters) of the HTTPS server certificate for the external_emergency_signal_url. If provided, the WARP client will use this value to verify the server's identity. The device will ignore any response if the server's certificate fingerprint does not exactly match this value. */ externalEmergencySignalFingerprint?: string | null; /** The interval at which the WARP client fetches the emergency disconnect signal, formatted as a duration string (e.g., "5m", "2m30s", "1h"). Minimum 30 seconds. */ externalEmergencySignalInterval?: string | null; /** The HTTPS URL from which to fetch the emergency disconnect signal. Must use HTTPS and have an IPv4 or IPv6 address as the host. */ externalEmergencySignalUrl?: string | null; /** Enable gateway proxy filtering on TCP. */ gatewayProxyEnabled?: boolean | null; /** Enable gateway proxy filtering on UDP. */ gatewayUdpProxyEnabled?: boolean | null; /** Enable installation of cloudflare managed root certificate. */ rootCertificateInstallationEnabled?: boolean | null; /** Enable using CGNAT virtual IPv4. */ useZtVirtualIp?: boolean | null; } export const PatchDeviceSettingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ disableForTime: S.optional( S.NullOr(S.Number).pipe(T.Body("disable_for_time")), ), externalEmergencySignalEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("external_emergency_signal_enabled")), ), externalEmergencySignalFingerprint: S.optional( S.NullOr(S.String).pipe(T.Body("external_emergency_signal_fingerprint")), ), externalEmergencySignalInterval: S.optional( S.NullOr(S.String).pipe(T.Body("external_emergency_signal_interval")), ), externalEmergencySignalUrl: S.optional( S.NullOr(S.String).pipe(T.Body("external_emergency_signal_url")), ), gatewayProxyEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("gateway_proxy_enabled")), ), gatewayUdpProxyEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("gateway_udp_proxy_enabled")), ), rootCertificateInstallationEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("root_certificate_installation_enabled")), ), useZtVirtualIp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("use_zt_virtual_ip")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDeviceSettingResponse", }) as any as S.Schema; export interface PatchDexRuleRequest { /** Unique identifier linked to an account. */ accountId: string; /** API Resource UUID tag. */ ruleId: string; description?: string; /** The wirefilter expression to match. */ match?: string; /** The name of the Rule. */ name?: string; } export const PatchDexRuleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ruleId: S.String.pipe(T.Label("rule_id")), description: S.optional(S.String), match: S.optional(S.String), name: S.optional(S.String), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/dex/rules/{rule_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDexRuleRequest", }) as any as S.Schema; export type DexRulesUpdateResponseTargetedTestsItemDataKind = | "http" | "traceroute"; export const DexRulesUpdateResponseTargetedTestsItemDataKind = /*@__PURE__*/ S.String; export type DexRulesUpdateResponseTargetedTestsItemDataMethod = "GET"; export const DexRulesUpdateResponseTargetedTestsItemDataMethod = /*@__PURE__*/ S.String; export interface DexRulesUpdateResponseTargetedTestsItemData { /** The desired endpoint to test. */ host: string; /** The type of test. */ kind: DexRulesUpdateResponseTargetedTestsItemDataKind; /** The HTTP request method type. */ method?: DexRulesUpdateResponseTargetedTestsItemDataMethod | null; } export const DexRulesUpdateResponseTargetedTestsItemData = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.String, kind: DexRulesUpdateResponseTargetedTestsItemDataKind, method: S.optional( S.NullOr(DexRulesUpdateResponseTargetedTestsItemDataMethod), ), }), ).annotate({ identifier: "DexRulesUpdateResponseTargetedTestsItemData", }) as any as S.Schema; export interface DexRulesUpdateResponseTargetedTestsItem { /** The configuration object which contains the details for the WARP client to conduct the test. */ data: DexRulesUpdateResponseTargetedTestsItemData; enabled: boolean; name: string; testId: string; } export const DexRulesUpdateResponseTargetedTestsItem = /*@__PURE__*/ S.suspend( () => S.Struct({ data: DexRulesUpdateResponseTargetedTestsItemData, enabled: S.Boolean, name: S.String, testId: S.String.pipe(T.Body("test_id")), }), ).annotate({ identifier: "DexRulesUpdateResponseTargetedTestsItem", }) as any as S.Schema; export type DexRulesUpdateResponseTargetedTestsList = Array; export const DexRulesUpdateResponseTargetedTestsList = /*@__PURE__*/ S.Array( DexRulesUpdateResponseTargetedTestsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchDexRuleResponse { /** API Resource UUID tag. */ id: string; createdAt: string; match: string; name: string; description?: string | null; targetedTests?: DexRulesUpdateResponseTargetedTestsList | null; updatedAt?: string | null; } export const PatchDexRuleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), match: S.String, name: S.String, description: S.optional(S.NullOr(S.String)), targetedTests: S.optional( S.NullOr(DexRulesUpdateResponseTargetedTestsList).pipe( T.Body("targeted_tests"), ), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDexRuleResponse", }) as any as S.Schema; export type DlpSettingsEditRequestPayloadLoggingMaskingLevel = | "full" | "partial" | "clear" | "default"; export const DlpSettingsEditRequestPayloadLoggingMaskingLevel = /*@__PURE__*/ S.String; export interface DlpSettingsEditRequestPayloadLogging { /** Masking level for payload logs. */ maskingLevel?: | DlpSettingsEditRequestPayloadLoggingMaskingLevel | (string & {}); /** Base64-encoded public key for encrypting payload logs. */ publicKey?: string; } export const DlpSettingsEditRequestPayloadLogging = /*@__PURE__*/ S.suspend( () => S.Struct({ maskingLevel: S.optional( DlpSettingsEditRequestPayloadLoggingMaskingLevel.pipe( T.Body("masking_level"), ), ), publicKey: S.optional(S.String.pipe(T.Body("public_key"))), }), ).annotate({ identifier: "DlpSettingsEditRequestPayloadLogging", }) as any as S.Schema; export interface PatchDlpSettingRequest { accountId: string; /** Whether AI context analysis is enabled at the account level. */ aiContextAnalysis?: boolean; /** Whether OCR is enabled at the account level. */ ocr?: boolean; /** Request model for payload log settings within the DLP settings endpoint. */ payloadLogging?: DlpSettingsEditRequestPayloadLogging; } export const PatchDlpSettingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), aiContextAnalysis: S.optional( S.Boolean.pipe(T.Body("ai_context_analysis")), ), ocr: S.optional(S.Boolean), payloadLogging: S.optional( DlpSettingsEditRequestPayloadLogging.pipe(T.Body("payload_logging")), ), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/dlp/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDlpSettingRequest", }) as any as S.Schema; export type DlpSettingsEditResponsePayloadLoggingMaskingLevel = | "full" | "partial" | "clear" | "default"; export const DlpSettingsEditResponsePayloadLoggingMaskingLevel = /*@__PURE__*/ S.String; export interface DlpSettingsEditResponsePayloadLogging { updatedAt: string; /** Masking level for payload logs. */ maskingLevel?: DlpSettingsEditResponsePayloadLoggingMaskingLevel | null; /** Base64-encoded public key for encrypting payload logs. Null when payload logging is disabled. */ publicKey?: string | null; } export const DlpSettingsEditResponsePayloadLogging = /*@__PURE__*/ S.suspend( () => S.Struct({ updatedAt: S.String.pipe(T.Body("updated_at")), maskingLevel: S.optional( S.NullOr(DlpSettingsEditResponsePayloadLoggingMaskingLevel).pipe( T.Body("masking_level"), ), ), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), }), ).annotate({ identifier: "DlpSettingsEditResponsePayloadLogging", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchDlpSettingResponse { /** Whether AI context analysis is enabled at the account level. */ aiContextAnalysis: boolean; /** Whether OCR is enabled at the account level. */ ocr: boolean; payloadLogging: DlpSettingsEditResponsePayloadLogging; } export const PatchDlpSettingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ aiContextAnalysis: S.Boolean.pipe(T.Body("ai_context_analysis")), ocr: S.Boolean, payloadLogging: DlpSettingsEditResponsePayloadLogging.pipe( T.Body("payload_logging"), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchDlpSettingResponse", }) as any as S.Schema; export interface GatewayConfigurationsEditRequestSettingsActivityLog { /** Specify whether to log activity. */ enabled?: boolean; } export const GatewayConfigurationsEditRequestSettingsActivityLog = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), }), ).annotate({ identifier: "GatewayConfigurationsEditRequestSettingsActivityLog", }) as any as S.Schema; export interface GatewayConfigurationsEditRequestSettingsAntivirusNotificationSettings { /** Specify whether to enable notifications. */ enabled?: boolean; /** Specify whether to include context information as query parameters. */ includeContext?: boolean; /** Specify the message to show in the notification. */ msg?: string; /** Specify a URL that directs users to more information. If unset, the notification opens a block page. */ supportUrl?: string; } export const GatewayConfigurationsEditRequestSettingsAntivirusNotificationSettings = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), includeContext: S.optional(S.Boolean.pipe(T.Body("include_context"))), msg: S.optional(S.String), supportUrl: S.optional(S.String.pipe(T.Body("support_url"))), }), ).annotate({ identifier: "GatewayConfigurationsEditRequestSettingsAntivirusNotificationSettings", }) as any as S.Schema; export interface GatewayConfigurationsEditRequestSettingsAntivirus { /** Specify whether to enable anti-virus scanning on downloads. */ enabledDownloadPhase?: boolean; /** Specify whether to enable anti-virus scanning on uploads. */ enabledUploadPhase?: boolean; /** Specify whether to block requests for unscannable files. */ failClosed?: boolean; /** Configure the message the user's device shows during an antivirus scan. */ notificationSettings?: GatewayConfigurationsEditRequestSettingsAntivirusNotificationSettings; } export const GatewayConfigurationsEditRequestSettingsAntivirus = /*@__PURE__*/ S.suspend(() => S.Struct({ enabledDownloadPhase: S.optional( S.Boolean.pipe(T.Body("enabled_download_phase")), ), enabledUploadPhase: S.optional( S.Boolean.pipe(T.Body("enabled_upload_phase")), ), failClosed: S.optional(S.Boolean.pipe(T.Body("fail_closed"))), notificationSettings: S.optional( GatewayConfigurationsEditRequestSettingsAntivirusNotificationSettings.pipe( T.Body("notification_settings"), ), ), }), ).annotate({ identifier: "GatewayConfigurationsEditRequestSettingsAntivirus", }) as any as S.Schema; export type GatewayConfigurationsEditRequestSettingsBlockPageMode = | "" | "customized_block_page" | "redirect_uri"; export const GatewayConfigurationsEditRequestSettingsBlockPageMode = /*@__PURE__*/ S.String; export interface GatewayConfigurationsEditRequestSettingsBlockPage { /** Specify the block page background color in `#rrggbb` format when the mode is customized_block_page. */ backgroundColor?: string; /** Specify whether to enable the custom block page. */ enabled?: boolean; /** Specify the block page footer text when the mode is customized_block_page. */ footerText?: string; /** Specify the block page header text when the mode is customized_block_page. */ headerText?: string; /** Specify whether to append context to target_uri as query parameters. This applies only when the mode is redirect_uri. */ includeContext?: boolean; /** Specify the full URL to the logo file when the mode is customized_block_page. */ logoPath?: string; /** Specify the admin email for users to contact when the mode is customized_block_page. */ mailtoAddress?: string; /** Specify the subject line for emails created from the block page when the mode is customized_block_page. */ mailtoSubject?: string; /** Specify whether to redirect users to a Cloudflare-hosted block page or a customer-provided URI. */ mode?: GatewayConfigurationsEditRequestSettingsBlockPageMode | (string & {}); /** Specify the block page title when the mode is customized_block_page. */ name?: string; /** Indicate that this setting was shared via the Orgs API and read only for the current account. */ readOnly?: boolean; /** Indicate the account tag of the account that shared this setting. */ sourceAccount?: string; /** Specify whether to suppress detailed information at the bottom of the block page when the mode is customized_block_page. */ suppressFooter?: boolean; /** Specify the URI to redirect users to when the mode is redirect_uri. */ targetUri?: string; /** Indicate the version number of the setting. */ version?: number; } export const GatewayConfigurationsEditRequestSettingsBlockPage = /*@__PURE__*/ S.suspend(() => S.Struct({ backgroundColor: S.optional(S.String.pipe(T.Body("background_color"))), enabled: S.optional(S.Boolean), footerText: S.optional(S.String.pipe(T.Body("footer_text"))), headerText: S.optional(S.String.pipe(T.Body("header_text"))), includeContext: S.optional(S.Boolean.pipe(T.Body("include_context"))), logoPath: S.optional(S.String.pipe(T.Body("logo_path"))), mailtoAddress: S.optional(S.String.pipe(T.Body("mailto_address"))), mailtoSubject: S.optional(S.String.pipe(T.Body("mailto_subject"))), mode: S.optional(GatewayConfigurationsEditRequestSettingsBlockPageMode), name: S.optional(S.String), readOnly: S.optional(S.Boolean.pipe(T.Body("read_only"))), sourceAccount: S.optional(S.String.pipe(T.Body("source_account"))), suppressFooter: S.optional(S.Boolean.pipe(T.Body("suppress_footer"))), targetUri: S.optional(S.String.pipe(T.Body("target_uri"))), version: S.optional(S.Number), }), ).annotate({ identifier: "GatewayConfigurationsEditRequestSettingsBlockPage", }) as any as S.Schema; export type GatewayConfigurationsEditRequestSettingsBodyScanningInspectionMode = | "deep" | "shallow"; export const GatewayConfigurationsEditRequestSettingsBodyScanningInspectionMode = /*@__PURE__*/ S.String; export interface GatewayConfigurationsEditRequestSettingsBodyScanning { /** Specify the inspection mode as either `deep` or `shallow`. */ inspectionMode?: | GatewayConfigurationsEditRequestSettingsBodyScanningInspectionMode | (string & {}); } export const GatewayConfigurationsEditRequestSettingsBodyScanning = /*@__PURE__*/ S.suspend(() => S.Struct({ inspectionMode: S.optional( GatewayConfigurationsEditRequestSettingsBodyScanningInspectionMode.pipe( T.Body("inspection_mode"), ), ), }), ).annotate({ identifier: "GatewayConfigurationsEditRequestSettingsBodyScanning", }) as any as S.Schema; export interface GatewayConfigurationsEditRequestSettingsBrowserIsolation { /** Specify whether to enable non-identity onramp support for Browser Isolation. */ nonIdentityEnabled?: boolean; /** Specify whether to enable Clientless Browser Isolation. */ urlBrowserIsolationEnabled?: boolean; } export const GatewayConfigurationsEditRequestSettingsBrowserIsolation = /*@__PURE__*/ S.suspend(() => S.Struct({ nonIdentityEnabled: S.optional( S.Boolean.pipe(T.Body("non_identity_enabled")), ), urlBrowserIsolationEnabled: S.optional( S.Boolean.pipe(T.Body("url_browser_isolation_enabled")), ), }), ).annotate({ identifier: "GatewayConfigurationsEditRequestSettingsBrowserIsolation", }) as any as S.Schema; export type GatewayConfigurationsEditRequestSettingsCertificate = GatewayConfigurationsGetResponseSettingsCertificate; export const GatewayConfigurationsEditRequestSettingsCertificate = GatewayConfigurationsGetResponseSettingsCertificate; export interface GatewayConfigurationsEditRequestSettingsCustomCertificate { /** Specify whether to enable a custom certificate authority for signing Gateway traffic. */ enabled: boolean; /** Specify the UUID of the certificate (ID from MTLS certificate store). */ id?: string; /** Indicate the internal certificate status. */ bindingStatus?: string; updatedAt?: string; } export const GatewayConfigurationsEditRequestSettingsCustomCertificate = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, id: S.optional(S.String), bindingStatus: S.optional(S.String.pipe(T.Body("binding_status"))), updatedAt: S.optional(S.String.pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "GatewayConfigurationsEditRequestSettingsCustomCertificate", }) as any as S.Schema; export interface GatewayConfigurationsEditRequestSettingsExtendedEmailMatching { /** Specify whether to match all variants of user emails (with + or . modifiers) used as criteria in Firewall policies. */ enabled?: boolean; /** Indicate that this setting was shared via the Orgs API and read only for the current account. */ readOnly?: boolean; /** Indicate the account tag of the account that shared this setting. */ sourceAccount?: string; /** Indicate the version number of the setting. */ version?: number; } export const GatewayConfigurationsEditRequestSettingsExtendedEmailMatching = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), readOnly: S.optional(S.Boolean.pipe(T.Body("read_only"))), sourceAccount: S.optional(S.String.pipe(T.Body("source_account"))), version: S.optional(S.Number), }), ).annotate({ identifier: "GatewayConfigurationsEditRequestSettingsExtendedEmailMatching", }) as any as S.Schema; export interface GatewayConfigurationsEditRequestSettingsFips { /** Enforce cipher suites and TLS versions compliant with FIPS 140-2. */ tls?: boolean; } export const GatewayConfigurationsEditRequestSettingsFips = /*@__PURE__*/ S.suspend(() => S.Struct({ tls: S.optional(S.Boolean), }), ).annotate({ identifier: "GatewayConfigurationsEditRequestSettingsFips", }) as any as S.Schema; export interface GatewayConfigurationsEditRequestSettingsHostSelector { /** Specify whether to enable filtering via hosts for egress policies. */ enabled?: boolean; } export const GatewayConfigurationsEditRequestSettingsHostSelector = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), }), ).annotate({ identifier: "GatewayConfigurationsEditRequestSettingsHostSelector", }) as any as S.Schema; export type GatewayConfigurationsEditRequestSettingsInspectionMode = | "static" | "dynamic"; export const GatewayConfigurationsEditRequestSettingsInspectionMode = /*@__PURE__*/ S.String; export interface GatewayConfigurationsEditRequestSettingsInspection { /** Define the proxy inspection mode. 1. static: Gateway applies static inspection to HTTP on TCP(80). With TLS decryption on, Gateway inspects HTTPS traffic on TCP(443) and UDP(443). 2. dynamic: Gateway applies protocol detection to inspect HTTP and HTTPS traffic on any port. TLS decryption must remain on to inspect HTTPS traffic. */ mode?: GatewayConfigurationsEditRequestSettingsInspectionMode | (string & {}); } export const GatewayConfigurationsEditRequestSettingsInspection = /*@__PURE__*/ S.suspend(() => S.Struct({ mode: S.optional(GatewayConfigurationsEditRequestSettingsInspectionMode), }), ).annotate({ identifier: "GatewayConfigurationsEditRequestSettingsInspection", }) as any as S.Schema; export interface GatewayConfigurationsEditRequestSettingsProtocolDetection { /** Specify whether to detect protocols from the initial bytes of client traffic. */ enabled?: boolean; } export const GatewayConfigurationsEditRequestSettingsProtocolDetection = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), }), ).annotate({ identifier: "GatewayConfigurationsEditRequestSettingsProtocolDetection", }) as any as S.Schema; export type GatewayConfigurationsEditRequestSettingsSandboxFallbackAction = | "allow" | "block"; export const GatewayConfigurationsEditRequestSettingsSandboxFallbackAction = /*@__PURE__*/ S.String; export interface GatewayConfigurationsEditRequestSettingsSandbox { /** Specify whether to enable the sandbox. */ enabled?: boolean; /** Specify the action to take when the system cannot scan the file. */ fallbackAction?: | GatewayConfigurationsEditRequestSettingsSandboxFallbackAction | (string & {}); } export const GatewayConfigurationsEditRequestSettingsSandbox = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), fallbackAction: S.optional( GatewayConfigurationsEditRequestSettingsSandboxFallbackAction.pipe( T.Body("fallback_action"), ), ), }), ).annotate({ identifier: "GatewayConfigurationsEditRequestSettingsSandbox", }) as any as S.Schema; export interface GatewayConfigurationsEditRequestSettingsTlsDecrypt { /** Specify whether to inspect encrypted HTTP traffic. */ enabled?: boolean; } export const GatewayConfigurationsEditRequestSettingsTlsDecrypt = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), }), ).annotate({ identifier: "GatewayConfigurationsEditRequestSettingsTlsDecrypt", }) as any as S.Schema; export interface GatewayConfigurationsEditRequestSettings { /** Specify activity log settings. */ activityLog?: GatewayConfigurationsEditRequestSettingsActivityLog; /** Specify anti-virus settings. */ antivirus?: GatewayConfigurationsEditRequestSettingsAntivirus; /** Specify block page layout settings. */ blockPage?: GatewayConfigurationsEditRequestSettingsBlockPage; /** Specify the DLP inspection mode. */ bodyScanning?: GatewayConfigurationsEditRequestSettingsBodyScanning; /** Specify Clientless Browser Isolation settings. */ browserIsolation?: GatewayConfigurationsEditRequestSettingsBrowserIsolation; /** Specify certificate settings for Gateway TLS interception. If unset, the Cloudflare Root CA handles interception. */ certificate?: GatewayConfigurationsGetResponseSettingsCertificate; /** Specify custom certificate settings for BYO-PKI. This field is deprecated; use `certificate` instead. */ customCertificate?: GatewayConfigurationsEditRequestSettingsCustomCertificate; /** Configures user email settings for firewall policies. When you enable this, the system standardizes email addresses in the identity portion of the rule to match extended email variants in firewall policies. When you disable this setting, the system matches email addresses exactly as you provide them. Enable this setting if your email uses `.` or `+` modifiers. */ extendedEmailMatching?: GatewayConfigurationsEditRequestSettingsExtendedEmailMatching; /** Specify FIPS settings. */ fips?: GatewayConfigurationsEditRequestSettingsFips; /** Enable host selection in egress policies. */ hostSelector?: GatewayConfigurationsEditRequestSettingsHostSelector; /** Define the proxy inspection mode. */ inspection?: GatewayConfigurationsEditRequestSettingsInspection; /** Account-level cap on DNS response TTLs, in seconds. Gateway rewrites DNS responses so returned record TTLs do not exceed this value. Null means no cap. Each DNS location can inherit, override, or disable it through the location `max_ttl` setting. */ maxTtlSecs?: number; /** Specify whether to detect protocols from the initial bytes of client traffic. */ protocolDetection?: GatewayConfigurationsEditRequestSettingsProtocolDetection; /** Specify whether to enable the sandbox. */ sandbox?: GatewayConfigurationsEditRequestSettingsSandbox; /** Specify whether to inspect encrypted HTTP traffic. */ tlsDecrypt?: GatewayConfigurationsEditRequestSettingsTlsDecrypt; } export const GatewayConfigurationsEditRequestSettings = /*@__PURE__*/ S.suspend( () => S.Struct({ activityLog: S.optional( GatewayConfigurationsEditRequestSettingsActivityLog.pipe( T.Body("activity_log"), ), ), antivirus: S.optional(GatewayConfigurationsEditRequestSettingsAntivirus), blockPage: S.optional( GatewayConfigurationsEditRequestSettingsBlockPage.pipe( T.Body("block_page"), ), ), bodyScanning: S.optional( GatewayConfigurationsEditRequestSettingsBodyScanning.pipe( T.Body("body_scanning"), ), ), browserIsolation: S.optional( GatewayConfigurationsEditRequestSettingsBrowserIsolation.pipe( T.Body("browser_isolation"), ), ), certificate: S.optional( GatewayConfigurationsGetResponseSettingsCertificate, ), customCertificate: S.optional( GatewayConfigurationsEditRequestSettingsCustomCertificate.pipe( T.Body("custom_certificate"), ), ), extendedEmailMatching: S.optional( GatewayConfigurationsEditRequestSettingsExtendedEmailMatching.pipe( T.Body("extended_email_matching"), ), ), fips: S.optional(GatewayConfigurationsEditRequestSettingsFips), hostSelector: S.optional( GatewayConfigurationsEditRequestSettingsHostSelector.pipe( T.Body("host_selector"), ), ), inspection: S.optional( GatewayConfigurationsEditRequestSettingsInspection, ), maxTtlSecs: S.optional(S.Number.pipe(T.Body("max_ttl_secs"))), protocolDetection: S.optional( GatewayConfigurationsEditRequestSettingsProtocolDetection.pipe( T.Body("protocol_detection"), ), ), sandbox: S.optional(GatewayConfigurationsEditRequestSettingsSandbox), tlsDecrypt: S.optional( GatewayConfigurationsEditRequestSettingsTlsDecrypt.pipe( T.Body("tls_decrypt"), ), ), }), ).annotate({ identifier: "GatewayConfigurationsEditRequestSettings", }) as any as S.Schema; export interface PatchGatewayConfigurationRequest { accountId: string; /** Specify account settings. */ settings?: GatewayConfigurationsEditRequestSettings; } export const PatchGatewayConfigurationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), settings: S.optional(GatewayConfigurationsEditRequestSettings), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/gateway/configuration", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchGatewayConfigurationRequest", }) as any as S.Schema; export type GatewayConfigurationsEditResponseSettingsActivityLog = GatewayConfigurationsGetResponseSettingsActivityLog; export const GatewayConfigurationsEditResponseSettingsActivityLog = GatewayConfigurationsGetResponseSettingsActivityLog; export type GatewayConfigurationsEditResponseSettingsAntivirusNotificationSettings = GatewayConfigurationsGetResponseSettingsAntivirusNotificationSettings; export const GatewayConfigurationsEditResponseSettingsAntivirusNotificationSettings = GatewayConfigurationsGetResponseSettingsAntivirusNotificationSettings; export type GatewayConfigurationsEditResponseSettingsAntivirus = GatewayConfigurationsGetResponseSettingsAntivirus; export const GatewayConfigurationsEditResponseSettingsAntivirus = GatewayConfigurationsGetResponseSettingsAntivirus; export type GatewayConfigurationsEditResponseSettingsBlockPageMode = | "" | "customized_block_page" | "redirect_uri"; export const GatewayConfigurationsEditResponseSettingsBlockPageMode = /*@__PURE__*/ S.String; export interface GatewayConfigurationsEditResponseSettingsBlockPage { /** Specify the block page background color in `#rrggbb` format when the mode is customized_block_page. */ backgroundColor?: string | null; /** Specify whether to enable the custom block page. */ enabled?: boolean | null; /** Specify the block page footer text when the mode is customized_block_page. */ footerText?: string | null; /** Specify the block page header text when the mode is customized_block_page. */ headerText?: string | null; /** Specify whether to append context to target_uri as query parameters. This applies only when the mode is redirect_uri. */ includeContext?: boolean | null; /** Specify the full URL to the logo file when the mode is customized_block_page. */ logoPath?: string | null; /** Specify the admin email for users to contact when the mode is customized_block_page. */ mailtoAddress?: string | null; /** Specify the subject line for emails created from the block page when the mode is customized_block_page. */ mailtoSubject?: string | null; /** Specify whether to redirect users to a Cloudflare-hosted block page or a customer-provided URI. */ mode?: GatewayConfigurationsEditResponseSettingsBlockPageMode | null; /** Specify the block page title when the mode is customized_block_page. */ name?: string | null; /** Indicate that this setting was shared via the Orgs API and read only for the current account. */ readOnly?: boolean | null; /** Indicate the account tag of the account that shared this setting. */ sourceAccount?: string | null; /** Specify whether to suppress detailed information at the bottom of the block page when the mode is customized_block_page. */ suppressFooter?: boolean | null; /** Specify the URI to redirect users to when the mode is redirect_uri. */ targetUri?: string | null; /** Indicate the version number of the setting. */ version?: number | null; } export const GatewayConfigurationsEditResponseSettingsBlockPage = /*@__PURE__*/ S.suspend(() => S.Struct({ backgroundColor: S.optional( S.NullOr(S.String).pipe(T.Body("background_color")), ), enabled: S.optional(S.NullOr(S.Boolean)), footerText: S.optional(S.NullOr(S.String).pipe(T.Body("footer_text"))), headerText: S.optional(S.NullOr(S.String).pipe(T.Body("header_text"))), includeContext: S.optional( S.NullOr(S.Boolean).pipe(T.Body("include_context")), ), logoPath: S.optional(S.NullOr(S.String).pipe(T.Body("logo_path"))), mailtoAddress: S.optional( S.NullOr(S.String).pipe(T.Body("mailto_address")), ), mailtoSubject: S.optional( S.NullOr(S.String).pipe(T.Body("mailto_subject")), ), mode: S.optional( S.NullOr(GatewayConfigurationsEditResponseSettingsBlockPageMode), ), name: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), sourceAccount: S.optional( S.NullOr(S.String).pipe(T.Body("source_account")), ), suppressFooter: S.optional( S.NullOr(S.Boolean).pipe(T.Body("suppress_footer")), ), targetUri: S.optional(S.NullOr(S.String).pipe(T.Body("target_uri"))), version: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "GatewayConfigurationsEditResponseSettingsBlockPage", }) as any as S.Schema; export type GatewayConfigurationsEditResponseSettingsBodyScanningInspectionMode = | "deep" | "shallow"; export const GatewayConfigurationsEditResponseSettingsBodyScanningInspectionMode = /*@__PURE__*/ S.String; export interface GatewayConfigurationsEditResponseSettingsBodyScanning { /** Specify the inspection mode as either `deep` or `shallow`. */ inspectionMode?: GatewayConfigurationsEditResponseSettingsBodyScanningInspectionMode | null; } export const GatewayConfigurationsEditResponseSettingsBodyScanning = /*@__PURE__*/ S.suspend(() => S.Struct({ inspectionMode: S.optional( S.NullOr( GatewayConfigurationsEditResponseSettingsBodyScanningInspectionMode, ).pipe(T.Body("inspection_mode")), ), }), ).annotate({ identifier: "GatewayConfigurationsEditResponseSettingsBodyScanning", }) as any as S.Schema; export type GatewayConfigurationsEditResponseSettingsBrowserIsolation = GatewayConfigurationsGetResponseSettingsBrowserIsolation; export const GatewayConfigurationsEditResponseSettingsBrowserIsolation = GatewayConfigurationsGetResponseSettingsBrowserIsolation; export type GatewayConfigurationsEditResponseSettingsCertificate = GatewayConfigurationsGetResponseSettingsCertificate; export const GatewayConfigurationsEditResponseSettingsCertificate = GatewayConfigurationsGetResponseSettingsCertificate; export type GatewayConfigurationsEditResponseSettingsCustomCertificate = GatewayConfigurationsGetResponseSettingsCustomCertificate; export const GatewayConfigurationsEditResponseSettingsCustomCertificate = GatewayConfigurationsGetResponseSettingsCustomCertificate; export type GatewayConfigurationsEditResponseSettingsExtendedEmailMatching = GatewayConfigurationsGetResponseSettingsExtendedEmailMatching; export const GatewayConfigurationsEditResponseSettingsExtendedEmailMatching = GatewayConfigurationsGetResponseSettingsExtendedEmailMatching; export type GatewayConfigurationsEditResponseSettingsFips = GatewayConfigurationsGetResponseSettingsFips; export const GatewayConfigurationsEditResponseSettingsFips = GatewayConfigurationsGetResponseSettingsFips; export type GatewayConfigurationsEditResponseSettingsHostSelector = GatewayConfigurationsGetResponseSettingsHostSelector; export const GatewayConfigurationsEditResponseSettingsHostSelector = GatewayConfigurationsGetResponseSettingsHostSelector; export type GatewayConfigurationsEditResponseSettingsInspectionMode = | "static" | "dynamic"; export const GatewayConfigurationsEditResponseSettingsInspectionMode = /*@__PURE__*/ S.String; export interface GatewayConfigurationsEditResponseSettingsInspection { /** Define the proxy inspection mode. 1. static: Gateway applies static inspection to HTTP on TCP(80). With TLS decryption on, Gateway inspects HTTPS traffic on TCP(443) and UDP(443). 2. dynamic: Gateway applies protocol detection to inspect HTTP and HTTPS traffic on any port. TLS decryption must remain on to inspect HTTPS traffic. */ mode?: GatewayConfigurationsEditResponseSettingsInspectionMode | null; } export const GatewayConfigurationsEditResponseSettingsInspection = /*@__PURE__*/ S.suspend(() => S.Struct({ mode: S.optional( S.NullOr(GatewayConfigurationsEditResponseSettingsInspectionMode), ), }), ).annotate({ identifier: "GatewayConfigurationsEditResponseSettingsInspection", }) as any as S.Schema; export type GatewayConfigurationsEditResponseSettingsProtocolDetection = GatewayConfigurationsGetResponseSettingsProtocolDetection; export const GatewayConfigurationsEditResponseSettingsProtocolDetection = GatewayConfigurationsGetResponseSettingsProtocolDetection; export type GatewayConfigurationsEditResponseSettingsSandboxFallbackAction = | "allow" | "block"; export const GatewayConfigurationsEditResponseSettingsSandboxFallbackAction = /*@__PURE__*/ S.String; export interface GatewayConfigurationsEditResponseSettingsSandbox { /** Specify whether to enable the sandbox. */ enabled?: boolean | null; /** Specify the action to take when the system cannot scan the file. */ fallbackAction?: GatewayConfigurationsEditResponseSettingsSandboxFallbackAction | null; } export const GatewayConfigurationsEditResponseSettingsSandbox = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), fallbackAction: S.optional( S.NullOr( GatewayConfigurationsEditResponseSettingsSandboxFallbackAction, ).pipe(T.Body("fallback_action")), ), }), ).annotate({ identifier: "GatewayConfigurationsEditResponseSettingsSandbox", }) as any as S.Schema; export type GatewayConfigurationsEditResponseSettingsTlsDecrypt = GatewayConfigurationsGetResponseSettingsTlsDecrypt; export const GatewayConfigurationsEditResponseSettingsTlsDecrypt = GatewayConfigurationsGetResponseSettingsTlsDecrypt; export interface GatewayConfigurationsEditResponseSettings { /** Specify activity log settings. */ activityLog?: GatewayConfigurationsGetResponseSettingsActivityLog | null; /** Specify anti-virus settings. */ antivirus?: GatewayConfigurationsGetResponseSettingsAntivirus | null; /** Specify block page layout settings. */ blockPage?: GatewayConfigurationsEditResponseSettingsBlockPage | null; /** Specify the DLP inspection mode. */ bodyScanning?: GatewayConfigurationsEditResponseSettingsBodyScanning | null; /** Specify Clientless Browser Isolation settings. */ browserIsolation?: GatewayConfigurationsGetResponseSettingsBrowserIsolation | null; /** Specify certificate settings for Gateway TLS interception. If unset, the Cloudflare Root CA handles interception. */ certificate?: GatewayConfigurationsGetResponseSettingsCertificate | null; /** Specify custom certificate settings for BYO-PKI. This field is deprecated; use `certificate` instead. */ customCertificate?: GatewayConfigurationsGetResponseSettingsCustomCertificate | null; /** Configures user email settings for firewall policies. When you enable this, the system standardizes email addresses in the identity portion of the rule to match extended email variants in firewall policies. When you disable this setting, the system matches email addresses exactly as you provide them. Enable this setting if your email uses `.` or `+` modifiers. */ extendedEmailMatching?: GatewayConfigurationsGetResponseSettingsExtendedEmailMatching | null; /** Specify FIPS settings. */ fips?: GatewayConfigurationsGetResponseSettingsFips | null; /** Enable host selection in egress policies. */ hostSelector?: GatewayConfigurationsGetResponseSettingsHostSelector | null; /** Define the proxy inspection mode. */ inspection?: GatewayConfigurationsEditResponseSettingsInspection | null; /** Account-level cap on DNS response TTLs, in seconds. Gateway rewrites DNS responses so returned record TTLs do not exceed this value. Null means no cap. Each DNS location can inherit, override, or disable it through the location `max_ttl` setting. */ maxTtlSecs?: number | null; /** Specify whether to detect protocols from the initial bytes of client traffic. */ protocolDetection?: GatewayConfigurationsGetResponseSettingsProtocolDetection | null; /** Specify whether to enable the sandbox. */ sandbox?: GatewayConfigurationsEditResponseSettingsSandbox | null; /** Specify whether to inspect encrypted HTTP traffic. */ tlsDecrypt?: GatewayConfigurationsGetResponseSettingsTlsDecrypt | null; } export const GatewayConfigurationsEditResponseSettings = /*@__PURE__*/ S.suspend(() => S.Struct({ activityLog: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsActivityLog).pipe( T.Body("activity_log"), ), ), antivirus: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsAntivirus), ), blockPage: S.optional( S.NullOr(GatewayConfigurationsEditResponseSettingsBlockPage).pipe( T.Body("block_page"), ), ), bodyScanning: S.optional( S.NullOr(GatewayConfigurationsEditResponseSettingsBodyScanning).pipe( T.Body("body_scanning"), ), ), browserIsolation: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsBrowserIsolation).pipe( T.Body("browser_isolation"), ), ), certificate: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsCertificate), ), customCertificate: S.optional( S.NullOr( GatewayConfigurationsGetResponseSettingsCustomCertificate, ).pipe(T.Body("custom_certificate")), ), extendedEmailMatching: S.optional( S.NullOr( GatewayConfigurationsGetResponseSettingsExtendedEmailMatching, ).pipe(T.Body("extended_email_matching")), ), fips: S.optional(S.NullOr(GatewayConfigurationsGetResponseSettingsFips)), hostSelector: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsHostSelector).pipe( T.Body("host_selector"), ), ), inspection: S.optional( S.NullOr(GatewayConfigurationsEditResponseSettingsInspection), ), maxTtlSecs: S.optional(S.NullOr(S.Number).pipe(T.Body("max_ttl_secs"))), protocolDetection: S.optional( S.NullOr( GatewayConfigurationsGetResponseSettingsProtocolDetection, ).pipe(T.Body("protocol_detection")), ), sandbox: S.optional( S.NullOr(GatewayConfigurationsEditResponseSettingsSandbox), ), tlsDecrypt: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsTlsDecrypt).pipe( T.Body("tls_decrypt"), ), ), }), ).annotate({ identifier: "GatewayConfigurationsEditResponseSettings", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchGatewayConfigurationResponse { createdAt?: string | null; /** Specify account settings. */ settings?: GatewayConfigurationsEditResponseSettings | null; updatedAt?: string | null; } export const PatchGatewayConfigurationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), settings: S.optional(S.NullOr(GatewayConfigurationsEditResponseSettings)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchGatewayConfigurationResponse", }) as any as S.Schema; export type GatewayListsEditRequestAppendItem = GatewayListsCreateRequestItemsItem; export const GatewayListsEditRequestAppendItem = GatewayListsCreateRequestItemsItem; export type GatewayListsEditRequestAppendList = Array; export const GatewayListsEditRequestAppendList = /*@__PURE__*/ S.Array( GatewayListsCreateRequestItemsItem, ) as any as S.Schema; export type GatewayListsEditRequestRemoveList = Array; export const GatewayListsEditRequestRemoveList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface PatchGatewayListRequest { accountId: string; /** Identify the API resource with a UUID. */ listId: string; /** Add items to the list. */ append?: GatewayListsEditRequestAppendList; /** Lists of item values you want to remove. */ remove?: GatewayListsEditRequestRemoveList; } export const PatchGatewayListRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), listId: S.String.pipe(T.Label("list_id")), append: S.optional(GatewayListsEditRequestAppendList), remove: S.optional(GatewayListsEditRequestRemoveList), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/gateway/lists/{list_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchGatewayListRequest", }) as any as S.Schema; export type GatewayListsEditResponseItemsItem = GatewayListsCreateResponseItemsItem; export const GatewayListsEditResponseItemsItem = GatewayListsCreateResponseItemsItem; export type GatewayListsEditResponseItemsList = Array; export const GatewayListsEditResponseItemsList = /*@__PURE__*/ S.Array( GatewayListsCreateResponseItemsItem, ) as any as S.Schema; export type GatewayListsEditResponseType = | "SERIAL" | "URL" | "DOMAIN" | "EMAIL" | "IP" | "CATEGORY" | "LOCATION" | "DEVICE" | "AAGUID"; export const GatewayListsEditResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchGatewayListResponse { /** Identify the API resource with a UUID. */ id?: string | null; /** Indicate the number of items in the list. */ count?: number | null; createdAt?: string | null; /** Provide the list description. */ description?: string | null; /** Provide the list items. */ items?: GatewayListsEditResponseItemsList | null; /** Specify the list name. */ name?: string | null; /** Specify the list type. */ type?: GatewayListsEditResponseType | null; updatedAt?: string | null; } export const PatchGatewayListResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), count: S.optional(S.NullOr(S.Number)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), description: S.optional(S.NullOr(S.String)), items: S.optional(S.NullOr(GatewayListsEditResponseItemsList)), name: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(GatewayListsEditResponseType)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchGatewayListResponse", }) as any as S.Schema; export type GatewayProxyEndpointsEditRequestIpsList = Array; export const GatewayProxyEndpointsEditRequestIpsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface PatchGatewayProxyEndpointRequest { accountId: string; proxyEndpointId: string; /** Specify the list of CIDRs to restrict ingress connections. */ ips?: GatewayProxyEndpointsEditRequestIpsList; /** Specify the name of the proxy endpoint. */ name?: string; } export const PatchGatewayProxyEndpointRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), proxyEndpointId: S.String.pipe(T.Label("proxy_endpoint_id")), ips: S.optional(GatewayProxyEndpointsEditRequestIpsList), name: S.optional(S.String), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/gateway/proxy_endpoints/{proxy_endpoint_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchGatewayProxyEndpointRequest", }) as any as S.Schema; export type GatewayProxyEndpointsEditResultIPIpsList = Array; export const GatewayProxyEndpointsEditResultIPIpsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayProxyEndpointsEditResultIPKind = "ip"; export const GatewayProxyEndpointsEditResultIPKind = /*@__PURE__*/ S.String; export interface GatewayProxyEndpointsEditResultIP { /** Specify the list of CIDRs to restrict ingress connections. */ ips?: GatewayProxyEndpointsEditResultIPIpsList | null; /** Specify the name of the proxy endpoint. */ name: string; id?: string | null; createdAt?: string | null; /** The proxy endpoint kind */ kind?: GatewayProxyEndpointsEditResultIPKind | null; /** Specify the subdomain to use as the destination in the proxy client. */ subdomain?: string | null; updatedAt?: string | null; } export const GatewayProxyEndpointsEditResultIP = /*@__PURE__*/ S.suspend(() => S.Struct({ ips: S.optional(S.NullOr(GatewayProxyEndpointsEditResultIPIpsList)), name: S.String, id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), kind: S.optional(S.NullOr(GatewayProxyEndpointsEditResultIPKind)), subdomain: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "GatewayProxyEndpointsEditResultIP", }) as any as S.Schema; export type GatewayProxyEndpointsEditResultIdentityKind = "identity"; export const GatewayProxyEndpointsEditResultIdentityKind = /*@__PURE__*/ S.String; export interface GatewayProxyEndpointsEditResultIdentity { /** The proxy endpoint kind */ kind: GatewayProxyEndpointsEditResultIdentityKind; /** Specify the name of the proxy endpoint. */ name: string; id?: string | null; createdAt?: string | null; /** Specify the subdomain to use as the destination in the proxy client. */ subdomain?: string | null; updatedAt?: string | null; } export const GatewayProxyEndpointsEditResultIdentity = /*@__PURE__*/ S.suspend( () => S.Struct({ kind: GatewayProxyEndpointsEditResultIdentityKind, name: S.String, id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), subdomain: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "GatewayProxyEndpointsEditResultIdentity", }) as any as S.Schema; export type GatewayProxyEndpointsEditResult = | GatewayProxyEndpointsEditResultIP | GatewayProxyEndpointsEditResultIdentity; export const GatewayProxyEndpointsEditResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["ips", "name", "id", "createdAt", "kind", "subdomain", "updatedAt"], ["kind", "name", "id", "createdAt", "subdomain", "updatedAt"], ]), ); export type PatchGatewayProxyEndpointResponse = GatewayProxyEndpointsEditResult; export const PatchGatewayProxyEndpointResponse = /*@__PURE__*/ S.suspend(() => GatewayProxyEndpointsEditResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "PatchGatewayProxyEndpointResponse", }) as any as S.Schema; export interface PatchNetworkHostnameRouteRequest { /** Cloudflare account ID */ accountId: string; /** The hostname route ID. */ hostnameRouteId: string; /** An optional description of the hostname route. */ comment?: string; /** The hostname of the route. */ hostname?: string; /** UUID of the tunnel. */ tunnelId?: string; } export const PatchNetworkHostnameRouteRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), hostnameRouteId: S.String.pipe(T.Label("hostname_route_id")), comment: S.optional(S.String), hostname: S.optional(S.String), tunnelId: S.optional(S.String.pipe(T.Body("tunnel_id"))), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/zerotrust/routes/hostname/{hostname_route_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchNetworkHostnameRouteRequest", }) as any as S.Schema; export type NetworksHostnameRoutesEditResponseTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const NetworksHostnameRoutesEditResponseTunType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchNetworkHostnameRouteResponse { /** The hostname route ID. */ id?: string | null; /** An optional description of the hostname route. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** The hostname of the route. */ hostname?: string | null; /** The type of tunnel. */ tunType?: NetworksHostnameRoutesEditResponseTunType | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** A user-friendly name for a tunnel. */ tunnelName?: string | null; } export const PatchNetworkHostnameRouteResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), hostname: S.optional(S.NullOr(S.String)), tunType: S.optional( S.NullOr(NetworksHostnameRoutesEditResponseTunType).pipe( T.Body("tun_type"), ), ), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), tunnelName: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_name"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchNetworkHostnameRouteResponse", }) as any as S.Schema; export interface PatchNetworkRouteRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the route. */ routeId: string; /** Optional remark describing the route. */ comment?: string; /** The private IPv4 or IPv6 range connected by the route, in CIDR notation. */ network?: string; /** UUID of the tunnel. */ tunnelId?: string; /** UUID of the virtual network. */ virtualNetworkId?: string; } export const PatchNetworkRouteRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), routeId: S.String.pipe(T.Label("route_id")), comment: S.optional(S.String), network: S.optional(S.String), tunnelId: S.optional(S.String.pipe(T.Body("tunnel_id"))), virtualNetworkId: S.optional(S.String.pipe(T.Body("virtual_network_id"))), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/teamnet/routes/{route_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchNetworkRouteRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchNetworkRouteResponse { /** UUID of the route. */ id?: string | null; /** Optional remark describing the route. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** The private IPv4 or IPv6 range connected by the route, in CIDR notation. */ network?: string | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** UUID of the virtual network. */ virtualNetworkId?: string | null; } export const PatchNetworkRouteResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), network: S.optional(S.NullOr(S.String)), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), virtualNetworkId: S.optional( S.NullOr(S.String).pipe(T.Body("virtual_network_id")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchNetworkRouteResponse", }) as any as S.Schema; export interface PatchNetworkRouteNetworkRequest { /** Cloudflare account ID */ accountId: string; /** IP/CIDR range in URL-encoded format */ ipNetworkEncoded: string; } export const PatchNetworkRouteNetworkRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ipNetworkEncoded: S.String.pipe(T.Label("ip_network_encoded")), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/teamnet/routes/network/{ip_network_encoded}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchNetworkRouteNetworkRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchNetworkRouteNetworkResponse { /** UUID of the route. */ id?: string | null; /** Optional remark describing the route. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** The private IPv4 or IPv6 range connected by the route, in CIDR notation. */ network?: string | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** UUID of the virtual network. */ virtualNetworkId?: string | null; } export const PatchNetworkRouteNetworkResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), network: S.optional(S.NullOr(S.String)), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), virtualNetworkId: S.optional( S.NullOr(S.String).pipe(T.Body("virtual_network_id")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchNetworkRouteNetworkResponse", }) as any as S.Schema; export type NetworksSubnetsCloudflareSourceUpdateRequestAddressFamily = | "v4" | "v6"; export const NetworksSubnetsCloudflareSourceUpdateRequestAddressFamily = /*@__PURE__*/ S.String; export interface PatchNetworkSubnetCloudflareSourceRequest { /** Cloudflare account ID */ accountId: string; /** IP address family, either `v4` (IPv4) or `v6` (IPv6) */ addressFamily: | NetworksSubnetsCloudflareSourceUpdateRequestAddressFamily | (string & {}); /** An optional description of the subnet. */ comment?: string; /** A user-friendly name for the subnet. */ name?: string; /** The private IPv4 or IPv6 range defining the subnet, in CIDR notation. */ network?: string; } export const PatchNetworkSubnetCloudflareSourceRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), addressFamily: NetworksSubnetsCloudflareSourceUpdateRequestAddressFamily.pipe( T.Label("address_family"), ), comment: S.optional(S.String), name: S.optional(S.String), network: S.optional(S.String), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/zerotrust/subnets/cloudflare_source/{address_family}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchNetworkSubnetCloudflareSourceRequest", }) as any as S.Schema; export type NetworksSubnetsCloudflareSourceUpdateResponseSubnetType = | "cloudflare_source" | "warp"; export const NetworksSubnetsCloudflareSourceUpdateResponseSubnetType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchNetworkSubnetCloudflareSourceResponse { /** The UUID of the subnet. */ id?: string | null; /** An optional description of the subnet. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** If `true`, this is the default subnet for the account. There can only be one default subnet per account. */ isDefaultNetwork?: boolean | null; /** A user-friendly name for the subnet. */ name?: string | null; /** The private IPv4 or IPv6 range defining the subnet, in CIDR notation. */ network?: string | null; /** The type of subnet. */ subnetType?: NetworksSubnetsCloudflareSourceUpdateResponseSubnetType | null; } export const PatchNetworkSubnetCloudflareSourceResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), isDefaultNetwork: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_default_network")), ), name: S.optional(S.NullOr(S.String)), network: S.optional(S.NullOr(S.String)), subnetType: S.optional( S.NullOr(NetworksSubnetsCloudflareSourceUpdateResponseSubnetType).pipe( T.Body("subnet_type"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchNetworkSubnetCloudflareSourceResponse", }) as any as S.Schema; export interface PatchNetworkSubnetWarpRequest { /** Cloudflare account ID */ accountId: string; /** The UUID of the subnet. */ subnetId: string; /** An optional description of the subnet. */ comment?: string; /** If `true`, this is the default subnet for the account. There can only be one default subnet per account. */ isDefaultNetwork?: boolean; /** A user-friendly name for the subnet. */ name?: string; /** The private IPv4 or IPv6 range defining the subnet, in CIDR notation. */ network?: string; } export const PatchNetworkSubnetWarpRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), subnetId: S.String.pipe(T.Label("subnet_id")), comment: S.optional(S.String), isDefaultNetwork: S.optional(S.Boolean.pipe(T.Body("is_default_network"))), name: S.optional(S.String), network: S.optional(S.String), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/zerotrust/subnets/warp/{subnet_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchNetworkSubnetWarpRequest", }) as any as S.Schema; export type NetworksSubnetsWarpEditResponseSubnetType = | "cloudflare_source" | "warp"; export const NetworksSubnetsWarpEditResponseSubnetType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchNetworkSubnetWarpResponse { /** The UUID of the subnet. */ id?: string | null; /** An optional description of the subnet. */ comment?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** If `true`, this is the default subnet for the account. There can only be one default subnet per account. */ isDefaultNetwork?: boolean | null; /** A user-friendly name for the subnet. */ name?: string | null; /** The private IPv4 or IPv6 range defining the subnet, in CIDR notation. */ network?: string | null; /** The type of subnet. */ subnetType?: NetworksSubnetsWarpEditResponseSubnetType | null; } export const PatchNetworkSubnetWarpResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), comment: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), isDefaultNetwork: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_default_network")), ), name: S.optional(S.NullOr(S.String)), network: S.optional(S.NullOr(S.String)), subnetType: S.optional( S.NullOr(NetworksSubnetsWarpEditResponseSubnetType).pipe( T.Body("subnet_type"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchNetworkSubnetWarpResponse", }) as any as S.Schema; export interface PatchNetworkVirtualNetworkRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the virtual network. */ virtualNetworkId: string; /** Optional remark describing the virtual network. */ comment?: string; /** If `true`, this virtual network is the default for the account. */ isDefaultNetwork?: boolean; /** A user-friendly name for the virtual network. */ name?: string; } export const PatchNetworkVirtualNetworkRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), virtualNetworkId: S.String.pipe(T.Label("virtual_network_id")), comment: S.optional(S.String), isDefaultNetwork: S.optional(S.Boolean.pipe(T.Body("is_default_network"))), name: S.optional(S.String), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/teamnet/virtual_networks/{virtual_network_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchNetworkVirtualNetworkRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchNetworkVirtualNetworkResponse { /** UUID of the virtual network. */ id: string; /** Optional remark describing the virtual network. */ comment: string; /** Timestamp of when the resource was created. */ createdAt: string; /** If `true`, this virtual network is the default for the account. */ isDefaultNetwork: boolean; /** A user-friendly name for the virtual network. */ name: string; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; } export const PatchNetworkVirtualNetworkResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, comment: S.String, createdAt: S.String.pipe(T.Body("created_at")), isDefaultNetwork: S.Boolean.pipe(T.Body("is_default_network")), name: S.String, deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchNetworkVirtualNetworkResponse", }) as any as S.Schema; export interface SeatsEditRequestBodyItem { /** True if the seat is part of Access. */ accessSeat: boolean; /** True if the seat is part of Gateway. */ gatewaySeat: boolean; /** The unique API identifier for the Zero Trust seat. */ seatUid: string; } export const SeatsEditRequestBodyItem = /*@__PURE__*/ S.suspend(() => S.Struct({ accessSeat: S.Boolean.pipe(T.Body("access_seat")), gatewaySeat: S.Boolean.pipe(T.Body("gateway_seat")), seatUid: S.String.pipe(T.Body("seat_uid")), }), ).annotate({ identifier: "SeatsEditRequestBodyItem", }) as any as S.Schema; export type SeatsEditRequestBodyList = Array; export const SeatsEditRequestBodyList = /*@__PURE__*/ S.Array( SeatsEditRequestBodyItem, ) as any as S.Schema; export interface PatchSeatRequest { /** Identifier. */ accountId: string; body: SeatsEditRequestBodyList; } export const PatchSeatRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), body: SeatsEditRequestBodyList.pipe(T.HttpBody()), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/access/seats", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchSeatRequest", }) as any as S.Schema; export interface SeatsEditResultItem { /** True if the seat is part of Access. */ accessSeat?: boolean | null; createdAt?: string | null; /** True if the seat is part of Gateway. */ gatewaySeat?: boolean | null; /** The unique API identifier for the Zero Trust seat. */ seatUid?: string | null; updatedAt?: string | null; } export const SeatsEditResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ accessSeat: S.optional(S.NullOr(S.Boolean).pipe(T.Body("access_seat"))), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), gatewaySeat: S.optional(S.NullOr(S.Boolean).pipe(T.Body("gateway_seat"))), seatUid: S.optional(S.NullOr(S.String).pipe(T.Body("seat_uid"))), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "SeatsEditResultItem", }) as any as S.Schema; export type SeatsEditResultList = Array; export const SeatsEditResultList = /*@__PURE__*/ S.Array( SeatsEditResultItem, ) as any as S.Schema; export interface PatchSeatResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: SeatsEditResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const PatchSeatResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: SeatsEditResultList.pipe(T.EnvelopePayload()), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchSeatResponse", }) as any as S.Schema; export interface PatchTunnelCloudflaredRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; /** A user-friendly name for a tunnel. */ name?: string; /** Sets the password required to run a locally-managed tunnel. Must be at least 32 bytes and encoded as a base64 string. */ tunnelSecret?: string; } export const PatchTunnelCloudflaredRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), name: S.optional(S.String), tunnelSecret: S.optional(S.String.pipe(T.Body("tunnel_secret"))), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/cfd_tunnel/{tunnel_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchTunnelCloudflaredRequest", }) as any as S.Schema; export type TunnelsCloudflaredEditResponseConfigSrc = "local" | "cloudflare"; export const TunnelsCloudflaredEditResponseConfigSrc = /*@__PURE__*/ S.String; export type TunnelsCloudflaredEditResponseConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export const TunnelsCloudflaredEditResponseConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export type TunnelsCloudflaredEditResponseConnectionsList = Array; export const TunnelsCloudflaredEditResponseConnectionsList = /*@__PURE__*/ S.Array( TunnelsCloudflaredCreateResponseConnectionsItem, ) as any as S.Schema; export type TunnelsCloudflaredEditResponseStatus = | "inactive" | "degraded" | "healthy" | "down"; export const TunnelsCloudflaredEditResponseStatus = /*@__PURE__*/ S.String; export type TunnelsCloudflaredEditResponseTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const TunnelsCloudflaredEditResponseTunType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchTunnelCloudflaredResponse { /** UUID of the tunnel. */ id?: string | null; /** Cloudflare account ID */ accountTag?: string | null; /** Indicates if this is a locally or remotely configured tunnel. If `local`, manage the tunnel using a YAML file on the origin machine. If `cloudflare`, manage the tunnel on the Zero Trust dashboard. */ configSrc?: TunnelsCloudflaredEditResponseConfigSrc | null; /** The Cloudflare Tunnel connections between your origin and Cloudflare's edge. */ connections?: TunnelsCloudflaredEditResponseConnectionsList | null; /** Timestamp of when the tunnel established at least one connection to Cloudflare's edge. If `null`, the tunnel is inactive. */ connsActiveAt?: string | null; /** Timestamp of when the tunnel became inactive (no connections to Cloudflare's edge). If `null`, the tunnel is active. */ connsInactiveAt?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** Metadata associated with the tunnel. */ metadata?: unknown | null; /** A user-friendly name for a tunnel. */ name?: string | null; /** If `true`, the tunnel can be configured remotely from the Zero Trust dashboard. If `false`, the tunnel must be configured locally on the origin machine. */ remoteConfig?: boolean | null; /** The status of the tunnel. Valid values are `inactive` (tunnel has never been run), `degraded` (tunnel is active and able to serve traffic but in an unhealthy state), `healthy` (tunnel is active and able to serve traffic), or `down` (tunnel can not serve traffic as it has no connections to the Cloudflare Edge). */ status?: TunnelsCloudflaredEditResponseStatus | null; /** The type of tunnel. */ tunType?: TunnelsCloudflaredEditResponseTunType | null; } export const PatchTunnelCloudflaredResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), accountTag: S.optional(S.NullOr(S.String).pipe(T.Body("account_tag"))), configSrc: S.optional( S.NullOr(TunnelsCloudflaredEditResponseConfigSrc).pipe( T.Body("config_src"), ), ), connections: S.optional( S.NullOr(TunnelsCloudflaredEditResponseConnectionsList), ), connsActiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_active_at")), ), connsInactiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_inactive_at")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), metadata: S.optional(S.NullOr(S.Unknown)), name: S.optional(S.NullOr(S.String)), remoteConfig: S.optional(S.NullOr(S.Boolean).pipe(T.Body("remote_config"))), status: S.optional(S.NullOr(TunnelsCloudflaredEditResponseStatus)), tunType: S.optional( S.NullOr(TunnelsCloudflaredEditResponseTunType).pipe(T.Body("tun_type")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchTunnelCloudflaredResponse", }) as any as S.Schema; export interface PatchTunnelWarpConnectorRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; /** A user-friendly name for a tunnel. */ name?: string; /** Sets the password required to run a locally-managed tunnel. Must be at least 32 bytes and encoded as a base64 string. */ tunnelSecret?: string; } export const PatchTunnelWarpConnectorRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), name: S.optional(S.String), tunnelSecret: S.optional(S.String.pipe(T.Body("tunnel_secret"))), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/warp_connector/{tunnel_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchTunnelWarpConnectorRequest", }) as any as S.Schema; export type TunnelsWarpConnectorEditResponseConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export const TunnelsWarpConnectorEditResponseConnectionsItem = TunnelsCloudflaredCreateResponseConnectionsItem; export type TunnelsWarpConnectorEditResponseConnectionsList = Array; export const TunnelsWarpConnectorEditResponseConnectionsList = /*@__PURE__*/ S.Array( TunnelsCloudflaredCreateResponseConnectionsItem, ) as any as S.Schema; export type TunnelsWarpConnectorEditResponseStatus = | "inactive" | "degraded" | "healthy" | "down"; export const TunnelsWarpConnectorEditResponseStatus = /*@__PURE__*/ S.String; export type TunnelsWarpConnectorEditResponseTunType = | "cfd_tunnel" | "warp_connector" | "warp" | "magic" | "ip_sec" | "gre" | "cni"; export const TunnelsWarpConnectorEditResponseTunType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PatchTunnelWarpConnectorResponse { /** UUID of the tunnel. */ id: string; /** Cloudflare account ID */ accountTag?: string | null; /** The Cloudflare Tunnel connections between your origin and Cloudflare's edge. */ connections?: TunnelsWarpConnectorEditResponseConnectionsList | null; /** Timestamp of when the tunnel established at least one connection to Cloudflare's edge. If `null`, the tunnel is inactive. */ connsActiveAt?: string | null; /** Timestamp of when the tunnel became inactive (no connections to Cloudflare's edge). If `null`, the tunnel is active. */ connsInactiveAt?: string | null; /** Timestamp of when the resource was created. */ createdAt?: string | null; /** Timestamp of when the resource was deleted. If `null`, the resource has not been deleted. */ deletedAt?: string | null; /** Metadata associated with the tunnel. */ metadata?: unknown | null; /** A user-friendly name for a tunnel. */ name?: string | null; /** The status of the tunnel. Valid values are `inactive` (tunnel has never been run), `degraded` (tunnel is active and able to serve traffic but in an unhealthy state), `healthy` (tunnel is active and able to serve traffic), or `down` (tunnel can not serve traffic as it has no connections to the Cloudflare Edge). */ status?: TunnelsWarpConnectorEditResponseStatus | null; /** The type of tunnel. */ tunType?: TunnelsWarpConnectorEditResponseTunType | null; } export const PatchTunnelWarpConnectorResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, accountTag: S.optional(S.NullOr(S.String).pipe(T.Body("account_tag"))), connections: S.optional( S.NullOr(TunnelsWarpConnectorEditResponseConnectionsList), ), connsActiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_active_at")), ), connsInactiveAt: S.optional( S.NullOr(S.String).pipe(T.Body("conns_inactive_at")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), metadata: S.optional(S.NullOr(S.Unknown)), name: S.optional(S.NullOr(S.String)), status: S.optional(S.NullOr(TunnelsWarpConnectorEditResponseStatus)), tunType: S.optional( S.NullOr(TunnelsWarpConnectorEditResponseTunType).pipe( T.Body("tun_type"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PatchTunnelWarpConnectorResponse", }) as any as S.Schema; export interface PauseCasbIntegrationRequest { accountId: string; id: string; } export const PauseCasbIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String.pipe(T.Label()), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/one/integrations/{id}/pause", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PauseCasbIntegrationRequest", }) as any as S.Schema; export type PauseCasbIntegrationResponseApplicationMap = { [key: string]: string | undefined; }; export const PauseCasbIntegrationResponseApplicationMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export type PauseCasbIntegrationResponseAuthMethodMap = { [key: string]: string | undefined; }; export const PauseCasbIntegrationResponseAuthMethodMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export type PauseCasbIntegrationResponseAuthorizationLinkComponentsMap = { [key: string]: unknown | undefined; }; export const PauseCasbIntegrationResponseAuthorizationLinkComponentsMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export interface PauseCasbIntegrationResponseAuthorizationLink { components: PauseCasbIntegrationResponseAuthorizationLinkComponentsMap; link: string; } export const PauseCasbIntegrationResponseAuthorizationLink = /*@__PURE__*/ S.suspend(() => S.Struct({ components: PauseCasbIntegrationResponseAuthorizationLinkComponentsMap, link: S.String, }), ).annotate({ identifier: "PauseCasbIntegrationResponseAuthorizationLink", }) as any as S.Schema; export type PauseCasbIntegrationResponseDlpProfilesList = Array; export const PauseCasbIntegrationResponseDlpProfilesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type PauseCasbIntegrationResponseHealthDetailsItemMap = { [key: string]: unknown | undefined; }; export const PauseCasbIntegrationResponseHealthDetailsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type PauseCasbIntegrationResponseHealthDetailsList = Array; export const PauseCasbIntegrationResponseHealthDetailsList = /*@__PURE__*/ S.Array( PauseCasbIntegrationResponseHealthDetailsItemMap, ) as any as S.Schema; export type PauseCasbIntegrationResponseUseCasesItemMap = { [key: string]: unknown | undefined; }; export const PauseCasbIntegrationResponseUseCasesItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type PauseCasbIntegrationResponseUseCasesList = Array; export const PauseCasbIntegrationResponseUseCasesList = /*@__PURE__*/ S.Array( PauseCasbIntegrationResponseUseCasesItemMap, ) as any as S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface PauseCasbIntegrationResponse { /** Integration ID. */ id: string; application: PauseCasbIntegrationResponseApplicationMap; /** The integration's authentication method. */ authMethod: PauseCasbIntegrationResponseAuthMethodMap; /** Authorization link for the integration. */ authorizationLink: PauseCasbIntegrationResponseAuthorizationLink; /** When the integration was created. */ created: string; /** Credentials expiry time. */ credentialsExpiry: string; /** DLP Profiles enabled for the integration. */ dlpProfiles: PauseCasbIntegrationResponseDlpProfilesList; /** Health details with remediation hints. */ healthDetails: PauseCasbIntegrationResponseHealthDetailsList; /** Whether the user paused the integration. */ isPaused: boolean; /** Last time the integration was hydrated. */ lastHydrated: string; /** Name of the integration. */ name: string; /** Organization ID. */ organizationId: number; /** Integration status. */ status: string; /** When the integration was last updated. */ updated: string; /** Use cases enabled for the integration. */ useCases: PauseCasbIntegrationResponseUseCasesList; } export const PauseCasbIntegrationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, application: PauseCasbIntegrationResponseApplicationMap, authMethod: PauseCasbIntegrationResponseAuthMethodMap.pipe( T.Body("auth_method"), ), authorizationLink: PauseCasbIntegrationResponseAuthorizationLink.pipe( T.Body("authorization_link"), ), created: S.String, credentialsExpiry: S.String.pipe(T.Body("credentials_expiry")), dlpProfiles: PauseCasbIntegrationResponseDlpProfilesList.pipe( T.Body("dlp_profiles"), ), healthDetails: PauseCasbIntegrationResponseHealthDetailsList.pipe( T.Body("health_details"), ), isPaused: S.Boolean.pipe(T.Body("is_paused")), lastHydrated: S.String.pipe(T.Body("last_hydrated")), name: S.String, organizationId: S.Number.pipe(T.Body("organization_id")), status: S.String, updated: S.String, useCases: PauseCasbIntegrationResponseUseCasesList.pipe( T.Body("use_cases"), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PauseCasbIntegrationResponse", }) as any as S.Schema; export interface PutAccessApplicationSettingForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** Identifier. */ appId: string; /** Enables loading application content in an iFrame. */ allowIframe?: boolean; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean; } export const PutAccessApplicationSettingForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), appId: S.String.pipe(T.Label("app_id")), allowIframe: S.optional(S.Boolean.pipe(T.Body("allow_iframe"))), skipInterstitial: S.optional(S.Boolean.pipe(T.Body("skip_interstitial"))), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/apps/{app_id}/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutAccessApplicationSettingForAccountRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PutAccessApplicationSettingResponse { /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; } export const PutAccessApplicationSettingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutAccessApplicationSettingResponse", }) as any as S.Schema; export interface PutAccessApplicationSettingForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** Identifier. */ appId: string; /** Enables loading application content in an iFrame. */ allowIframe?: boolean; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean; } export const PutAccessApplicationSettingForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), appId: S.String.pipe(T.Label("app_id")), allowIframe: S.optional(S.Boolean.pipe(T.Body("allow_iframe"))), skipInterstitial: S.optional(S.Boolean.pipe(T.Body("skip_interstitial"))), }) .pipe( T.Http({ method: "PUT", uri: "/zones/{zone_id}/access/apps/{app_id}/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutAccessApplicationSettingForZoneRequest", }) as any as S.Schema; export type AccessCertificatesSettingsUpdateRequestSettingsItem = AccessCertificatesSettingsGetResultItem; export const AccessCertificatesSettingsUpdateRequestSettingsItem = AccessCertificatesSettingsGetResultItem; export type AccessCertificatesSettingsUpdateRequestSettingsList = Array; export const AccessCertificatesSettingsUpdateRequestSettingsList = /*@__PURE__*/ S.Array( AccessCertificatesSettingsGetResultItem, ) as any as S.Schema; export interface PutAccessCertificateSettingForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; settings: AccessCertificatesSettingsUpdateRequestSettingsList; } export const PutAccessCertificateSettingForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), settings: AccessCertificatesSettingsUpdateRequestSettingsList, }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/certificates/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutAccessCertificateSettingForAccountRequest", }) as any as S.Schema; export type AccessCertificatesSettingsUpdateResultItem = AccessCertificatesSettingsGetResultItem; export const AccessCertificatesSettingsUpdateResultItem = AccessCertificatesSettingsGetResultItem; export type AccessCertificatesSettingsUpdateResultList = Array; export const AccessCertificatesSettingsUpdateResultList = /*@__PURE__*/ S.Array( AccessCertificatesSettingsGetResultItem, ) as any as S.Schema; export interface PutAccessCertificateSettingResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: AccessCertificatesSettingsUpdateResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const PutAccessCertificateSettingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: AccessCertificatesSettingsUpdateResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutAccessCertificateSettingResponse", }) as any as S.Schema; export interface PutAccessCertificateSettingForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; settings: AccessCertificatesSettingsUpdateRequestSettingsList; } export const PutAccessCertificateSettingForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), settings: AccessCertificatesSettingsUpdateRequestSettingsList, }) .pipe( T.Http({ method: "PUT", uri: "/zones/{zone_id}/access/certificates/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutAccessCertificateSettingForZoneRequest", }) as any as S.Schema; export interface PutAccessKeyRequest { /** Identifier. */ accountId: string; /** The number of days between key rotations. */ keyRotationIntervalDays: number; } export const PutAccessKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), keyRotationIntervalDays: S.Number.pipe( T.Body("key_rotation_interval_days"), ), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/keys", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutAccessKeyRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PutAccessKeyResponse { /** The number of days until the next key rotation. */ daysUntilNextRotation?: number | null; /** The number of days between key rotations. */ keyRotationIntervalDays?: number | null; /** The timestamp of the previous key rotation. */ lastKeyRotationAt?: string | null; } export const PutAccessKeyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ daysUntilNextRotation: S.optional( S.NullOr(S.Number).pipe(T.Body("days_until_next_rotation")), ), keyRotationIntervalDays: S.optional( S.NullOr(S.Number).pipe(T.Body("key_rotation_interval_days")), ), lastKeyRotationAt: S.optional( S.NullOr(S.String).pipe(T.Body("last_key_rotation_at")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutAccessKeyResponse", }) as any as S.Schema; export type DevicesPoliciesCustomExcludesUpdateRequestBodyItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export const DevicesPoliciesCustomExcludesUpdateRequestBodyItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export type DevicesPoliciesCustomExcludesUpdateRequestBodyItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomExcludesUpdateRequestBodyItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export type DevicesPoliciesCustomExcludesUpdateRequestBodyItem = | DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomExcludesUpdateRequestBodyItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomExcludesUpdateRequestBodyList = Array; export const DevicesPoliciesCustomExcludesUpdateRequestBodyList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomExcludesUpdateRequestBodyItem, ) as any as S.Schema; export interface PutDevicePolicyCustomExcludeRequest { accountId: string; policyId: string; body: DevicesPoliciesCustomExcludesUpdateRequestBodyList; } export const PutDevicePolicyCustomExcludeRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), policyId: S.String.pipe(T.Label("policy_id")), body: DevicesPoliciesCustomExcludesUpdateRequestBodyList.pipe(T.HttpBody()), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/devices/policy/{policy_id}/exclude", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDevicePolicyCustomExcludeRequest", }) as any as S.Schema; export type DevicesPoliciesCustomExcludesUpdateResultItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export const DevicesPoliciesCustomExcludesUpdateResultItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export type DevicesPoliciesCustomExcludesUpdateResultItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomExcludesUpdateResultItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export type DevicesPoliciesCustomExcludesUpdateResultItem = | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesCustomExcludesUpdateResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomExcludesUpdateResultList = Array; export const DevicesPoliciesCustomExcludesUpdateResultList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomExcludesUpdateResultItem, ) as any as S.Schema; export interface PutDevicePolicyCustomExcludeResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPoliciesCustomExcludesUpdateResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const PutDevicePolicyCustomExcludeResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: DevicesPoliciesCustomExcludesUpdateResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDevicePolicyCustomExcludeResponse", }) as any as S.Schema; export type DevicesPoliciesCustomFallbackDomainsUpdateRequestDomainsItemDnsServerList = Array; export const DevicesPoliciesCustomFallbackDomainsUpdateRequestDomainsItemDnsServerList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomFallbackDomainsUpdateRequestDomainsItem { /** The domain suffix to match when resolving locally. */ suffix: string; /** A description of the fallback domain, displayed in the client UI. */ description?: string; /** A list of IP addresses to handle domain resolution. */ dnsServer?: DevicesPoliciesCustomFallbackDomainsUpdateRequestDomainsItemDnsServerList; } export const DevicesPoliciesCustomFallbackDomainsUpdateRequestDomainsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ suffix: S.String, description: S.optional(S.String), dnsServer: S.optional( DevicesPoliciesCustomFallbackDomainsUpdateRequestDomainsItemDnsServerList.pipe( T.Body("dns_server"), ), ), }), ).annotate({ identifier: "DevicesPoliciesCustomFallbackDomainsUpdateRequestDomainsItem", }) as any as S.Schema; export type DevicesPoliciesCustomFallbackDomainsUpdateRequestDomainsList = Array; export const DevicesPoliciesCustomFallbackDomainsUpdateRequestDomainsList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomFallbackDomainsUpdateRequestDomainsItem, ) as any as S.Schema; export interface PutDevicePolicyCustomFallbackDomainRequest { accountId: string; policyId: string; domains: DevicesPoliciesCustomFallbackDomainsUpdateRequestDomainsList; } export const PutDevicePolicyCustomFallbackDomainRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), policyId: S.String.pipe(T.Label("policy_id")), domains: DevicesPoliciesCustomFallbackDomainsUpdateRequestDomainsList, }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/devices/policy/{policy_id}/fallback_domains", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDevicePolicyCustomFallbackDomainRequest", }) as any as S.Schema; export type DevicesPoliciesCustomFallbackDomainsUpdateResultItemDnsServerList = Array; export const DevicesPoliciesCustomFallbackDomainsUpdateResultItemDnsServerList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesCustomFallbackDomainsUpdateResultItem { /** The domain suffix to match when resolving locally. */ suffix: string; /** A description of the fallback domain, displayed in the client UI. */ description?: string | null; /** A list of IP addresses to handle domain resolution. */ dnsServer?: DevicesPoliciesCustomFallbackDomainsUpdateResultItemDnsServerList | null; } export const DevicesPoliciesCustomFallbackDomainsUpdateResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ suffix: S.String, description: S.optional(S.NullOr(S.String)), dnsServer: S.optional( S.NullOr( DevicesPoliciesCustomFallbackDomainsUpdateResultItemDnsServerList, ).pipe(T.Body("dns_server")), ), }), ).annotate({ identifier: "DevicesPoliciesCustomFallbackDomainsUpdateResultItem", }) as any as S.Schema; export type DevicesPoliciesCustomFallbackDomainsUpdateResultList = Array; export const DevicesPoliciesCustomFallbackDomainsUpdateResultList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomFallbackDomainsUpdateResultItem, ) as any as S.Schema; export interface PutDevicePolicyCustomFallbackDomainResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPoliciesCustomFallbackDomainsUpdateResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const PutDevicePolicyCustomFallbackDomainResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesPoliciesCustomFallbackDomainsUpdateResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDevicePolicyCustomFallbackDomainResponse", }) as any as S.Schema; export type DevicesPoliciesCustomIncludesUpdateRequestBodyItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export const DevicesPoliciesCustomIncludesUpdateRequestBodyItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export type DevicesPoliciesCustomIncludesUpdateRequestBodyItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomIncludesUpdateRequestBodyItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export type DevicesPoliciesCustomIncludesUpdateRequestBodyItem = | DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomIncludesUpdateRequestBodyItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomIncludesUpdateRequestBodyList = Array; export const DevicesPoliciesCustomIncludesUpdateRequestBodyList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomIncludesUpdateRequestBodyItem, ) as any as S.Schema; export interface PutDevicePolicyCustomIncludeRequest { accountId: string; policyId: string; body: DevicesPoliciesCustomIncludesUpdateRequestBodyList; } export const PutDevicePolicyCustomIncludeRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), policyId: S.String.pipe(T.Label("policy_id")), body: DevicesPoliciesCustomIncludesUpdateRequestBodyList.pipe(T.HttpBody()), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/devices/policy/{policy_id}/include", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDevicePolicyCustomIncludeRequest", }) as any as S.Schema; export type DevicesPoliciesCustomIncludesUpdateResultItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export const DevicesPoliciesCustomIncludesUpdateResultItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export type DevicesPoliciesCustomIncludesUpdateResultItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomIncludesUpdateResultItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export type DevicesPoliciesCustomIncludesUpdateResultItem = | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesCustomIncludesUpdateResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesCustomIncludesUpdateResultList = Array; export const DevicesPoliciesCustomIncludesUpdateResultList = /*@__PURE__*/ S.Array( DevicesPoliciesCustomIncludesUpdateResultItem, ) as any as S.Schema; export interface PutDevicePolicyCustomIncludeResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPoliciesCustomIncludesUpdateResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const PutDevicePolicyCustomIncludeResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: DevicesPoliciesCustomIncludesUpdateResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDevicePolicyCustomIncludeResponse", }) as any as S.Schema; export type DevicesPoliciesDefaultExcludesUpdateRequestBodyItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export const DevicesPoliciesDefaultExcludesUpdateRequestBodyItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export type DevicesPoliciesDefaultExcludesUpdateRequestBodyItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesDefaultExcludesUpdateRequestBodyItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export type DevicesPoliciesDefaultExcludesUpdateRequestBodyItem = | DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateRequestExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesDefaultExcludesUpdateRequestBodyItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesDefaultExcludesUpdateRequestBodyList = Array; export const DevicesPoliciesDefaultExcludesUpdateRequestBodyList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultExcludesUpdateRequestBodyItem, ) as any as S.Schema; export interface PutDevicePolicyDefaultExcludeRequest { accountId: string; body: DevicesPoliciesDefaultExcludesUpdateRequestBodyList; } export const PutDevicePolicyDefaultExcludeRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), body: DevicesPoliciesDefaultExcludesUpdateRequestBodyList.pipe( T.HttpBody(), ), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/devices/policy/exclude", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDevicePolicyDefaultExcludeRequest", }) as any as S.Schema; export type DevicesPoliciesDefaultExcludesUpdateResultItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export const DevicesPoliciesDefaultExcludesUpdateResultItemTeamsDevicesExcludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress; export type DevicesPoliciesDefaultExcludesUpdateResultItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesDefaultExcludesUpdateResultItemTeamsDevicesExcludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export type DevicesPoliciesDefaultExcludesUpdateResultItem = | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseExcludeItemTeamsDevicesExcludeSplitTunnelWithHost; export const DevicesPoliciesDefaultExcludesUpdateResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesDefaultExcludesUpdateResultList = Array; export const DevicesPoliciesDefaultExcludesUpdateResultList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultExcludesUpdateResultItem, ) as any as S.Schema; export interface PutDevicePolicyDefaultExcludeResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPoliciesDefaultExcludesUpdateResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const PutDevicePolicyDefaultExcludeResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: DevicesPoliciesDefaultExcludesUpdateResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDevicePolicyDefaultExcludeResponse", }) as any as S.Schema; export type DevicesPoliciesDefaultFallbackDomainsUpdateRequestDomainsItemDnsServerList = Array; export const DevicesPoliciesDefaultFallbackDomainsUpdateRequestDomainsItemDnsServerList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesDefaultFallbackDomainsUpdateRequestDomainsItem { /** The domain suffix to match when resolving locally. */ suffix: string; /** A description of the fallback domain, displayed in the client UI. */ description?: string; /** A list of IP addresses to handle domain resolution. */ dnsServer?: DevicesPoliciesDefaultFallbackDomainsUpdateRequestDomainsItemDnsServerList; } export const DevicesPoliciesDefaultFallbackDomainsUpdateRequestDomainsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ suffix: S.String, description: S.optional(S.String), dnsServer: S.optional( DevicesPoliciesDefaultFallbackDomainsUpdateRequestDomainsItemDnsServerList.pipe( T.Body("dns_server"), ), ), }), ).annotate({ identifier: "DevicesPoliciesDefaultFallbackDomainsUpdateRequestDomainsItem", }) as any as S.Schema; export type DevicesPoliciesDefaultFallbackDomainsUpdateRequestDomainsList = Array; export const DevicesPoliciesDefaultFallbackDomainsUpdateRequestDomainsList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultFallbackDomainsUpdateRequestDomainsItem, ) as any as S.Schema; export interface PutDevicePolicyDefaultFallbackDomainRequest { accountId: string; domains: DevicesPoliciesDefaultFallbackDomainsUpdateRequestDomainsList; } export const PutDevicePolicyDefaultFallbackDomainRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), domains: DevicesPoliciesDefaultFallbackDomainsUpdateRequestDomainsList, }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/devices/policy/fallback_domains", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDevicePolicyDefaultFallbackDomainRequest", }) as any as S.Schema; export type DevicesPoliciesDefaultFallbackDomainsUpdateResultItemDnsServerList = Array; export const DevicesPoliciesDefaultFallbackDomainsUpdateResultItemDnsServerList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPoliciesDefaultFallbackDomainsUpdateResultItem { /** The domain suffix to match when resolving locally. */ suffix: string; /** A description of the fallback domain, displayed in the client UI. */ description?: string | null; /** A list of IP addresses to handle domain resolution. */ dnsServer?: DevicesPoliciesDefaultFallbackDomainsUpdateResultItemDnsServerList | null; } export const DevicesPoliciesDefaultFallbackDomainsUpdateResultItem = /*@__PURE__*/ S.suspend(() => S.Struct({ suffix: S.String, description: S.optional(S.NullOr(S.String)), dnsServer: S.optional( S.NullOr( DevicesPoliciesDefaultFallbackDomainsUpdateResultItemDnsServerList, ).pipe(T.Body("dns_server")), ), }), ).annotate({ identifier: "DevicesPoliciesDefaultFallbackDomainsUpdateResultItem", }) as any as S.Schema; export type DevicesPoliciesDefaultFallbackDomainsUpdateResultList = Array; export const DevicesPoliciesDefaultFallbackDomainsUpdateResultList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultFallbackDomainsUpdateResultItem, ) as any as S.Schema; export interface PutDevicePolicyDefaultFallbackDomainResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPoliciesDefaultFallbackDomainsUpdateResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const PutDevicePolicyDefaultFallbackDomainResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ result: DevicesPoliciesDefaultFallbackDomainsUpdateResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDevicePolicyDefaultFallbackDomainResponse", }) as any as S.Schema; export type DevicesPoliciesDefaultIncludesUpdateRequestBodyItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export const DevicesPoliciesDefaultIncludesUpdateRequestBodyItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export type DevicesPoliciesDefaultIncludesUpdateRequestBodyItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesDefaultIncludesUpdateRequestBodyItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export type DevicesPoliciesDefaultIncludesUpdateRequestBodyItem = | DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateRequestIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesDefaultIncludesUpdateRequestBodyItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesDefaultIncludesUpdateRequestBodyList = Array; export const DevicesPoliciesDefaultIncludesUpdateRequestBodyList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultIncludesUpdateRequestBodyItem, ) as any as S.Schema; export interface PutDevicePolicyDefaultIncludeRequest { accountId: string; body: DevicesPoliciesDefaultIncludesUpdateRequestBodyList; } export const PutDevicePolicyDefaultIncludeRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), body: DevicesPoliciesDefaultIncludesUpdateRequestBodyList.pipe( T.HttpBody(), ), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/devices/policy/include", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDevicePolicyDefaultIncludeRequest", }) as any as S.Schema; export type DevicesPoliciesDefaultIncludesUpdateResultItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export const DevicesPoliciesDefaultIncludesUpdateResultItemTeamsDevicesIncludeSplitTunnelWithAddress = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress; export type DevicesPoliciesDefaultIncludesUpdateResultItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesDefaultIncludesUpdateResultItemTeamsDevicesIncludeSplitTunnelWithHost = DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export type DevicesPoliciesDefaultIncludesUpdateResultItem = | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithAddress | DevicesPoliciesCustomCreateResponseIncludeItemTeamsDevicesIncludeSplitTunnelWithHost; export const DevicesPoliciesDefaultIncludesUpdateResultItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["address", "description"], ["host", "description"], ]), ); export type DevicesPoliciesDefaultIncludesUpdateResultList = Array; export const DevicesPoliciesDefaultIncludesUpdateResultList = /*@__PURE__*/ S.Array( DevicesPoliciesDefaultIncludesUpdateResultItem, ) as any as S.Schema; export interface PutDevicePolicyDefaultIncludeResponse { /** The unwrapped `result` payload of the v4 response envelope. */ result: DevicesPoliciesDefaultIncludesUpdateResultList; /** Pagination info from the envelope's `result_info`. */ resultInfo?: ResultInfo | null; } export const PutDevicePolicyDefaultIncludeResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ result: DevicesPoliciesDefaultIncludesUpdateResultList.pipe( T.EnvelopePayload(), ), resultInfo: S.optional(S.NullOr(ResultInfo).pipe(T.ResultInfo())), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDevicePolicyDefaultIncludeResponse", }) as any as S.Schema; export interface PutDeviceSettingRequest { accountId: string; /** Sets the time limit, in seconds, that a user can use an override code to bypass WARP. */ disableForTime?: number; /** Controls whether the external emergency disconnect feature is enabled. */ externalEmergencySignalEnabled?: boolean; /** The SHA256 fingerprint (64 hexadecimal characters) of the HTTPS server certificate for the external_emergency_signal_url. If provided, the WARP client will use this value to verify the server's identity. The device will ignore any response if the server's certificate fingerprint does not exactly match this value. */ externalEmergencySignalFingerprint?: string; /** The interval at which the WARP client fetches the emergency disconnect signal, formatted as a duration string (e.g., "5m", "2m30s", "1h"). Minimum 30 seconds. */ externalEmergencySignalInterval?: string; /** The HTTPS URL from which to fetch the emergency disconnect signal. Must use HTTPS and have an IPv4 or IPv6 address as the host. */ externalEmergencySignalUrl?: string; /** Enable gateway proxy filtering on TCP. */ gatewayProxyEnabled?: boolean; /** Enable gateway proxy filtering on UDP. */ gatewayUdpProxyEnabled?: boolean; /** Enable installation of cloudflare managed root certificate. */ rootCertificateInstallationEnabled?: boolean; /** Enable using CGNAT virtual IPv4. */ useZtVirtualIp?: boolean; } export const PutDeviceSettingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), disableForTime: S.optional(S.Number.pipe(T.Body("disable_for_time"))), externalEmergencySignalEnabled: S.optional( S.Boolean.pipe(T.Body("external_emergency_signal_enabled")), ), externalEmergencySignalFingerprint: S.optional( S.String.pipe(T.Body("external_emergency_signal_fingerprint")), ), externalEmergencySignalInterval: S.optional( S.String.pipe(T.Body("external_emergency_signal_interval")), ), externalEmergencySignalUrl: S.optional( S.String.pipe(T.Body("external_emergency_signal_url")), ), gatewayProxyEnabled: S.optional( S.Boolean.pipe(T.Body("gateway_proxy_enabled")), ), gatewayUdpProxyEnabled: S.optional( S.Boolean.pipe(T.Body("gateway_udp_proxy_enabled")), ), rootCertificateInstallationEnabled: S.optional( S.Boolean.pipe(T.Body("root_certificate_installation_enabled")), ), useZtVirtualIp: S.optional(S.Boolean.pipe(T.Body("use_zt_virtual_ip"))), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/devices/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDeviceSettingRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PutDeviceSettingResponse { /** Sets the time limit, in seconds, that a user can use an override code to bypass WARP. */ disableForTime?: number | null; /** Controls whether the external emergency disconnect feature is enabled. */ externalEmergencySignalEnabled?: boolean | null; /** The SHA256 fingerprint (64 hexadecimal characters) of the HTTPS server certificate for the external_emergency_signal_url. If provided, the WARP client will use this value to verify the server's identity. The device will ignore any response if the server's certificate fingerprint does not exactly match this value. */ externalEmergencySignalFingerprint?: string | null; /** The interval at which the WARP client fetches the emergency disconnect signal, formatted as a duration string (e.g., "5m", "2m30s", "1h"). Minimum 30 seconds. */ externalEmergencySignalInterval?: string | null; /** The HTTPS URL from which to fetch the emergency disconnect signal. Must use HTTPS and have an IPv4 or IPv6 address as the host. */ externalEmergencySignalUrl?: string | null; /** Enable gateway proxy filtering on TCP. */ gatewayProxyEnabled?: boolean | null; /** Enable gateway proxy filtering on UDP. */ gatewayUdpProxyEnabled?: boolean | null; /** Enable installation of cloudflare managed root certificate. */ rootCertificateInstallationEnabled?: boolean | null; /** Enable using CGNAT virtual IPv4. */ useZtVirtualIp?: boolean | null; } export const PutDeviceSettingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ disableForTime: S.optional( S.NullOr(S.Number).pipe(T.Body("disable_for_time")), ), externalEmergencySignalEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("external_emergency_signal_enabled")), ), externalEmergencySignalFingerprint: S.optional( S.NullOr(S.String).pipe(T.Body("external_emergency_signal_fingerprint")), ), externalEmergencySignalInterval: S.optional( S.NullOr(S.String).pipe(T.Body("external_emergency_signal_interval")), ), externalEmergencySignalUrl: S.optional( S.NullOr(S.String).pipe(T.Body("external_emergency_signal_url")), ), gatewayProxyEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("gateway_proxy_enabled")), ), gatewayUdpProxyEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("gateway_udp_proxy_enabled")), ), rootCertificateInstallationEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("root_certificate_installation_enabled")), ), useZtVirtualIp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("use_zt_virtual_ip")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDeviceSettingResponse", }) as any as S.Schema; export type DlpPayloadLogsUpdateRequestMaskingLevel = | "full" | "partial" | "clear" | "default"; export const DlpPayloadLogsUpdateRequestMaskingLevel = /*@__PURE__*/ S.String; export interface PutDlpPayloadLogRequest { accountId: string; /** Masking level for payload logs. */ maskingLevel?: DlpPayloadLogsUpdateRequestMaskingLevel | (string & {}); /** Base64-encoded public key for encrypting payload logs. */ publicKey?: string; } export const PutDlpPayloadLogRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), maskingLevel: S.optional( DlpPayloadLogsUpdateRequestMaskingLevel.pipe(T.Body("masking_level")), ), publicKey: S.optional(S.String.pipe(T.Body("public_key"))), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/payload_log", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDlpPayloadLogRequest", }) as any as S.Schema; export type DlpPayloadLogsUpdateResponseMaskingLevel = | "full" | "partial" | "clear" | "default"; export const DlpPayloadLogsUpdateResponseMaskingLevel = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PutDlpPayloadLogResponse { updatedAt: string; /** Masking level for payload logs. */ maskingLevel?: DlpPayloadLogsUpdateResponseMaskingLevel | null; /** Base64-encoded public key for encrypting payload logs. Null when payload logging is disabled. */ publicKey?: string | null; } export const PutDlpPayloadLogResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ updatedAt: S.String.pipe(T.Body("updated_at")), maskingLevel: S.optional( S.NullOr(DlpPayloadLogsUpdateResponseMaskingLevel).pipe( T.Body("masking_level"), ), ), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDlpPayloadLogResponse", }) as any as S.Schema; export type DlpProfilesPredefinedUpdateRequestEnabledEntriesList = Array; export const DlpProfilesPredefinedUpdateRequestEnabledEntriesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DlpProfilesPredefinedUpdateRequestEntriesItem { id: string; enabled: boolean; } export const DlpProfilesPredefinedUpdateRequestEntriesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, enabled: S.Boolean, }), ).annotate({ identifier: "DlpProfilesPredefinedUpdateRequestEntriesItem", }) as any as S.Schema; export type DlpProfilesPredefinedUpdateRequestEntriesList = Array; export const DlpProfilesPredefinedUpdateRequestEntriesList = /*@__PURE__*/ S.Array( DlpProfilesPredefinedUpdateRequestEntriesItem, ) as any as S.Schema; export interface PutDlpProfilePredefinedRequest { accountId: string; profileId: string; aiContextEnabled?: boolean; allowedMatchCount?: number; confidenceThreshold?: string; enabledEntries?: DlpProfilesPredefinedUpdateRequestEnabledEntriesList; entries?: DlpProfilesPredefinedUpdateRequestEntriesList; ocrEnabled?: boolean; } export const PutDlpProfilePredefinedRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), profileId: S.String.pipe(T.Label("profile_id")), aiContextEnabled: S.optional(S.Boolean.pipe(T.Body("ai_context_enabled"))), allowedMatchCount: S.optional(S.Number.pipe(T.Body("allowed_match_count"))), confidenceThreshold: S.optional( S.String.pipe(T.Body("confidence_threshold")), ), enabledEntries: S.optional( DlpProfilesPredefinedUpdateRequestEnabledEntriesList.pipe( T.Body("enabled_entries"), ), ), entries: S.optional(DlpProfilesPredefinedUpdateRequestEntriesList), ocrEnabled: S.optional(S.Boolean.pipe(T.Body("ocr_enabled"))), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/profiles/predefined/{profile_id}/config", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDlpProfilePredefinedRequest", }) as any as S.Schema; export type DlpProfilesPredefinedUpdateResponseEnabledEntriesList = Array; export const DlpProfilesPredefinedUpdateResponseEnabledEntriesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntryPatternValidation = "luhn"; export const DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntryPatternValidation = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntryPattern { regex: string; validation?: DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntryPatternValidation | null; } export const DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntryPattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( S.NullOr( DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntryPatternValidation, ), ), }), ).annotate({ identifier: "DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntryPattern", }) as any as S.Schema; export type DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntryType = "custom"; export const DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntryPattern; type: DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntryPattern, type: DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesPredefinedUpdateResponseEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesPredefinedUpdateResponseEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedUpdateResponseEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesPredefinedUpdateResponseEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesPredefinedUpdateResponseEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesPredefinedUpdateResponseEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesPredefinedUpdateResponseEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariant = | DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase0 | DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesPredefinedUpdateResponseEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesPredefinedUpdateResponseEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedUpdateResponseEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesPredefinedUpdateResponseEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesPredefinedUpdateResponseEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesPredefinedUpdateResponseEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesPredefinedUpdateResponseEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesPredefinedUpdateResponseEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesPredefinedUpdateResponseEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedUpdateResponseEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesPredefinedUpdateResponseEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesPredefinedUpdateResponseEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesPredefinedUpdateResponseEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesPredefinedUpdateResponseEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesPredefinedUpdateResponseEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesPredefinedUpdateResponseEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedUpdateResponseEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesPredefinedUpdateResponseEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesPredefinedUpdateResponseEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesPredefinedUpdateResponseEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesPredefinedUpdateResponseEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesPredefinedUpdateResponseEntriesItemWordListEntryType = "word_list"; export const DlpProfilesPredefinedUpdateResponseEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesPredefinedUpdateResponseEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesPredefinedUpdateResponseEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesPredefinedUpdateResponseEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesPredefinedUpdateResponseEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesPredefinedUpdateResponseEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesPredefinedUpdateResponseEntriesItem = | DlpProfilesPredefinedUpdateResponseEntriesItemCustomEntry | DlpProfilesPredefinedUpdateResponseEntriesItemCustomPromptTopicEntry | DlpProfilesPredefinedUpdateResponseEntriesItemPredefinedEntry | DlpProfilesPredefinedUpdateResponseEntriesItemIntegrationEntry | DlpProfilesPredefinedUpdateResponseEntriesItemExactDataEntry | DlpProfilesPredefinedUpdateResponseEntriesItemDocumentFingerprintEntry | DlpProfilesPredefinedUpdateResponseEntriesItemWordListEntry; export const DlpProfilesPredefinedUpdateResponseEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesPredefinedUpdateResponseEntriesList = Array; export const DlpProfilesPredefinedUpdateResponseEntriesList = /*@__PURE__*/ S.Array( DlpProfilesPredefinedUpdateResponseEntriesItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PutDlpProfilePredefinedResponse { /** The id of the predefined profile (uuid). */ id: string; allowedMatchCount: number; confidenceThreshold: string; /** Entries to enable for this predefined profile. Any entries not provided will be disabled. */ enabledEntries: DlpProfilesPredefinedUpdateResponseEnabledEntriesList; /** This field has been deprecated for `enabled_entries`. */ entries: DlpProfilesPredefinedUpdateResponseEntriesList; /** The name of the predefined profile. */ name: string; aiContextEnabled?: boolean | null; ocrEnabled?: boolean | null; /** Whether this profile can be accessed by anyone. */ openAccess?: boolean | null; } export const PutDlpProfilePredefinedResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, allowedMatchCount: S.Number.pipe(T.Body("allowed_match_count")), confidenceThreshold: S.String.pipe(T.Body("confidence_threshold")), enabledEntries: DlpProfilesPredefinedUpdateResponseEnabledEntriesList.pipe( T.Body("enabled_entries"), ), entries: DlpProfilesPredefinedUpdateResponseEntriesList, name: S.String, aiContextEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ai_context_enabled")), ), ocrEnabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("ocr_enabled"))), openAccess: S.optional(S.NullOr(S.Boolean).pipe(T.Body("open_access"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDlpProfilePredefinedResponse", }) as any as S.Schema; export type DlpSensitivityGroupsLevelsOrderUpdateRequestLevelIdsList = Array; export const DlpSensitivityGroupsLevelsOrderUpdateRequestLevelIdsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface PutDlpSensitivityGroupLevelOrderRequest { accountId: string; sensitivityGroupId: string; levelIds: DlpSensitivityGroupsLevelsOrderUpdateRequestLevelIdsList; } export const PutDlpSensitivityGroupLevelOrderRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), sensitivityGroupId: S.String.pipe(T.Label("sensitivity_group_id")), levelIds: DlpSensitivityGroupsLevelsOrderUpdateRequestLevelIdsList.pipe( T.Body("level_ids"), ), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}/level_order", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDlpSensitivityGroupLevelOrderRequest", }) as any as S.Schema; export type DlpSensitivityGroupsLevelsOrderUpdateResponseLevelIdsList = Array; export const DlpSensitivityGroupsLevelsOrderUpdateResponseLevelIdsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PutDlpSensitivityGroupLevelOrderResponse { levelIds: DlpSensitivityGroupsLevelsOrderUpdateResponseLevelIdsList; } export const PutDlpSensitivityGroupLevelOrderResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ levelIds: DlpSensitivityGroupsLevelsOrderUpdateResponseLevelIdsList.pipe( T.Body("level_ids"), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDlpSensitivityGroupLevelOrderResponse", }) as any as S.Schema; export type DlpSettingsUpdateRequestPayloadLoggingMaskingLevel = | "full" | "partial" | "clear" | "default"; export const DlpSettingsUpdateRequestPayloadLoggingMaskingLevel = /*@__PURE__*/ S.String; export interface DlpSettingsUpdateRequestPayloadLogging { /** Masking level for payload logs. */ maskingLevel?: | DlpSettingsUpdateRequestPayloadLoggingMaskingLevel | (string & {}); /** Base64-encoded public key for encrypting payload logs. */ publicKey?: string; } export const DlpSettingsUpdateRequestPayloadLogging = /*@__PURE__*/ S.suspend( () => S.Struct({ maskingLevel: S.optional( DlpSettingsUpdateRequestPayloadLoggingMaskingLevel.pipe( T.Body("masking_level"), ), ), publicKey: S.optional(S.String.pipe(T.Body("public_key"))), }), ).annotate({ identifier: "DlpSettingsUpdateRequestPayloadLogging", }) as any as S.Schema; export interface PutDlpSettingRequest { accountId: string; /** Whether AI context analysis is enabled at the account level. */ aiContextAnalysis?: boolean; /** Whether OCR is enabled at the account level. */ ocr?: boolean; /** Request model for payload log settings within the DLP settings endpoint. */ payloadLogging?: DlpSettingsUpdateRequestPayloadLogging; } export const PutDlpSettingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), aiContextAnalysis: S.optional( S.Boolean.pipe(T.Body("ai_context_analysis")), ), ocr: S.optional(S.Boolean), payloadLogging: S.optional( DlpSettingsUpdateRequestPayloadLogging.pipe(T.Body("payload_logging")), ), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDlpSettingRequest", }) as any as S.Schema; export type DlpSettingsUpdateResponsePayloadLoggingMaskingLevel = | "full" | "partial" | "clear" | "default"; export const DlpSettingsUpdateResponsePayloadLoggingMaskingLevel = /*@__PURE__*/ S.String; export interface DlpSettingsUpdateResponsePayloadLogging { updatedAt: string; /** Masking level for payload logs. */ maskingLevel?: DlpSettingsUpdateResponsePayloadLoggingMaskingLevel | null; /** Base64-encoded public key for encrypting payload logs. Null when payload logging is disabled. */ publicKey?: string | null; } export const DlpSettingsUpdateResponsePayloadLogging = /*@__PURE__*/ S.suspend( () => S.Struct({ updatedAt: S.String.pipe(T.Body("updated_at")), maskingLevel: S.optional( S.NullOr(DlpSettingsUpdateResponsePayloadLoggingMaskingLevel).pipe( T.Body("masking_level"), ), ), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), }), ).annotate({ identifier: "DlpSettingsUpdateResponsePayloadLogging", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PutDlpSettingResponse { /** Whether AI context analysis is enabled at the account level. */ aiContextAnalysis: boolean; /** Whether OCR is enabled at the account level. */ ocr: boolean; payloadLogging: DlpSettingsUpdateResponsePayloadLogging; } export const PutDlpSettingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ aiContextAnalysis: S.Boolean.pipe(T.Body("ai_context_analysis")), ocr: S.Boolean, payloadLogging: DlpSettingsUpdateResponsePayloadLogging.pipe( T.Body("payload_logging"), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutDlpSettingResponse", }) as any as S.Schema; export interface PutGatewayAuditSshSettingRequest { accountId: string; /** Provide the Base64-encoded HPKE public key that encrypts SSH session logs. See https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/#enable-ssh-command-logging. */ publicKey: string; } export const PutGatewayAuditSshSettingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), publicKey: S.String.pipe(T.Body("public_key")), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/gateway/audit_ssh_settings", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutGatewayAuditSshSettingRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PutGatewayAuditSshSettingResponse { createdAt?: string | null; /** Provide the Base64-encoded HPKE public key that encrypts SSH session logs. See https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/#enable-ssh-command-logging. */ publicKey?: string | null; /** Identify the seed ID. */ seedId?: string | null; updatedAt?: string | null; } export const PutGatewayAuditSshSettingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), seedId: S.optional(S.NullOr(S.String).pipe(T.Body("seed_id"))), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutGatewayAuditSshSettingResponse", }) as any as S.Schema; export type GatewayConfigurationsUpdateRequestSettingsActivityLog = GatewayConfigurationsEditRequestSettingsActivityLog; export const GatewayConfigurationsUpdateRequestSettingsActivityLog = GatewayConfigurationsEditRequestSettingsActivityLog; export type GatewayConfigurationsUpdateRequestSettingsAntivirusNotificationSettings = GatewayConfigurationsEditRequestSettingsAntivirusNotificationSettings; export const GatewayConfigurationsUpdateRequestSettingsAntivirusNotificationSettings = GatewayConfigurationsEditRequestSettingsAntivirusNotificationSettings; export type GatewayConfigurationsUpdateRequestSettingsAntivirus = GatewayConfigurationsEditRequestSettingsAntivirus; export const GatewayConfigurationsUpdateRequestSettingsAntivirus = GatewayConfigurationsEditRequestSettingsAntivirus; export type GatewayConfigurationsUpdateRequestSettingsBlockPageMode = | "" | "customized_block_page" | "redirect_uri"; export const GatewayConfigurationsUpdateRequestSettingsBlockPageMode = /*@__PURE__*/ S.String; export interface GatewayConfigurationsUpdateRequestSettingsBlockPage { /** Specify the block page background color in `#rrggbb` format when the mode is customized_block_page. */ backgroundColor?: string; /** Specify whether to enable the custom block page. */ enabled?: boolean; /** Specify the block page footer text when the mode is customized_block_page. */ footerText?: string; /** Specify the block page header text when the mode is customized_block_page. */ headerText?: string; /** Specify whether to append context to target_uri as query parameters. This applies only when the mode is redirect_uri. */ includeContext?: boolean; /** Specify the full URL to the logo file when the mode is customized_block_page. */ logoPath?: string; /** Specify the admin email for users to contact when the mode is customized_block_page. */ mailtoAddress?: string; /** Specify the subject line for emails created from the block page when the mode is customized_block_page. */ mailtoSubject?: string; /** Specify whether to redirect users to a Cloudflare-hosted block page or a customer-provided URI. */ mode?: | GatewayConfigurationsUpdateRequestSettingsBlockPageMode | (string & {}); /** Specify the block page title when the mode is customized_block_page. */ name?: string; /** Indicate that this setting was shared via the Orgs API and read only for the current account. */ readOnly?: boolean; /** Indicate the account tag of the account that shared this setting. */ sourceAccount?: string; /** Specify whether to suppress detailed information at the bottom of the block page when the mode is customized_block_page. */ suppressFooter?: boolean; /** Specify the URI to redirect users to when the mode is redirect_uri. */ targetUri?: string; /** Indicate the version number of the setting. */ version?: number; } export const GatewayConfigurationsUpdateRequestSettingsBlockPage = /*@__PURE__*/ S.suspend(() => S.Struct({ backgroundColor: S.optional(S.String.pipe(T.Body("background_color"))), enabled: S.optional(S.Boolean), footerText: S.optional(S.String.pipe(T.Body("footer_text"))), headerText: S.optional(S.String.pipe(T.Body("header_text"))), includeContext: S.optional(S.Boolean.pipe(T.Body("include_context"))), logoPath: S.optional(S.String.pipe(T.Body("logo_path"))), mailtoAddress: S.optional(S.String.pipe(T.Body("mailto_address"))), mailtoSubject: S.optional(S.String.pipe(T.Body("mailto_subject"))), mode: S.optional(GatewayConfigurationsUpdateRequestSettingsBlockPageMode), name: S.optional(S.String), readOnly: S.optional(S.Boolean.pipe(T.Body("read_only"))), sourceAccount: S.optional(S.String.pipe(T.Body("source_account"))), suppressFooter: S.optional(S.Boolean.pipe(T.Body("suppress_footer"))), targetUri: S.optional(S.String.pipe(T.Body("target_uri"))), version: S.optional(S.Number), }), ).annotate({ identifier: "GatewayConfigurationsUpdateRequestSettingsBlockPage", }) as any as S.Schema; export type GatewayConfigurationsUpdateRequestSettingsBodyScanningInspectionMode = | "deep" | "shallow"; export const GatewayConfigurationsUpdateRequestSettingsBodyScanningInspectionMode = /*@__PURE__*/ S.String; export interface GatewayConfigurationsUpdateRequestSettingsBodyScanning { /** Specify the inspection mode as either `deep` or `shallow`. */ inspectionMode?: | GatewayConfigurationsUpdateRequestSettingsBodyScanningInspectionMode | (string & {}); } export const GatewayConfigurationsUpdateRequestSettingsBodyScanning = /*@__PURE__*/ S.suspend(() => S.Struct({ inspectionMode: S.optional( GatewayConfigurationsUpdateRequestSettingsBodyScanningInspectionMode.pipe( T.Body("inspection_mode"), ), ), }), ).annotate({ identifier: "GatewayConfigurationsUpdateRequestSettingsBodyScanning", }) as any as S.Schema; export type GatewayConfigurationsUpdateRequestSettingsBrowserIsolation = GatewayConfigurationsEditRequestSettingsBrowserIsolation; export const GatewayConfigurationsUpdateRequestSettingsBrowserIsolation = GatewayConfigurationsEditRequestSettingsBrowserIsolation; export type GatewayConfigurationsUpdateRequestSettingsCertificate = GatewayConfigurationsGetResponseSettingsCertificate; export const GatewayConfigurationsUpdateRequestSettingsCertificate = GatewayConfigurationsGetResponseSettingsCertificate; export type GatewayConfigurationsUpdateRequestSettingsCustomCertificate = GatewayConfigurationsEditRequestSettingsCustomCertificate; export const GatewayConfigurationsUpdateRequestSettingsCustomCertificate = GatewayConfigurationsEditRequestSettingsCustomCertificate; export type GatewayConfigurationsUpdateRequestSettingsExtendedEmailMatching = GatewayConfigurationsEditRequestSettingsExtendedEmailMatching; export const GatewayConfigurationsUpdateRequestSettingsExtendedEmailMatching = GatewayConfigurationsEditRequestSettingsExtendedEmailMatching; export type GatewayConfigurationsUpdateRequestSettingsFips = GatewayConfigurationsEditRequestSettingsFips; export const GatewayConfigurationsUpdateRequestSettingsFips = GatewayConfigurationsEditRequestSettingsFips; export type GatewayConfigurationsUpdateRequestSettingsHostSelector = GatewayConfigurationsEditRequestSettingsHostSelector; export const GatewayConfigurationsUpdateRequestSettingsHostSelector = GatewayConfigurationsEditRequestSettingsHostSelector; export type GatewayConfigurationsUpdateRequestSettingsInspectionMode = | "static" | "dynamic"; export const GatewayConfigurationsUpdateRequestSettingsInspectionMode = /*@__PURE__*/ S.String; export interface GatewayConfigurationsUpdateRequestSettingsInspection { /** Define the proxy inspection mode. 1. static: Gateway applies static inspection to HTTP on TCP(80). With TLS decryption on, Gateway inspects HTTPS traffic on TCP(443) and UDP(443). 2. dynamic: Gateway applies protocol detection to inspect HTTP and HTTPS traffic on any port. TLS decryption must remain on to inspect HTTPS traffic. */ mode?: | GatewayConfigurationsUpdateRequestSettingsInspectionMode | (string & {}); } export const GatewayConfigurationsUpdateRequestSettingsInspection = /*@__PURE__*/ S.suspend(() => S.Struct({ mode: S.optional( GatewayConfigurationsUpdateRequestSettingsInspectionMode, ), }), ).annotate({ identifier: "GatewayConfigurationsUpdateRequestSettingsInspection", }) as any as S.Schema; export type GatewayConfigurationsUpdateRequestSettingsProtocolDetection = GatewayConfigurationsEditRequestSettingsProtocolDetection; export const GatewayConfigurationsUpdateRequestSettingsProtocolDetection = GatewayConfigurationsEditRequestSettingsProtocolDetection; export type GatewayConfigurationsUpdateRequestSettingsSandboxFallbackAction = | "allow" | "block"; export const GatewayConfigurationsUpdateRequestSettingsSandboxFallbackAction = /*@__PURE__*/ S.String; export interface GatewayConfigurationsUpdateRequestSettingsSandbox { /** Specify whether to enable the sandbox. */ enabled?: boolean; /** Specify the action to take when the system cannot scan the file. */ fallbackAction?: | GatewayConfigurationsUpdateRequestSettingsSandboxFallbackAction | (string & {}); } export const GatewayConfigurationsUpdateRequestSettingsSandbox = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), fallbackAction: S.optional( GatewayConfigurationsUpdateRequestSettingsSandboxFallbackAction.pipe( T.Body("fallback_action"), ), ), }), ).annotate({ identifier: "GatewayConfigurationsUpdateRequestSettingsSandbox", }) as any as S.Schema; export type GatewayConfigurationsUpdateRequestSettingsTlsDecrypt = GatewayConfigurationsEditRequestSettingsTlsDecrypt; export const GatewayConfigurationsUpdateRequestSettingsTlsDecrypt = GatewayConfigurationsEditRequestSettingsTlsDecrypt; export interface GatewayConfigurationsUpdateRequestSettings { /** Specify activity log settings. */ activityLog?: GatewayConfigurationsEditRequestSettingsActivityLog; /** Specify anti-virus settings. */ antivirus?: GatewayConfigurationsEditRequestSettingsAntivirus; /** Specify block page layout settings. */ blockPage?: GatewayConfigurationsUpdateRequestSettingsBlockPage; /** Specify the DLP inspection mode. */ bodyScanning?: GatewayConfigurationsUpdateRequestSettingsBodyScanning; /** Specify Clientless Browser Isolation settings. */ browserIsolation?: GatewayConfigurationsEditRequestSettingsBrowserIsolation; /** Specify certificate settings for Gateway TLS interception. If unset, the Cloudflare Root CA handles interception. */ certificate?: GatewayConfigurationsGetResponseSettingsCertificate; /** Specify custom certificate settings for BYO-PKI. This field is deprecated; use `certificate` instead. */ customCertificate?: GatewayConfigurationsEditRequestSettingsCustomCertificate; /** Configures user email settings for firewall policies. When you enable this, the system standardizes email addresses in the identity portion of the rule to match extended email variants in firewall policies. When you disable this setting, the system matches email addresses exactly as you provide them. Enable this setting if your email uses `.` or `+` modifiers. */ extendedEmailMatching?: GatewayConfigurationsEditRequestSettingsExtendedEmailMatching; /** Specify FIPS settings. */ fips?: GatewayConfigurationsEditRequestSettingsFips; /** Enable host selection in egress policies. */ hostSelector?: GatewayConfigurationsEditRequestSettingsHostSelector; /** Define the proxy inspection mode. */ inspection?: GatewayConfigurationsUpdateRequestSettingsInspection; /** Account-level cap on DNS response TTLs, in seconds. Gateway rewrites DNS responses so returned record TTLs do not exceed this value. Null means no cap. Each DNS location can inherit, override, or disable it through the location `max_ttl` setting. */ maxTtlSecs?: number; /** Specify whether to detect protocols from the initial bytes of client traffic. */ protocolDetection?: GatewayConfigurationsEditRequestSettingsProtocolDetection; /** Specify whether to enable the sandbox. */ sandbox?: GatewayConfigurationsUpdateRequestSettingsSandbox; /** Specify whether to inspect encrypted HTTP traffic. */ tlsDecrypt?: GatewayConfigurationsEditRequestSettingsTlsDecrypt; } export const GatewayConfigurationsUpdateRequestSettings = /*@__PURE__*/ S.suspend(() => S.Struct({ activityLog: S.optional( GatewayConfigurationsEditRequestSettingsActivityLog.pipe( T.Body("activity_log"), ), ), antivirus: S.optional(GatewayConfigurationsEditRequestSettingsAntivirus), blockPage: S.optional( GatewayConfigurationsUpdateRequestSettingsBlockPage.pipe( T.Body("block_page"), ), ), bodyScanning: S.optional( GatewayConfigurationsUpdateRequestSettingsBodyScanning.pipe( T.Body("body_scanning"), ), ), browserIsolation: S.optional( GatewayConfigurationsEditRequestSettingsBrowserIsolation.pipe( T.Body("browser_isolation"), ), ), certificate: S.optional( GatewayConfigurationsGetResponseSettingsCertificate, ), customCertificate: S.optional( GatewayConfigurationsEditRequestSettingsCustomCertificate.pipe( T.Body("custom_certificate"), ), ), extendedEmailMatching: S.optional( GatewayConfigurationsEditRequestSettingsExtendedEmailMatching.pipe( T.Body("extended_email_matching"), ), ), fips: S.optional(GatewayConfigurationsEditRequestSettingsFips), hostSelector: S.optional( GatewayConfigurationsEditRequestSettingsHostSelector.pipe( T.Body("host_selector"), ), ), inspection: S.optional( GatewayConfigurationsUpdateRequestSettingsInspection, ), maxTtlSecs: S.optional(S.Number.pipe(T.Body("max_ttl_secs"))), protocolDetection: S.optional( GatewayConfigurationsEditRequestSettingsProtocolDetection.pipe( T.Body("protocol_detection"), ), ), sandbox: S.optional(GatewayConfigurationsUpdateRequestSettingsSandbox), tlsDecrypt: S.optional( GatewayConfigurationsEditRequestSettingsTlsDecrypt.pipe( T.Body("tls_decrypt"), ), ), }), ).annotate({ identifier: "GatewayConfigurationsUpdateRequestSettings", }) as any as S.Schema; export interface PutGatewayConfigurationRequest { accountId: string; /** Specify account settings. */ settings?: GatewayConfigurationsUpdateRequestSettings; } export const PutGatewayConfigurationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), settings: S.optional(GatewayConfigurationsUpdateRequestSettings), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/gateway/configuration", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutGatewayConfigurationRequest", }) as any as S.Schema; export type GatewayConfigurationsUpdateResponseSettingsActivityLog = GatewayConfigurationsGetResponseSettingsActivityLog; export const GatewayConfigurationsUpdateResponseSettingsActivityLog = GatewayConfigurationsGetResponseSettingsActivityLog; export type GatewayConfigurationsUpdateResponseSettingsAntivirusNotificationSettings = GatewayConfigurationsGetResponseSettingsAntivirusNotificationSettings; export const GatewayConfigurationsUpdateResponseSettingsAntivirusNotificationSettings = GatewayConfigurationsGetResponseSettingsAntivirusNotificationSettings; export type GatewayConfigurationsUpdateResponseSettingsAntivirus = GatewayConfigurationsGetResponseSettingsAntivirus; export const GatewayConfigurationsUpdateResponseSettingsAntivirus = GatewayConfigurationsGetResponseSettingsAntivirus; export type GatewayConfigurationsUpdateResponseSettingsBlockPageMode = | "" | "customized_block_page" | "redirect_uri"; export const GatewayConfigurationsUpdateResponseSettingsBlockPageMode = /*@__PURE__*/ S.String; export interface GatewayConfigurationsUpdateResponseSettingsBlockPage { /** Specify the block page background color in `#rrggbb` format when the mode is customized_block_page. */ backgroundColor?: string | null; /** Specify whether to enable the custom block page. */ enabled?: boolean | null; /** Specify the block page footer text when the mode is customized_block_page. */ footerText?: string | null; /** Specify the block page header text when the mode is customized_block_page. */ headerText?: string | null; /** Specify whether to append context to target_uri as query parameters. This applies only when the mode is redirect_uri. */ includeContext?: boolean | null; /** Specify the full URL to the logo file when the mode is customized_block_page. */ logoPath?: string | null; /** Specify the admin email for users to contact when the mode is customized_block_page. */ mailtoAddress?: string | null; /** Specify the subject line for emails created from the block page when the mode is customized_block_page. */ mailtoSubject?: string | null; /** Specify whether to redirect users to a Cloudflare-hosted block page or a customer-provided URI. */ mode?: GatewayConfigurationsUpdateResponseSettingsBlockPageMode | null; /** Specify the block page title when the mode is customized_block_page. */ name?: string | null; /** Indicate that this setting was shared via the Orgs API and read only for the current account. */ readOnly?: boolean | null; /** Indicate the account tag of the account that shared this setting. */ sourceAccount?: string | null; /** Specify whether to suppress detailed information at the bottom of the block page when the mode is customized_block_page. */ suppressFooter?: boolean | null; /** Specify the URI to redirect users to when the mode is redirect_uri. */ targetUri?: string | null; /** Indicate the version number of the setting. */ version?: number | null; } export const GatewayConfigurationsUpdateResponseSettingsBlockPage = /*@__PURE__*/ S.suspend(() => S.Struct({ backgroundColor: S.optional( S.NullOr(S.String).pipe(T.Body("background_color")), ), enabled: S.optional(S.NullOr(S.Boolean)), footerText: S.optional(S.NullOr(S.String).pipe(T.Body("footer_text"))), headerText: S.optional(S.NullOr(S.String).pipe(T.Body("header_text"))), includeContext: S.optional( S.NullOr(S.Boolean).pipe(T.Body("include_context")), ), logoPath: S.optional(S.NullOr(S.String).pipe(T.Body("logo_path"))), mailtoAddress: S.optional( S.NullOr(S.String).pipe(T.Body("mailto_address")), ), mailtoSubject: S.optional( S.NullOr(S.String).pipe(T.Body("mailto_subject")), ), mode: S.optional( S.NullOr(GatewayConfigurationsUpdateResponseSettingsBlockPageMode), ), name: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), sourceAccount: S.optional( S.NullOr(S.String).pipe(T.Body("source_account")), ), suppressFooter: S.optional( S.NullOr(S.Boolean).pipe(T.Body("suppress_footer")), ), targetUri: S.optional(S.NullOr(S.String).pipe(T.Body("target_uri"))), version: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "GatewayConfigurationsUpdateResponseSettingsBlockPage", }) as any as S.Schema; export type GatewayConfigurationsUpdateResponseSettingsBodyScanningInspectionMode = | "deep" | "shallow"; export const GatewayConfigurationsUpdateResponseSettingsBodyScanningInspectionMode = /*@__PURE__*/ S.String; export interface GatewayConfigurationsUpdateResponseSettingsBodyScanning { /** Specify the inspection mode as either `deep` or `shallow`. */ inspectionMode?: GatewayConfigurationsUpdateResponseSettingsBodyScanningInspectionMode | null; } export const GatewayConfigurationsUpdateResponseSettingsBodyScanning = /*@__PURE__*/ S.suspend(() => S.Struct({ inspectionMode: S.optional( S.NullOr( GatewayConfigurationsUpdateResponseSettingsBodyScanningInspectionMode, ).pipe(T.Body("inspection_mode")), ), }), ).annotate({ identifier: "GatewayConfigurationsUpdateResponseSettingsBodyScanning", }) as any as S.Schema; export type GatewayConfigurationsUpdateResponseSettingsBrowserIsolation = GatewayConfigurationsGetResponseSettingsBrowserIsolation; export const GatewayConfigurationsUpdateResponseSettingsBrowserIsolation = GatewayConfigurationsGetResponseSettingsBrowserIsolation; export type GatewayConfigurationsUpdateResponseSettingsCertificate = GatewayConfigurationsGetResponseSettingsCertificate; export const GatewayConfigurationsUpdateResponseSettingsCertificate = GatewayConfigurationsGetResponseSettingsCertificate; export type GatewayConfigurationsUpdateResponseSettingsCustomCertificate = GatewayConfigurationsGetResponseSettingsCustomCertificate; export const GatewayConfigurationsUpdateResponseSettingsCustomCertificate = GatewayConfigurationsGetResponseSettingsCustomCertificate; export type GatewayConfigurationsUpdateResponseSettingsExtendedEmailMatching = GatewayConfigurationsGetResponseSettingsExtendedEmailMatching; export const GatewayConfigurationsUpdateResponseSettingsExtendedEmailMatching = GatewayConfigurationsGetResponseSettingsExtendedEmailMatching; export type GatewayConfigurationsUpdateResponseSettingsFips = GatewayConfigurationsGetResponseSettingsFips; export const GatewayConfigurationsUpdateResponseSettingsFips = GatewayConfigurationsGetResponseSettingsFips; export type GatewayConfigurationsUpdateResponseSettingsHostSelector = GatewayConfigurationsGetResponseSettingsHostSelector; export const GatewayConfigurationsUpdateResponseSettingsHostSelector = GatewayConfigurationsGetResponseSettingsHostSelector; export type GatewayConfigurationsUpdateResponseSettingsInspectionMode = | "static" | "dynamic"; export const GatewayConfigurationsUpdateResponseSettingsInspectionMode = /*@__PURE__*/ S.String; export interface GatewayConfigurationsUpdateResponseSettingsInspection { /** Define the proxy inspection mode. 1. static: Gateway applies static inspection to HTTP on TCP(80). With TLS decryption on, Gateway inspects HTTPS traffic on TCP(443) and UDP(443). 2. dynamic: Gateway applies protocol detection to inspect HTTP and HTTPS traffic on any port. TLS decryption must remain on to inspect HTTPS traffic. */ mode?: GatewayConfigurationsUpdateResponseSettingsInspectionMode | null; } export const GatewayConfigurationsUpdateResponseSettingsInspection = /*@__PURE__*/ S.suspend(() => S.Struct({ mode: S.optional( S.NullOr(GatewayConfigurationsUpdateResponseSettingsInspectionMode), ), }), ).annotate({ identifier: "GatewayConfigurationsUpdateResponseSettingsInspection", }) as any as S.Schema; export type GatewayConfigurationsUpdateResponseSettingsProtocolDetection = GatewayConfigurationsGetResponseSettingsProtocolDetection; export const GatewayConfigurationsUpdateResponseSettingsProtocolDetection = GatewayConfigurationsGetResponseSettingsProtocolDetection; export type GatewayConfigurationsUpdateResponseSettingsSandboxFallbackAction = | "allow" | "block"; export const GatewayConfigurationsUpdateResponseSettingsSandboxFallbackAction = /*@__PURE__*/ S.String; export interface GatewayConfigurationsUpdateResponseSettingsSandbox { /** Specify whether to enable the sandbox. */ enabled?: boolean | null; /** Specify the action to take when the system cannot scan the file. */ fallbackAction?: GatewayConfigurationsUpdateResponseSettingsSandboxFallbackAction | null; } export const GatewayConfigurationsUpdateResponseSettingsSandbox = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), fallbackAction: S.optional( S.NullOr( GatewayConfigurationsUpdateResponseSettingsSandboxFallbackAction, ).pipe(T.Body("fallback_action")), ), }), ).annotate({ identifier: "GatewayConfigurationsUpdateResponseSettingsSandbox", }) as any as S.Schema; export type GatewayConfigurationsUpdateResponseSettingsTlsDecrypt = GatewayConfigurationsGetResponseSettingsTlsDecrypt; export const GatewayConfigurationsUpdateResponseSettingsTlsDecrypt = GatewayConfigurationsGetResponseSettingsTlsDecrypt; export interface GatewayConfigurationsUpdateResponseSettings { /** Specify activity log settings. */ activityLog?: GatewayConfigurationsGetResponseSettingsActivityLog | null; /** Specify anti-virus settings. */ antivirus?: GatewayConfigurationsGetResponseSettingsAntivirus | null; /** Specify block page layout settings. */ blockPage?: GatewayConfigurationsUpdateResponseSettingsBlockPage | null; /** Specify the DLP inspection mode. */ bodyScanning?: GatewayConfigurationsUpdateResponseSettingsBodyScanning | null; /** Specify Clientless Browser Isolation settings. */ browserIsolation?: GatewayConfigurationsGetResponseSettingsBrowserIsolation | null; /** Specify certificate settings for Gateway TLS interception. If unset, the Cloudflare Root CA handles interception. */ certificate?: GatewayConfigurationsGetResponseSettingsCertificate | null; /** Specify custom certificate settings for BYO-PKI. This field is deprecated; use `certificate` instead. */ customCertificate?: GatewayConfigurationsGetResponseSettingsCustomCertificate | null; /** Configures user email settings for firewall policies. When you enable this, the system standardizes email addresses in the identity portion of the rule to match extended email variants in firewall policies. When you disable this setting, the system matches email addresses exactly as you provide them. Enable this setting if your email uses `.` or `+` modifiers. */ extendedEmailMatching?: GatewayConfigurationsGetResponseSettingsExtendedEmailMatching | null; /** Specify FIPS settings. */ fips?: GatewayConfigurationsGetResponseSettingsFips | null; /** Enable host selection in egress policies. */ hostSelector?: GatewayConfigurationsGetResponseSettingsHostSelector | null; /** Define the proxy inspection mode. */ inspection?: GatewayConfigurationsUpdateResponseSettingsInspection | null; /** Account-level cap on DNS response TTLs, in seconds. Gateway rewrites DNS responses so returned record TTLs do not exceed this value. Null means no cap. Each DNS location can inherit, override, or disable it through the location `max_ttl` setting. */ maxTtlSecs?: number | null; /** Specify whether to detect protocols from the initial bytes of client traffic. */ protocolDetection?: GatewayConfigurationsGetResponseSettingsProtocolDetection | null; /** Specify whether to enable the sandbox. */ sandbox?: GatewayConfigurationsUpdateResponseSettingsSandbox | null; /** Specify whether to inspect encrypted HTTP traffic. */ tlsDecrypt?: GatewayConfigurationsGetResponseSettingsTlsDecrypt | null; } export const GatewayConfigurationsUpdateResponseSettings = /*@__PURE__*/ S.suspend(() => S.Struct({ activityLog: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsActivityLog).pipe( T.Body("activity_log"), ), ), antivirus: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsAntivirus), ), blockPage: S.optional( S.NullOr(GatewayConfigurationsUpdateResponseSettingsBlockPage).pipe( T.Body("block_page"), ), ), bodyScanning: S.optional( S.NullOr(GatewayConfigurationsUpdateResponseSettingsBodyScanning).pipe( T.Body("body_scanning"), ), ), browserIsolation: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsBrowserIsolation).pipe( T.Body("browser_isolation"), ), ), certificate: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsCertificate), ), customCertificate: S.optional( S.NullOr( GatewayConfigurationsGetResponseSettingsCustomCertificate, ).pipe(T.Body("custom_certificate")), ), extendedEmailMatching: S.optional( S.NullOr( GatewayConfigurationsGetResponseSettingsExtendedEmailMatching, ).pipe(T.Body("extended_email_matching")), ), fips: S.optional(S.NullOr(GatewayConfigurationsGetResponseSettingsFips)), hostSelector: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsHostSelector).pipe( T.Body("host_selector"), ), ), inspection: S.optional( S.NullOr(GatewayConfigurationsUpdateResponseSettingsInspection), ), maxTtlSecs: S.optional(S.NullOr(S.Number).pipe(T.Body("max_ttl_secs"))), protocolDetection: S.optional( S.NullOr( GatewayConfigurationsGetResponseSettingsProtocolDetection, ).pipe(T.Body("protocol_detection")), ), sandbox: S.optional( S.NullOr(GatewayConfigurationsUpdateResponseSettingsSandbox), ), tlsDecrypt: S.optional( S.NullOr(GatewayConfigurationsGetResponseSettingsTlsDecrypt).pipe( T.Body("tls_decrypt"), ), ), }), ).annotate({ identifier: "GatewayConfigurationsUpdateResponseSettings", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PutGatewayConfigurationResponse { createdAt?: string | null; /** Specify account settings. */ settings?: GatewayConfigurationsUpdateResponseSettings | null; updatedAt?: string | null; } export const PutGatewayConfigurationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), settings: S.optional(S.NullOr(GatewayConfigurationsUpdateResponseSettings)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutGatewayConfigurationResponse", }) as any as S.Schema; export interface GatewayLoggingUpdateRequestSettingsByRuleTypeDns { /** Specify whether to log all requests to this service. */ logAll?: boolean; /** Specify whether to log only blocking requests to this service. */ logBlocks?: boolean; } export const GatewayLoggingUpdateRequestSettingsByRuleTypeDns = /*@__PURE__*/ S.suspend(() => S.Struct({ logAll: S.optional(S.Boolean.pipe(T.Body("log_all"))), logBlocks: S.optional(S.Boolean.pipe(T.Body("log_blocks"))), }), ).annotate({ identifier: "GatewayLoggingUpdateRequestSettingsByRuleTypeDns", }) as any as S.Schema; export type GatewayLoggingUpdateRequestSettingsByRuleTypeHttp = GatewayLoggingUpdateRequestSettingsByRuleTypeDns; export const GatewayLoggingUpdateRequestSettingsByRuleTypeHttp = GatewayLoggingUpdateRequestSettingsByRuleTypeDns; export type GatewayLoggingUpdateRequestSettingsByRuleTypeL4 = GatewayLoggingUpdateRequestSettingsByRuleTypeDns; export const GatewayLoggingUpdateRequestSettingsByRuleTypeL4 = GatewayLoggingUpdateRequestSettingsByRuleTypeDns; export interface GatewayLoggingUpdateRequestSettingsByRuleType { /** Configure logging settings for DNS firewall. */ dns?: GatewayLoggingUpdateRequestSettingsByRuleTypeDns; /** Configure logging settings for HTTP/HTTPS firewall. */ http?: GatewayLoggingUpdateRequestSettingsByRuleTypeDns; /** Configure logging settings for Network firewall. */ l4?: GatewayLoggingUpdateRequestSettingsByRuleTypeDns; } export const GatewayLoggingUpdateRequestSettingsByRuleType = /*@__PURE__*/ S.suspend(() => S.Struct({ dns: S.optional(GatewayLoggingUpdateRequestSettingsByRuleTypeDns), http: S.optional(GatewayLoggingUpdateRequestSettingsByRuleTypeDns), l4: S.optional(GatewayLoggingUpdateRequestSettingsByRuleTypeDns), }), ).annotate({ identifier: "GatewayLoggingUpdateRequestSettingsByRuleType", }) as any as S.Schema; export interface PutGatewayLoggingRequest { accountId: string; /** Indicate whether to redact personally identifiable information from activity logging (PII fields include source IP, user email, user ID, device ID, URL, referrer, and user agent). */ redactPii?: boolean; /** Configure logging settings for each rule type. */ settingsByRuleType?: GatewayLoggingUpdateRequestSettingsByRuleType; } export const PutGatewayLoggingRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), redactPii: S.optional(S.Boolean.pipe(T.Body("redact_pii"))), settingsByRuleType: S.optional( GatewayLoggingUpdateRequestSettingsByRuleType.pipe( T.Body("settings_by_rule_type"), ), ), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/gateway/logging", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutGatewayLoggingRequest", }) as any as S.Schema; export type GatewayLoggingUpdateResponseSettingsByRuleTypeDns = GatewayLoggingGetResponseSettingsByRuleTypeDns; export const GatewayLoggingUpdateResponseSettingsByRuleTypeDns = GatewayLoggingGetResponseSettingsByRuleTypeDns; export type GatewayLoggingUpdateResponseSettingsByRuleTypeHttp = GatewayLoggingGetResponseSettingsByRuleTypeDns; export const GatewayLoggingUpdateResponseSettingsByRuleTypeHttp = GatewayLoggingGetResponseSettingsByRuleTypeDns; export type GatewayLoggingUpdateResponseSettingsByRuleTypeL4 = GatewayLoggingGetResponseSettingsByRuleTypeDns; export const GatewayLoggingUpdateResponseSettingsByRuleTypeL4 = GatewayLoggingGetResponseSettingsByRuleTypeDns; export type GatewayLoggingUpdateResponseSettingsByRuleType = GatewayLoggingGetResponseSettingsByRuleType; export const GatewayLoggingUpdateResponseSettingsByRuleType = GatewayLoggingGetResponseSettingsByRuleType; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PutGatewayLoggingResponse { /** Indicate whether to redact personally identifiable information from activity logging (PII fields include source IP, user email, user ID, device ID, URL, referrer, and user agent). */ redactPii?: boolean | null; /** Configure logging settings for each rule type. */ settingsByRuleType?: GatewayLoggingGetResponseSettingsByRuleType | null; } export const PutGatewayLoggingResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ redactPii: S.optional(S.NullOr(S.Boolean).pipe(T.Body("redact_pii"))), settingsByRuleType: S.optional( S.NullOr(GatewayLoggingGetResponseSettingsByRuleType).pipe( T.Body("settings_by_rule_type"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutGatewayLoggingResponse", }) as any as S.Schema; export interface PutOrganizationDohRequest { /** Identifier. */ accountId: string; /** The duration the DoH JWT is valid for. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note that the maximum duration for this setting is the same as the key rotation period on the account. Default expiration is 24h */ dohJwtDuration?: string; /** The uuid of the service token you want to use for DoH authentication */ serviceTokenId?: string; } export const PutOrganizationDohRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), dohJwtDuration: S.optional(S.String.pipe(T.Body("doh_jwt_duration"))), serviceTokenId: S.optional(S.String.pipe(T.Body("service_token_id"))), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/organizations/doh", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutOrganizationDohRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PutOrganizationDohResponse { /** The ID of the service token. */ id?: string | null; /** The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header. */ clientId?: string | null; /** The duration the DoH JWT is valid for. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note that the maximum duration for this setting is the same as the key rotation period on the account. Default expiration is 24h */ dohJwtDuration?: string | null; /** The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h). */ duration?: string | null; expiresAt?: string | null; /** The name of the service token. */ name?: string | null; } export const PutOrganizationDohResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), dohJwtDuration: S.optional( S.NullOr(S.String).pipe(T.Body("doh_jwt_duration")), ), duration: S.optional(S.NullOr(S.String)), expiresAt: S.optional(S.NullOr(S.String).pipe(T.Body("expires_at"))), name: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutOrganizationDohResponse", }) as any as S.Schema; export type RiskScoringBehavioursUpdateRequestBehaviorsValueRiskLevel = | "low" | "medium" | "high"; export const RiskScoringBehavioursUpdateRequestBehaviorsValueRiskLevel = /*@__PURE__*/ S.String; export interface RiskScoringBehavioursUpdateRequestBehaviorsValue { enabled: boolean; riskLevel: | RiskScoringBehavioursUpdateRequestBehaviorsValueRiskLevel | (string & {}); } export const RiskScoringBehavioursUpdateRequestBehaviorsValue = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, riskLevel: RiskScoringBehavioursUpdateRequestBehaviorsValueRiskLevel.pipe( T.Body("risk_level"), ), }), ).annotate({ identifier: "RiskScoringBehavioursUpdateRequestBehaviorsValue", }) as any as S.Schema; export type RiskScoringBehavioursUpdateRequestBehaviorsMap = { [key: string]: RiskScoringBehavioursUpdateRequestBehaviorsValue | undefined; }; export const RiskScoringBehavioursUpdateRequestBehaviorsMap = /*@__PURE__*/ S.Record( S.String, RiskScoringBehavioursUpdateRequestBehaviorsValue, ) as any as S.Schema; export interface PutRiskScoringBehaviourRequest { accountId: string; behaviors: RiskScoringBehavioursUpdateRequestBehaviorsMap; } export const PutRiskScoringBehaviourRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), behaviors: RiskScoringBehavioursUpdateRequestBehaviorsMap, }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/zt_risk_scoring/behaviors", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutRiskScoringBehaviourRequest", }) as any as S.Schema; export type RiskScoringBehavioursUpdateResponseBehaviorsValueRiskLevel = | "low" | "medium" | "high"; export const RiskScoringBehavioursUpdateResponseBehaviorsValueRiskLevel = /*@__PURE__*/ S.String; export interface RiskScoringBehavioursUpdateResponseBehaviorsValue { enabled: boolean; riskLevel: RiskScoringBehavioursUpdateResponseBehaviorsValueRiskLevel; } export const RiskScoringBehavioursUpdateResponseBehaviorsValue = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, riskLevel: RiskScoringBehavioursUpdateResponseBehaviorsValueRiskLevel.pipe( T.Body("risk_level"), ), }), ).annotate({ identifier: "RiskScoringBehavioursUpdateResponseBehaviorsValue", }) as any as S.Schema; export type RiskScoringBehavioursUpdateResponseBehaviorsMap = { [key: string]: RiskScoringBehavioursUpdateResponseBehaviorsValue | undefined; }; export const RiskScoringBehavioursUpdateResponseBehaviorsMap = /*@__PURE__*/ S.Record( S.String, RiskScoringBehavioursUpdateResponseBehaviorsValue, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PutRiskScoringBehaviourResponse { behaviors: RiskScoringBehavioursUpdateResponseBehaviorsMap; } export const PutRiskScoringBehaviourResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ behaviors: RiskScoringBehavioursUpdateResponseBehaviorsMap, }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutRiskScoringBehaviourResponse", }) as any as S.Schema; export type TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItemOriginRequestAccessAudTagList = Array; export const TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItemOriginRequestAccessAudTagList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItemOriginRequestAccess { /** Access applications that are allowed to reach this hostname for this Tunnel. Audience tags can be identified in the dashboard or via the List Access policies API. */ audTag: TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItemOriginRequestAccessAudTagList; teamName: string; /** Deny traffic that has not fulfilled Access authorization. */ required?: boolean; } export const TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItemOriginRequestAccess = /*@__PURE__*/ S.suspend(() => S.Struct({ audTag: TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItemOriginRequestAccessAudTagList, teamName: S.String, required: S.optional(S.Boolean), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItemOriginRequestAccess", }) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItemOriginRequest { /** For all L7 requests to this hostname, cloudflared will validate each request's Cf-Access-Jwt-Assertion request header. */ access?: TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItemOriginRequestAccess; /** Path to the certificate authority (CA) for the certificate of your origin. This option should be used only if your certificate is not signed by Cloudflare. */ caPool?: string; /** Timeout for establishing a new TCP connection to your origin server. This excludes the time taken to establish TLS, which is controlled by tlsTimeout. */ connectTimeout?: number; /** Disables chunked transfer encoding. Useful if you are running a WSGI server. */ disableChunkedEncoding?: boolean; /** Attempt to connect to origin using HTTP2. Origin must be configured as https. */ http2Origin?: boolean; /** Sets the HTTP Host header on requests sent to the local service. */ httpHostHeader?: string; /** Maximum number of idle keepalive connections between Tunnel and your origin. This does not restrict the total number of concurrent connections. */ keepAliveConnections?: number; /** Timeout after which an idle keepalive connection can be discarded. */ keepAliveTimeout?: number; /** Auto configure the Hostname on the origin server certificate. */ matchSNItoHost?: boolean; /** Disable the “happy eyeballs” algorithm for IPv4/IPv6 fallback if your local network has misconfigured one of the protocols. */ noHappyEyeballs?: boolean; /** Disables TLS verification of the certificate presented by your origin. Will allow any certificate from the origin to be accepted. */ noTLSVerify?: boolean; /** Hostname that cloudflared should expect from your origin server certificate. */ originServerName?: string; /** cloudflared starts a proxy server to translate HTTP traffic into TCP when proxying, for example, SSH or RDP. This configures what type of proxy will be started. Valid options are: "" for the regular proxy and "socks" for a SOCKS5 proxy. */ proxyType?: string; /** The timeout after which a TCP keepalive packet is sent on a connection between Tunnel and the origin server. */ tcpKeepAlive?: number; /** Timeout for completing a TLS handshake to your origin server, if you have chosen to connect Tunnel to an HTTPS server. */ tlsTimeout?: number; } export const TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItemOriginRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ access: S.optional( TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItemOriginRequestAccess, ), caPool: S.optional(S.String), connectTimeout: S.optional(S.Number), disableChunkedEncoding: S.optional(S.Boolean), http2Origin: S.optional(S.Boolean), httpHostHeader: S.optional(S.String), keepAliveConnections: S.optional(S.Number), keepAliveTimeout: S.optional(S.Number), matchSNItoHost: S.optional(S.Boolean), noHappyEyeballs: S.optional(S.Boolean), noTLSVerify: S.optional(S.Boolean), originServerName: S.optional(S.String), proxyType: S.optional(S.String), tcpKeepAlive: S.optional(S.Number), tlsTimeout: S.optional(S.Number), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItemOriginRequest", }) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItem { /** Public hostname for this service. */ hostname?: string; /** Protocol and address of destination server. Supported protocols: http://, https://, unix://, tcp://, ssh://, rdp://, unix+tls://, smb://. Alternatively can return a HTTP status code http_status:[code] e.g. 'http_status:404'. */ service: string; /** Configuration parameters for the public hostname specific connection settings between cloudflared and origin server. */ originRequest?: TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItemOriginRequest; /** Requests with this path route to this public hostname. */ path?: string; } export const TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItem = /*@__PURE__*/ S.suspend(() => S.Struct({ hostname: S.optional(S.String), service: S.String, originRequest: S.optional( TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItemOriginRequest, ), path: S.optional(S.String), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItem", }) as any as S.Schema; export type TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressList = Array; export const TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressList = /*@__PURE__*/ S.Array( TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressItem, ) as any as S.Schema; export type TunnelsCloudflaredConfigurationsUpdateRequestConfigOriginRequestAccessAudTagList = Array; export const TunnelsCloudflaredConfigurationsUpdateRequestConfigOriginRequestAccessAudTagList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsUpdateRequestConfigOriginRequestAccess { /** Access applications that are allowed to reach this hostname for this Tunnel. Audience tags can be identified in the dashboard or via the List Access policies API. */ audTag: TunnelsCloudflaredConfigurationsUpdateRequestConfigOriginRequestAccessAudTagList; teamName: string; /** Deny traffic that has not fulfilled Access authorization. */ required?: boolean; } export const TunnelsCloudflaredConfigurationsUpdateRequestConfigOriginRequestAccess = /*@__PURE__*/ S.suspend(() => S.Struct({ audTag: TunnelsCloudflaredConfigurationsUpdateRequestConfigOriginRequestAccessAudTagList, teamName: S.String, required: S.optional(S.Boolean), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsUpdateRequestConfigOriginRequestAccess", }) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsUpdateRequestConfigOriginRequest { /** For all L7 requests to this hostname, cloudflared will validate each request's Cf-Access-Jwt-Assertion request header. */ access?: TunnelsCloudflaredConfigurationsUpdateRequestConfigOriginRequestAccess; /** Path to the certificate authority (CA) for the certificate of your origin. This option should be used only if your certificate is not signed by Cloudflare. */ caPool?: string; /** Timeout for establishing a new TCP connection to your origin server. This excludes the time taken to establish TLS, which is controlled by tlsTimeout. */ connectTimeout?: number; /** Disables chunked transfer encoding. Useful if you are running a WSGI server. */ disableChunkedEncoding?: boolean; /** Attempt to connect to origin using HTTP2. Origin must be configured as https. */ http2Origin?: boolean; /** Sets the HTTP Host header on requests sent to the local service. */ httpHostHeader?: string; /** Maximum number of idle keepalive connections between Tunnel and your origin. This does not restrict the total number of concurrent connections. */ keepAliveConnections?: number; /** Timeout after which an idle keepalive connection can be discarded. */ keepAliveTimeout?: number; /** Auto configure the Hostname on the origin server certificate. */ matchSNItoHost?: boolean; /** Disable the “happy eyeballs” algorithm for IPv4/IPv6 fallback if your local network has misconfigured one of the protocols. */ noHappyEyeballs?: boolean; /** Disables TLS verification of the certificate presented by your origin. Will allow any certificate from the origin to be accepted. */ noTLSVerify?: boolean; /** Hostname that cloudflared should expect from your origin server certificate. */ originServerName?: string; /** cloudflared starts a proxy server to translate HTTP traffic into TCP when proxying, for example, SSH or RDP. This configures what type of proxy will be started. Valid options are: "" for the regular proxy and "socks" for a SOCKS5 proxy. */ proxyType?: string; /** The timeout after which a TCP keepalive packet is sent on a connection between Tunnel and the origin server. */ tcpKeepAlive?: number; /** Timeout for completing a TLS handshake to your origin server, if you have chosen to connect Tunnel to an HTTPS server. */ tlsTimeout?: number; } export const TunnelsCloudflaredConfigurationsUpdateRequestConfigOriginRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ access: S.optional( TunnelsCloudflaredConfigurationsUpdateRequestConfigOriginRequestAccess, ), caPool: S.optional(S.String), connectTimeout: S.optional(S.Number), disableChunkedEncoding: S.optional(S.Boolean), http2Origin: S.optional(S.Boolean), httpHostHeader: S.optional(S.String), keepAliveConnections: S.optional(S.Number), keepAliveTimeout: S.optional(S.Number), matchSNItoHost: S.optional(S.Boolean), noHappyEyeballs: S.optional(S.Boolean), noTLSVerify: S.optional(S.Boolean), originServerName: S.optional(S.String), proxyType: S.optional(S.String), tcpKeepAlive: S.optional(S.Number), tlsTimeout: S.optional(S.Number), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsUpdateRequestConfigOriginRequest", }) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsUpdateRequestConfig { /** List of public hostname definitions. At least one ingress rule needs to be defined for the tunnel. */ ingress?: TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressList; /** Configuration parameters for the public hostname specific connection settings between cloudflared and origin server. */ originRequest?: TunnelsCloudflaredConfigurationsUpdateRequestConfigOriginRequest; } export const TunnelsCloudflaredConfigurationsUpdateRequestConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ ingress: S.optional( TunnelsCloudflaredConfigurationsUpdateRequestConfigIngressList, ), originRequest: S.optional( TunnelsCloudflaredConfigurationsUpdateRequestConfigOriginRequest, ), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsUpdateRequestConfig", }) as any as S.Schema; export interface PutTunnelCloudflaredConfigurationRequest { /** Identifier. */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; /** The tunnel configuration and ingress rules. */ config?: TunnelsCloudflaredConfigurationsUpdateRequestConfig; } export const PutTunnelCloudflaredConfigurationRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), config: S.optional(TunnelsCloudflaredConfigurationsUpdateRequestConfig), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/cfd_tunnel/{tunnel_id}/configurations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutTunnelCloudflaredConfigurationRequest", }) as any as S.Schema; export type TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItemOriginRequestAccessAudTagList = Array; export const TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItemOriginRequestAccessAudTagList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItemOriginRequestAccess { /** Access applications that are allowed to reach this hostname for this Tunnel. Audience tags can be identified in the dashboard or via the List Access policies API. */ audTag: TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItemOriginRequestAccessAudTagList; teamName: string; /** Deny traffic that has not fulfilled Access authorization. */ required?: boolean | null; } export const TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItemOriginRequestAccess = /*@__PURE__*/ S.suspend(() => S.Struct({ audTag: TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItemOriginRequestAccessAudTagList, teamName: S.String, required: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItemOriginRequestAccess", }) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItemOriginRequest { /** For all L7 requests to this hostname, cloudflared will validate each request's Cf-Access-Jwt-Assertion request header. */ access?: TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItemOriginRequestAccess | null; /** Path to the certificate authority (CA) for the certificate of your origin. This option should be used only if your certificate is not signed by Cloudflare. */ caPool?: string | null; /** Timeout for establishing a new TCP connection to your origin server. This excludes the time taken to establish TLS, which is controlled by tlsTimeout. */ connectTimeout?: number | null; /** Disables chunked transfer encoding. Useful if you are running a WSGI server. */ disableChunkedEncoding?: boolean | null; /** Attempt to connect to origin using HTTP2. Origin must be configured as https. */ http2Origin?: boolean | null; /** Sets the HTTP Host header on requests sent to the local service. */ httpHostHeader?: string | null; /** Maximum number of idle keepalive connections between Tunnel and your origin. This does not restrict the total number of concurrent connections. */ keepAliveConnections?: number | null; /** Timeout after which an idle keepalive connection can be discarded. */ keepAliveTimeout?: number | null; /** Auto configure the Hostname on the origin server certificate. */ matchSNItoHost?: boolean | null; /** Disable the “happy eyeballs” algorithm for IPv4/IPv6 fallback if your local network has misconfigured one of the protocols. */ noHappyEyeballs?: boolean | null; /** Disables TLS verification of the certificate presented by your origin. Will allow any certificate from the origin to be accepted. */ noTLSVerify?: boolean | null; /** Hostname that cloudflared should expect from your origin server certificate. */ originServerName?: string | null; /** cloudflared starts a proxy server to translate HTTP traffic into TCP when proxying, for example, SSH or RDP. This configures what type of proxy will be started. Valid options are: "" for the regular proxy and "socks" for a SOCKS5 proxy. */ proxyType?: string | null; /** The timeout after which a TCP keepalive packet is sent on a connection between Tunnel and the origin server. */ tcpKeepAlive?: number | null; /** Timeout for completing a TLS handshake to your origin server, if you have chosen to connect Tunnel to an HTTPS server. */ tlsTimeout?: number | null; } export const TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItemOriginRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ access: S.optional( S.NullOr( TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItemOriginRequestAccess, ), ), caPool: S.optional(S.NullOr(S.String)), connectTimeout: S.optional(S.NullOr(S.Number)), disableChunkedEncoding: S.optional(S.NullOr(S.Boolean)), http2Origin: S.optional(S.NullOr(S.Boolean)), httpHostHeader: S.optional(S.NullOr(S.String)), keepAliveConnections: S.optional(S.NullOr(S.Number)), keepAliveTimeout: S.optional(S.NullOr(S.Number)), matchSNItoHost: S.optional(S.NullOr(S.Boolean)), noHappyEyeballs: S.optional(S.NullOr(S.Boolean)), noTLSVerify: S.optional(S.NullOr(S.Boolean)), originServerName: S.optional(S.NullOr(S.String)), proxyType: S.optional(S.NullOr(S.String)), tcpKeepAlive: S.optional(S.NullOr(S.Number)), tlsTimeout: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItemOriginRequest", }) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItem { /** Public hostname for this service. */ hostname?: string | null; /** Protocol and address of destination server. Supported protocols: http://, https://, unix://, tcp://, ssh://, rdp://, unix+tls://, smb://. Alternatively can return a HTTP status code http_status:[code] e.g. 'http_status:404'. */ service: string; /** Configuration parameters for the public hostname specific connection settings between cloudflared and origin server. */ originRequest?: TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItemOriginRequest | null; /** Requests with this path route to this public hostname. */ path?: string | null; } export const TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItem = /*@__PURE__*/ S.suspend(() => S.Struct({ hostname: S.optional(S.NullOr(S.String)), service: S.String, originRequest: S.optional( S.NullOr( TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItemOriginRequest, ), ), path: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItem", }) as any as S.Schema; export type TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressList = Array; export const TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressList = /*@__PURE__*/ S.Array( TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressItem, ) as any as S.Schema; export type TunnelsCloudflaredConfigurationsUpdateResponseConfigOriginRequestAccessAudTagList = Array; export const TunnelsCloudflaredConfigurationsUpdateResponseConfigOriginRequestAccessAudTagList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsUpdateResponseConfigOriginRequestAccess { /** Access applications that are allowed to reach this hostname for this Tunnel. Audience tags can be identified in the dashboard or via the List Access policies API. */ audTag: TunnelsCloudflaredConfigurationsUpdateResponseConfigOriginRequestAccessAudTagList; teamName: string; /** Deny traffic that has not fulfilled Access authorization. */ required?: boolean | null; } export const TunnelsCloudflaredConfigurationsUpdateResponseConfigOriginRequestAccess = /*@__PURE__*/ S.suspend(() => S.Struct({ audTag: TunnelsCloudflaredConfigurationsUpdateResponseConfigOriginRequestAccessAudTagList, teamName: S.String, required: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsUpdateResponseConfigOriginRequestAccess", }) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsUpdateResponseConfigOriginRequest { /** For all L7 requests to this hostname, cloudflared will validate each request's Cf-Access-Jwt-Assertion request header. */ access?: TunnelsCloudflaredConfigurationsUpdateResponseConfigOriginRequestAccess | null; /** Path to the certificate authority (CA) for the certificate of your origin. This option should be used only if your certificate is not signed by Cloudflare. */ caPool?: string | null; /** Timeout for establishing a new TCP connection to your origin server. This excludes the time taken to establish TLS, which is controlled by tlsTimeout. */ connectTimeout?: number | null; /** Disables chunked transfer encoding. Useful if you are running a WSGI server. */ disableChunkedEncoding?: boolean | null; /** Attempt to connect to origin using HTTP2. Origin must be configured as https. */ http2Origin?: boolean | null; /** Sets the HTTP Host header on requests sent to the local service. */ httpHostHeader?: string | null; /** Maximum number of idle keepalive connections between Tunnel and your origin. This does not restrict the total number of concurrent connections. */ keepAliveConnections?: number | null; /** Timeout after which an idle keepalive connection can be discarded. */ keepAliveTimeout?: number | null; /** Auto configure the Hostname on the origin server certificate. */ matchSNItoHost?: boolean | null; /** Disable the “happy eyeballs” algorithm for IPv4/IPv6 fallback if your local network has misconfigured one of the protocols. */ noHappyEyeballs?: boolean | null; /** Disables TLS verification of the certificate presented by your origin. Will allow any certificate from the origin to be accepted. */ noTLSVerify?: boolean | null; /** Hostname that cloudflared should expect from your origin server certificate. */ originServerName?: string | null; /** cloudflared starts a proxy server to translate HTTP traffic into TCP when proxying, for example, SSH or RDP. This configures what type of proxy will be started. Valid options are: "" for the regular proxy and "socks" for a SOCKS5 proxy. */ proxyType?: string | null; /** The timeout after which a TCP keepalive packet is sent on a connection between Tunnel and the origin server. */ tcpKeepAlive?: number | null; /** Timeout for completing a TLS handshake to your origin server, if you have chosen to connect Tunnel to an HTTPS server. */ tlsTimeout?: number | null; } export const TunnelsCloudflaredConfigurationsUpdateResponseConfigOriginRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ access: S.optional( S.NullOr( TunnelsCloudflaredConfigurationsUpdateResponseConfigOriginRequestAccess, ), ), caPool: S.optional(S.NullOr(S.String)), connectTimeout: S.optional(S.NullOr(S.Number)), disableChunkedEncoding: S.optional(S.NullOr(S.Boolean)), http2Origin: S.optional(S.NullOr(S.Boolean)), httpHostHeader: S.optional(S.NullOr(S.String)), keepAliveConnections: S.optional(S.NullOr(S.Number)), keepAliveTimeout: S.optional(S.NullOr(S.Number)), matchSNItoHost: S.optional(S.NullOr(S.Boolean)), noHappyEyeballs: S.optional(S.NullOr(S.Boolean)), noTLSVerify: S.optional(S.NullOr(S.Boolean)), originServerName: S.optional(S.NullOr(S.String)), proxyType: S.optional(S.NullOr(S.String)), tcpKeepAlive: S.optional(S.NullOr(S.Number)), tlsTimeout: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsUpdateResponseConfigOriginRequest", }) as any as S.Schema; export interface TunnelsCloudflaredConfigurationsUpdateResponseConfig { /** List of public hostname definitions. At least one ingress rule needs to be defined for the tunnel. */ ingress?: TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressList | null; /** Configuration parameters for the public hostname specific connection settings between cloudflared and origin server. */ originRequest?: TunnelsCloudflaredConfigurationsUpdateResponseConfigOriginRequest | null; } export const TunnelsCloudflaredConfigurationsUpdateResponseConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ ingress: S.optional( S.NullOr( TunnelsCloudflaredConfigurationsUpdateResponseConfigIngressList, ), ), originRequest: S.optional( S.NullOr( TunnelsCloudflaredConfigurationsUpdateResponseConfigOriginRequest, ), ), }), ).annotate({ identifier: "TunnelsCloudflaredConfigurationsUpdateResponseConfig", }) as any as S.Schema; export type TunnelsCloudflaredConfigurationsUpdateResponseSource = | "local" | "cloudflare"; export const TunnelsCloudflaredConfigurationsUpdateResponseSource = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PutTunnelCloudflaredConfigurationResponse { /** Identifier. */ accountId?: string | null; /** The tunnel configuration and ingress rules. */ config?: TunnelsCloudflaredConfigurationsUpdateResponseConfig | null; createdAt?: string | null; /** Indicates if this is a locally or remotely configured tunnel. If `local`, manage the tunnel using a YAML file on the origin machine. If `cloudflare`, manage the tunnel's configuration on the Zero Trust dashboard. */ source?: TunnelsCloudflaredConfigurationsUpdateResponseSource | null; /** UUID of the tunnel. */ tunnelId?: string | null; /** The version of the Tunnel Configuration. */ version?: number | null; } export const PutTunnelCloudflaredConfigurationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.optional(S.NullOr(S.String).pipe(T.Body("account_id"))), config: S.optional( S.NullOr(TunnelsCloudflaredConfigurationsUpdateResponseConfig), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), source: S.optional( S.NullOr(TunnelsCloudflaredConfigurationsUpdateResponseSource), ), tunnelId: S.optional(S.NullOr(S.String).pipe(T.Body("tunnel_id"))), version: S.optional(S.NullOr(S.Number)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutTunnelCloudflaredConfigurationResponse", }) as any as S.Schema; export type TunnelsWarpConnectorConfigurationsUpdateRequestHaMode = | "none" | "disabled" | "aws" | "local"; export const TunnelsWarpConnectorConfigurationsUpdateRequestHaMode = /*@__PURE__*/ S.String; export interface PutTunnelWarpConnectorConfigurationRequest { /** Identifier. */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; /** High-availability mode for the WARP Connector tunnel. `none` means HA is enabled but no provider is configured yet (newly created tunnels default to this). `disabled` means HA is explicitly turned off. `aws` uses AWS ENI move for failover. `local` uses virtual IPs (VIPs) on the local interface. */ haMode: TunnelsWarpConnectorConfigurationsUpdateRequestHaMode | (string & {}); /** Provider-specific configuration. Required shape depends on ha_mode. For `aws`, must contain `fnr_id`. For `local`, must contain `vips`. For `none` and `disabled`, must be empty or omitted. */ config?: unknown; } export const PutTunnelWarpConnectorConfigurationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), haMode: TunnelsWarpConnectorConfigurationsUpdateRequestHaMode.pipe( T.Body("ha_mode"), ), config: S.optional(S.Unknown), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/warp_connector/{tunnel_id}/configurations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutTunnelWarpConnectorConfigurationRequest", }) as any as S.Schema; export type TunnelsWarpConnectorConfigurationsUpdateResponseHaMode = | "none" | "disabled" | "aws" | "local"; export const TunnelsWarpConnectorConfigurationsUpdateResponseHaMode = /*@__PURE__*/ S.String; export type TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshAwsConfig = TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshAwsConfig; export const TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshAwsConfig = TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshAwsConfig; export type TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfigVipsItem = TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsItem; export const TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfigVipsItem = TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsItem; export type TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfigVipsList = Array; export const TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfigVipsList = /*@__PURE__*/ S.Array( TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsItem, ) as any as S.Schema; export type TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfigVipsPreviousItem = TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsItem; export const TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfigVipsPreviousItem = TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsItem; export type TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfigVipsPreviousList = Array; export const TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfigVipsPreviousList = /*@__PURE__*/ S.Array( TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshLocalConfigVipsItem, ) as any as S.Schema; export interface TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfig { /** VIPs to assign on the CloudflareWARP interface. */ vips: TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfigVipsList; /** VIPs to clean up on demotion or version drift. */ vipsPrevious?: TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfigVipsPreviousList | null; } export const TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ vips: TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfigVipsList, vipsPrevious: S.optional( S.NullOr( TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfigVipsPreviousList, ).pipe(T.Body("vips_previous")), ), }), ).annotate({ identifier: "TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfig", }) as any as S.Schema; export type TunnelsWarpConnectorConfigurationsUpdateResponseConfig = | TunnelsWarpConnectorConfigurationsGetResponseConfigTunnelMeshAwsConfig | TunnelsWarpConnectorConfigurationsUpdateResponseConfigTunnelMeshLocalConfig; export const TunnelsWarpConnectorConfigurationsUpdateResponseConfig = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([["fnrId"], ["vips", "vipsPrevious"]]), ); /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface PutTunnelWarpConnectorConfigurationResponse { /** Monotonically increasing configuration version, incremented on each PUT. */ configurationVersion: number; /** Timestamp of when the resource was created. */ createdAt: string; /** High-availability mode for the WARP Connector tunnel. `none` means HA is enabled but no provider is configured yet (newly created tunnels default to this). `disabled` means HA is explicitly turned off. `aws` uses AWS ENI move for failover. `local` uses virtual IPs (VIPs) on the local interface. */ haMode: TunnelsWarpConnectorConfigurationsUpdateResponseHaMode; /** UUID of the tunnel. */ tunnelId: string; /** Provider-specific configuration. Present for `aws` and `local` modes. */ config?: TunnelsWarpConnectorConfigurationsUpdateResponseConfig | null; /** Timestamp of the last update. Null if never updated. */ updatedAt?: string | null; } export const PutTunnelWarpConnectorConfigurationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ configurationVersion: S.Number.pipe(T.Body("configuration_version")), createdAt: S.String.pipe(T.Body("created_at")), haMode: TunnelsWarpConnectorConfigurationsUpdateResponseHaMode.pipe( T.Body("ha_mode"), ), tunnelId: S.String.pipe(T.Body("tunnel_id")), config: S.optional( S.NullOr(TunnelsWarpConnectorConfigurationsUpdateResponseConfig), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutTunnelWarpConnectorConfigurationResponse", }) as any as S.Schema; export interface PutTunnelWarpConnectorFailoverRequest { /** Cloudflare account ID */ accountId: string; /** UUID of the tunnel. */ tunnelId: string; /** UUID of the Cloudflare Tunnel connector. */ clientId: string; } export const PutTunnelWarpConnectorFailoverRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tunnelId: S.String.pipe(T.Label("tunnel_id")), clientId: S.String.pipe(T.Body("client_id")), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/warp_connector/{tunnel_id}/failover", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutTunnelWarpConnectorFailoverRequest", }) as any as S.Schema; export type PutTunnelWarpConnectorFailoverResponse = unknown; export const PutTunnelWarpConnectorFailoverResponse = /*@__PURE__*/ S.suspend( () => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "PutTunnelWarpConnectorFailoverResponse", }) as any as S.Schema; export interface ReadAccessAiControlMcpPortalRequest { accountId: string; /** portal id */ id: string; } export const ReadAccessAiControlMcpPortalRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String.pipe(T.Label()), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/ai-controls/mcp/portals/{id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ReadAccessAiControlMcpPortalRequest", }) as any as S.Schema; export type AccessAiControlsMcpPortalsReadResponseServersItemAuthType = | "oauth" | "bearer" | "unauthenticated"; export const AccessAiControlsMcpPortalsReadResponseServersItemAuthType = /*@__PURE__*/ S.String; export type AccessAiControlsMcpPortalsReadResponseServersItemPromptsItemMap = { [key: string]: unknown | undefined; }; export const AccessAiControlsMcpPortalsReadResponseServersItemPromptsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpPortalsReadResponseServersItemPromptsList = Array; export const AccessAiControlsMcpPortalsReadResponseServersItemPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsReadResponseServersItemPromptsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpPortalsReadResponseServersItemToolsItemMap = { [key: string]: unknown | undefined; }; export const AccessAiControlsMcpPortalsReadResponseServersItemToolsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpPortalsReadResponseServersItemToolsList = Array; export const AccessAiControlsMcpPortalsReadResponseServersItemToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsReadResponseServersItemToolsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpPortalsReadResponseServersItemErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export const AccessAiControlsMcpPortalsReadResponseServersItemErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export type AccessAiControlsMcpPortalsReadResponseServersItemUpdatedPromptsItem = AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem; export const AccessAiControlsMcpPortalsReadResponseServersItemUpdatedPromptsItem = AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem; export type AccessAiControlsMcpPortalsReadResponseServersItemUpdatedPromptsList = Array; export const AccessAiControlsMcpPortalsReadResponseServersItemUpdatedPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem, ) as any as S.Schema; export type AccessAiControlsMcpPortalsReadResponseServersItemUpdatedToolsItem = AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem; export const AccessAiControlsMcpPortalsReadResponseServersItemUpdatedToolsItem = AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem; export type AccessAiControlsMcpPortalsReadResponseServersItemUpdatedToolsList = Array; export const AccessAiControlsMcpPortalsReadResponseServersItemUpdatedToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem, ) as any as S.Schema; export interface AccessAiControlsMcpPortalsReadResponseServersItem { /** server id */ id: string; authType: AccessAiControlsMcpPortalsReadResponseServersItemAuthType; hostname: string; name: string; prompts: AccessAiControlsMcpPortalsReadResponseServersItemPromptsList; /** server id */ serverId: string; tools: AccessAiControlsMcpPortalsReadResponseServersItemToolsList; createdAt?: string | null; createdBy?: string | null; defaultDisabled?: boolean | null; description?: string | null; error?: string | null; errorDetails?: AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails | null; /** When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true. Effective behavior is gated by the gateway worker's per-env rollout mode KV key. */ isSharedOauthCallbackEnabled?: boolean | null; lastSuccessfulSync?: string | null; lastSynced?: string | null; modifiedAt?: string | null; modifiedBy?: string | null; onBehalf?: boolean | null; /** Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean | null; status?: string | null; updatedPrompts?: AccessAiControlsMcpPortalsReadResponseServersItemUpdatedPromptsList | null; updatedTools?: AccessAiControlsMcpPortalsReadResponseServersItemUpdatedToolsList | null; } export const AccessAiControlsMcpPortalsReadResponseServersItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, authType: AccessAiControlsMcpPortalsReadResponseServersItemAuthType.pipe( T.Body("auth_type"), ), hostname: S.String, name: S.String, prompts: AccessAiControlsMcpPortalsReadResponseServersItemPromptsList, serverId: S.String.pipe(T.Body("server_id")), tools: AccessAiControlsMcpPortalsReadResponseServersItemToolsList, createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), createdBy: S.optional(S.NullOr(S.String).pipe(T.Body("created_by"))), defaultDisabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("default_disabled")), ), description: S.optional(S.NullOr(S.String)), error: S.optional(S.NullOr(S.String)), errorDetails: S.optional( S.NullOr( AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails, ).pipe(T.Body("error_details")), ), isSharedOauthCallbackEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_shared_oauth_callback_enabled")), ), lastSuccessfulSync: S.optional( S.NullOr(S.String).pipe(T.Body("last_successful_sync")), ), lastSynced: S.optional(S.NullOr(S.String).pipe(T.Body("last_synced"))), modifiedAt: S.optional(S.NullOr(S.String).pipe(T.Body("modified_at"))), modifiedBy: S.optional(S.NullOr(S.String).pipe(T.Body("modified_by"))), onBehalf: S.optional(S.NullOr(S.Boolean).pipe(T.Body("on_behalf"))), secureWebGateway: S.optional( S.NullOr(S.Boolean).pipe(T.Body("secure_web_gateway")), ), status: S.optional(S.NullOr(S.String)), updatedPrompts: S.optional( S.NullOr( AccessAiControlsMcpPortalsReadResponseServersItemUpdatedPromptsList, ).pipe(T.Body("updated_prompts")), ), updatedTools: S.optional( S.NullOr( AccessAiControlsMcpPortalsReadResponseServersItemUpdatedToolsList, ).pipe(T.Body("updated_tools")), ), }), ).annotate({ identifier: "AccessAiControlsMcpPortalsReadResponseServersItem", }) as any as S.Schema; export type AccessAiControlsMcpPortalsReadResponseServersList = Array; export const AccessAiControlsMcpPortalsReadResponseServersList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsReadResponseServersItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ReadAccessAiControlMcpPortalResponse { /** portal id */ id: string; hostname: string; name: string; servers: AccessAiControlsMcpPortalsReadResponseServersList; /** Allow remote code execution in Dynamic Workers (beta) */ allowCodeMode?: boolean | null; createdAt?: string | null; createdBy?: string | null; description?: string | null; modifiedAt?: string | null; modifiedBy?: string | null; /** Route outbound MCP traffic through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean | null; } export const ReadAccessAiControlMcpPortalResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, hostname: S.String, name: S.String, servers: AccessAiControlsMcpPortalsReadResponseServersList, allowCodeMode: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_code_mode")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), createdBy: S.optional(S.NullOr(S.String).pipe(T.Body("created_by"))), description: S.optional(S.NullOr(S.String)), modifiedAt: S.optional(S.NullOr(S.String).pipe(T.Body("modified_at"))), modifiedBy: S.optional(S.NullOr(S.String).pipe(T.Body("modified_by"))), secureWebGateway: S.optional( S.NullOr(S.Boolean).pipe(T.Body("secure_web_gateway")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ReadAccessAiControlMcpPortalResponse", }) as any as S.Schema; export interface ReadAccessAiControlMcpServerRequest { accountId: string; /** server id */ id: string; } export const ReadAccessAiControlMcpServerRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String.pipe(T.Label()), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/access/ai-controls/mcp/servers/{id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ReadAccessAiControlMcpServerRequest", }) as any as S.Schema; export type AccessAiControlsMcpServersReadResponseAuthType = | "oauth" | "bearer" | "unauthenticated"; export const AccessAiControlsMcpServersReadResponseAuthType = /*@__PURE__*/ S.String; export type AccessAiControlsMcpServersReadResponsePromptsItemMap = { [key: string]: unknown | undefined; }; export const AccessAiControlsMcpServersReadResponsePromptsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpServersReadResponsePromptsList = Array; export const AccessAiControlsMcpServersReadResponsePromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersReadResponsePromptsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpServersReadResponseToolsItemMap = { [key: string]: unknown | undefined; }; export const AccessAiControlsMcpServersReadResponseToolsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpServersReadResponseToolsList = Array; export const AccessAiControlsMcpServersReadResponseToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersReadResponseToolsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpServersReadResponseErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export const AccessAiControlsMcpServersReadResponseErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export type AccessAiControlsMcpServersReadResponseUpdatedPromptsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export const AccessAiControlsMcpServersReadResponseUpdatedPromptsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export type AccessAiControlsMcpServersReadResponseUpdatedPromptsList = Array; export const AccessAiControlsMcpServersReadResponseUpdatedPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem, ) as any as S.Schema; export type AccessAiControlsMcpServersReadResponseUpdatedToolsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export const AccessAiControlsMcpServersReadResponseUpdatedToolsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export type AccessAiControlsMcpServersReadResponseUpdatedToolsList = Array; export const AccessAiControlsMcpServersReadResponseUpdatedToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ReadAccessAiControlMcpServerResponse { /** server id */ id: string; authType: AccessAiControlsMcpServersReadResponseAuthType; hostname: string; name: string; prompts: AccessAiControlsMcpServersReadResponsePromptsList; tools: AccessAiControlsMcpServersReadResponseToolsList; createdAt?: string | null; createdBy?: string | null; description?: string | null; error?: string | null; errorDetails?: AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails | null; /** When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true. Effective behavior is gated by the gateway worker's per-env rollout mode KV key. */ isSharedOauthCallbackEnabled?: boolean | null; lastSuccessfulSync?: string | null; lastSynced?: string | null; modifiedAt?: string | null; modifiedBy?: string | null; /** Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean | null; status?: string | null; updatedPrompts?: AccessAiControlsMcpServersReadResponseUpdatedPromptsList | null; updatedTools?: AccessAiControlsMcpServersReadResponseUpdatedToolsList | null; } export const ReadAccessAiControlMcpServerResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, authType: AccessAiControlsMcpServersReadResponseAuthType.pipe( T.Body("auth_type"), ), hostname: S.String, name: S.String, prompts: AccessAiControlsMcpServersReadResponsePromptsList, tools: AccessAiControlsMcpServersReadResponseToolsList, createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), createdBy: S.optional(S.NullOr(S.String).pipe(T.Body("created_by"))), description: S.optional(S.NullOr(S.String)), error: S.optional(S.NullOr(S.String)), errorDetails: S.optional( S.NullOr( AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails, ).pipe(T.Body("error_details")), ), isSharedOauthCallbackEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_shared_oauth_callback_enabled")), ), lastSuccessfulSync: S.optional( S.NullOr(S.String).pipe(T.Body("last_successful_sync")), ), lastSynced: S.optional(S.NullOr(S.String).pipe(T.Body("last_synced"))), modifiedAt: S.optional(S.NullOr(S.String).pipe(T.Body("modified_at"))), modifiedBy: S.optional(S.NullOr(S.String).pipe(T.Body("modified_by"))), secureWebGateway: S.optional( S.NullOr(S.Boolean).pipe(T.Body("secure_web_gateway")), ), status: S.optional(S.NullOr(S.String)), updatedPrompts: S.optional( S.NullOr(AccessAiControlsMcpServersReadResponseUpdatedPromptsList).pipe( T.Body("updated_prompts"), ), ), updatedTools: S.optional( S.NullOr(AccessAiControlsMcpServersReadResponseUpdatedToolsList).pipe( T.Body("updated_tools"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ReadAccessAiControlMcpServerResponse", }) as any as S.Schema; export interface RefreshAccessServiceTokenRequest { /** Identifier. */ accountId: string; /** UUID. */ serviceTokenId: string; } export const RefreshAccessServiceTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), serviceTokenId: S.String.pipe(T.Label("service_token_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/service_tokens/{service_token_id}/refresh", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RefreshAccessServiceTokenRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface RefreshAccessServiceTokenResponse { /** The ID of the service token. */ id?: string | null; /** The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header. */ clientId?: string | null; /** The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h). */ duration?: string | null; expiresAt?: string | null; /** The name of the service token. */ name?: string | null; } export const RefreshAccessServiceTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), duration: S.optional(S.NullOr(S.String)), expiresAt: S.optional(S.NullOr(S.String).pipe(T.Body("expires_at"))), name: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RefreshAccessServiceTokenResponse", }) as any as S.Schema; export interface ResetExpirationGatewayRuleRequest { accountId: string; /** Identify the API resource with a UUID. */ ruleId: string; } export const ResetExpirationGatewayRuleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ruleId: S.String.pipe(T.Label("rule_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/gateway/rules/{rule_id}/reset_expiration", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ResetExpirationGatewayRuleRequest", }) as any as S.Schema; export type GatewayRulesResetExpirationResponseAction = | "on" | "off" | "allow" | "block" | "scan" | "noscan" | "safesearch" | "ytrestricted" | "isolate" | "noisolate" | "override" | "l4_override" | "egress" | "resolve" | "quarantine" | "redirect"; export const GatewayRulesResetExpirationResponseAction = /*@__PURE__*/ S.String; export type GatewayRulesResetExpirationResponseFiltersItem = | "http" | "dns" | "l4" | "egress" | "dns_resolver"; export const GatewayRulesResetExpirationResponseFiltersItem = /*@__PURE__*/ S.String; export type GatewayRulesResetExpirationResponseFiltersList = Array; export const GatewayRulesResetExpirationResponseFiltersList = /*@__PURE__*/ S.Array( GatewayRulesResetExpirationResponseFiltersItem, ) as any as S.Schema; export type GatewayRulesResetExpirationResponseExpiration = GatewayRulesCreateResponseExpiration; export const GatewayRulesResetExpirationResponseExpiration = GatewayRulesCreateResponseExpiration; export type GatewayRulesResetExpirationResponseRuleSettingsAddHeadersValueList = Array; export const GatewayRulesResetExpirationResponseRuleSettingsAddHeadersValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayRulesResetExpirationResponseRuleSettingsAddHeadersMap = { [key: string]: | GatewayRulesResetExpirationResponseRuleSettingsAddHeadersValueList | undefined; }; export const GatewayRulesResetExpirationResponseRuleSettingsAddHeadersMap = /*@__PURE__*/ S.Record( S.String, GatewayRulesResetExpirationResponseRuleSettingsAddHeadersValueList, ) as any as S.Schema; export type GatewayRulesResetExpirationResponseRuleSettingsAuditSsh = GatewayRulesCreateResponseRuleSettingsAuditSsh; export const GatewayRulesResetExpirationResponseRuleSettingsAuditSsh = GatewayRulesCreateResponseRuleSettingsAuditSsh; export type GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsCopy = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsCopy = /*@__PURE__*/ S.String; export type GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsDownload = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsDownload = /*@__PURE__*/ S.String; export type GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsKeyboard = | "enabled" | "disabled"; export const GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsKeyboard = /*@__PURE__*/ S.String; export type GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsPaste = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsPaste = /*@__PURE__*/ S.String; export type GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsPrinting = | "enabled" | "disabled"; export const GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsPrinting = /*@__PURE__*/ S.String; export type GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsUpload = | "enabled" | "disabled"; export const GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsUpload = /*@__PURE__*/ S.String; export type GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsVersion = | "v1" | "v2"; export const GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsVersion = /*@__PURE__*/ S.String; export interface GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControls { /** Configure copy behavior. If set to remote_only, users cannot copy isolated content from the remote browser to the local clipboard. If this field is absent, copying remains enabled. Applies only when version == "v2". */ copy?: GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsCopy | null; /** Set to false to enable copy-pasting. Only applies when `version == "v1"`. */ dcp?: boolean | null; /** Set to false to enable downloading. Only applies when `version == "v1"`. */ dd?: boolean | null; /** Set to false to enable keyboard usage. Only applies when `version == "v1"`. */ dk?: boolean | null; /** Configure download behavior. When set to remote_only, users can view downloads but cannot save them. If this field is absent, downloading remains enabled. Applies only when version == "v2". */ download?: GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsDownload | null; /** Set to false to enable printing. Only applies when `version == "v1"`. */ dp?: boolean | null; /** Set to false to enable uploading. Only applies when `version == "v1"`. */ du?: boolean | null; /** Configure keyboard usage behavior. If this field is absent, keyboard usage remains enabled. Applies only when version == "v2". */ keyboard?: GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsKeyboard | null; /** Configure paste behavior. If set to remote_only, users cannot paste content from the local clipboard into isolated pages. If this field is absent, pasting remains enabled. Applies only when version == "v2". */ paste?: GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsPaste | null; /** Configure print behavior. Default, Printing is enabled. Applies only when version == "v2". */ printing?: GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsPrinting | null; /** Configure upload behavior. If this field is absent, uploading remains enabled. Applies only when version == "v2". */ upload?: GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsUpload | null; /** Indicate which version of the browser isolation controls should apply. */ version?: GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsVersion | null; /** Specify the watermark ID (UUID) to apply to the isolated browser session. When present, enables watermark rendering in the isolated browser. */ wmId?: string | null; } export const GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControls = /*@__PURE__*/ S.suspend(() => S.Struct({ copy: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsCopy, ), ), dcp: S.optional(S.NullOr(S.Boolean)), dd: S.optional(S.NullOr(S.Boolean)), dk: S.optional(S.NullOr(S.Boolean)), download: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsDownload, ), ), dp: S.optional(S.NullOr(S.Boolean)), du: S.optional(S.NullOr(S.Boolean)), keyboard: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsKeyboard, ), ), paste: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsPaste, ), ), printing: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsPrinting, ), ), upload: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsUpload, ), ), version: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControlsVersion, ), ), wmId: S.optional(S.NullOr(S.String).pipe(T.Body("wm_id"))), }), ).annotate({ identifier: "GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControls", }) as any as S.Schema; export type GatewayRulesResetExpirationResponseRuleSettingsBlockPage = GatewayRulesCreateResponseRuleSettingsBlockPage; export const GatewayRulesResetExpirationResponseRuleSettingsBlockPage = GatewayRulesCreateResponseRuleSettingsBlockPage; export type GatewayRulesResetExpirationResponseRuleSettingsCheckSession = GatewayRulesCreateResponseRuleSettingsCheckSession; export const GatewayRulesResetExpirationResponseRuleSettingsCheckSession = GatewayRulesCreateResponseRuleSettingsCheckSession; export type GatewayRulesResetExpirationResponseRuleSettingsDnsResolversIpv4Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item; export const GatewayRulesResetExpirationResponseRuleSettingsDnsResolversIpv4Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item; export type GatewayRulesResetExpirationResponseRuleSettingsDnsResolversIpv4List = Array; export const GatewayRulesResetExpirationResponseRuleSettingsDnsResolversIpv4List = /*@__PURE__*/ S.Array( GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item, ) as any as S.Schema; export type GatewayRulesResetExpirationResponseRuleSettingsDnsResolversIpv6Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item; export const GatewayRulesResetExpirationResponseRuleSettingsDnsResolversIpv6Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item; export type GatewayRulesResetExpirationResponseRuleSettingsDnsResolversIpv6List = Array; export const GatewayRulesResetExpirationResponseRuleSettingsDnsResolversIpv6List = /*@__PURE__*/ S.Array( GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item, ) as any as S.Schema; export interface GatewayRulesResetExpirationResponseRuleSettingsDnsResolvers { ipv4?: GatewayRulesResetExpirationResponseRuleSettingsDnsResolversIpv4List | null; ipv6?: GatewayRulesResetExpirationResponseRuleSettingsDnsResolversIpv6List | null; } export const GatewayRulesResetExpirationResponseRuleSettingsDnsResolvers = /*@__PURE__*/ S.suspend(() => S.Struct({ ipv4: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsDnsResolversIpv4List, ), ), ipv6: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsDnsResolversIpv6List, ), ), }), ).annotate({ identifier: "GatewayRulesResetExpirationResponseRuleSettingsDnsResolvers", }) as any as S.Schema; export type GatewayRulesResetExpirationResponseRuleSettingsEgress = GatewayRulesCreateResponseRuleSettingsEgress; export const GatewayRulesResetExpirationResponseRuleSettingsEgress = GatewayRulesCreateResponseRuleSettingsEgress; export type GatewayRulesResetExpirationResponseRuleSettingsForensicCopy = GatewayRulesCreateResponseRuleSettingsForensicCopy; export const GatewayRulesResetExpirationResponseRuleSettingsForensicCopy = GatewayRulesCreateResponseRuleSettingsForensicCopy; export type GatewayRulesResetExpirationResponseRuleSettingsL4override = GatewayRulesCreateResponseRuleSettingsL4override; export const GatewayRulesResetExpirationResponseRuleSettingsL4override = GatewayRulesCreateResponseRuleSettingsL4override; export type GatewayRulesResetExpirationResponseRuleSettingsNotificationSettings = GatewayRulesCreateResponseRuleSettingsNotificationSettings; export const GatewayRulesResetExpirationResponseRuleSettingsNotificationSettings = GatewayRulesCreateResponseRuleSettingsNotificationSettings; export type GatewayRulesResetExpirationResponseRuleSettingsOverrideIpsList = Array; export const GatewayRulesResetExpirationResponseRuleSettingsOverrideIpsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayRulesResetExpirationResponseRuleSettingsPayloadLog = GatewayRulesCreateResponseRuleSettingsPayloadLog; export const GatewayRulesResetExpirationResponseRuleSettingsPayloadLog = GatewayRulesCreateResponseRuleSettingsPayloadLog; export type GatewayRulesResetExpirationResponseRuleSettingsQuarantineFileTypesItem = | "exe" | "pdf" | "doc" | "docm" | "docx" | "rtf" | "ppt" | "pptx" | "xls" | "xlsm" | "xlsx" | "zip" | "rar"; export const GatewayRulesResetExpirationResponseRuleSettingsQuarantineFileTypesItem = /*@__PURE__*/ S.String; export type GatewayRulesResetExpirationResponseRuleSettingsQuarantineFileTypesList = Array; export const GatewayRulesResetExpirationResponseRuleSettingsQuarantineFileTypesList = /*@__PURE__*/ S.Array( GatewayRulesResetExpirationResponseRuleSettingsQuarantineFileTypesItem, ) as any as S.Schema; export interface GatewayRulesResetExpirationResponseRuleSettingsQuarantine { /** Specify the types of files to sandbox. */ fileTypes?: GatewayRulesResetExpirationResponseRuleSettingsQuarantineFileTypesList | null; } export const GatewayRulesResetExpirationResponseRuleSettingsQuarantine = /*@__PURE__*/ S.suspend(() => S.Struct({ fileTypes: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsQuarantineFileTypesList, ).pipe(T.Body("file_types")), ), }), ).annotate({ identifier: "GatewayRulesResetExpirationResponseRuleSettingsQuarantine", }) as any as S.Schema; export type GatewayRulesResetExpirationResponseRuleSettingsRedirect = GatewayRulesCreateResponseRuleSettingsRedirect; export const GatewayRulesResetExpirationResponseRuleSettingsRedirect = GatewayRulesCreateResponseRuleSettingsRedirect; export type GatewayRulesResetExpirationResponseRuleSettingsResolveDnsInternallyFallback = | "none" | "public_dns"; export const GatewayRulesResetExpirationResponseRuleSettingsResolveDnsInternallyFallback = /*@__PURE__*/ S.String; export interface GatewayRulesResetExpirationResponseRuleSettingsResolveDnsInternally { /** Specify the fallback behavior to apply when the internal DNS response code differs from 'NOERROR' or when the response data contains only CNAME records for 'A' or 'AAAA' queries. */ fallback?: GatewayRulesResetExpirationResponseRuleSettingsResolveDnsInternallyFallback | null; /** Specify the internal DNS view identifier to pass to the internal DNS service. */ viewId?: string | null; } export const GatewayRulesResetExpirationResponseRuleSettingsResolveDnsInternally = /*@__PURE__*/ S.suspend(() => S.Struct({ fallback: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsResolveDnsInternallyFallback, ), ), viewId: S.optional(S.NullOr(S.String).pipe(T.Body("view_id"))), }), ).annotate({ identifier: "GatewayRulesResetExpirationResponseRuleSettingsResolveDnsInternally", }) as any as S.Schema; export type GatewayRulesResetExpirationResponseRuleSettingsUntrustedCertAction = | "pass_through" | "block" | "error"; export const GatewayRulesResetExpirationResponseRuleSettingsUntrustedCertAction = /*@__PURE__*/ S.String; export interface GatewayRulesResetExpirationResponseRuleSettingsUntrustedCert { /** Defines the action performed when an untrusted certificate seen. The default action an error with HTTP code 526. */ action?: GatewayRulesResetExpirationResponseRuleSettingsUntrustedCertAction | null; } export const GatewayRulesResetExpirationResponseRuleSettingsUntrustedCert = /*@__PURE__*/ S.suspend(() => S.Struct({ action: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsUntrustedCertAction, ), ), }), ).annotate({ identifier: "GatewayRulesResetExpirationResponseRuleSettingsUntrustedCert", }) as any as S.Schema; export interface GatewayRulesResetExpirationResponseRuleSettings { /** Add custom headers to allowed requests as key-value pairs. Use header names as keys that map to arrays of header values. Settable only for `http` rules with the action set to `allow`. */ addHeaders?: GatewayRulesResetExpirationResponseRuleSettingsAddHeadersMap | null; /** Set to enable MSP children to bypass this rule. Only parent MSP accounts can set this. this rule. Settable for all types of rules. */ allowChildBypass?: boolean | null; /** Define the settings for the Audit SSH action. Settable only for `l4` rules with `audit_ssh` action. */ auditSsh?: GatewayRulesCreateResponseRuleSettingsAuditSsh | null; /** Configure browser isolation behavior. Settable only for `http` rules with the action set to `isolate`. */ bisoAdminControls?: GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControls | null; /** Configure custom block page settings. If missing or null, use the account settings. Settable only for `http` rules with the action set to `block`. */ blockPage?: GatewayRulesCreateResponseRuleSettingsBlockPage | null; /** Enable the custom block page. Settable only for `dns` rules with action `block`. */ blockPageEnabled?: boolean | null; /** Explain why the rule blocks the request. The custom block page shows this text (if enabled). Settable only for `dns`, `l4`, and `http` rules when the action set to `block`. */ blockReason?: string | null; /** Set to enable MSP accounts to bypass their parent's rules. Only MSP child accounts can set this. Settable for all types of rules. */ bypassParentRule?: boolean | null; /** Configure session check behavior. Settable only for `l4` and `http` rules with the action set to `allow`. */ checkSession?: GatewayRulesCreateResponseRuleSettingsCheckSession | null; /** Configure custom resolvers to route queries that match the resolver policy. Unused with 'resolve_dns_through_cloudflare' or 'resolve_dns_internally' settings. DNS queries get routed to the address closest to their origin. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ dnsResolvers?: GatewayRulesResetExpirationResponseRuleSettingsDnsResolvers | null; /** Configure how Gateway Proxy traffic egresses. You can enable this setting for rules with Egress actions and filters, or omit it to indicate local egress via WARP IPs. Settable only for `egress` rules. */ egress?: GatewayRulesCreateResponseRuleSettingsEgress | null; /** Configure whether a copy of the HTTP request will be sent to storage when the rule matches. */ forensicCopy?: GatewayRulesCreateResponseRuleSettingsForensicCopy | null; /** Ignore category matches at CNAME domains in a response. When off, evaluate categories in this rule against all CNAME domain categories in the response. Settable only for `dns` and `dns_resolver` rules. */ ignoreCnameCategoryMatches?: boolean | null; /** Specify whether to disable DNSSEC validation (for Allow actions) [INSECURE]. Settable only for `dns` rules. */ insecureDisableDnssecValidation?: boolean | null; /** Enable IPs in DNS resolver category blocks. The system blocks only domain name categories unless you enable this setting. Settable only for `dns` and `dns_resolver` rules. */ ipCategories?: boolean | null; /** Indicates whether to include IPs in DNS resolver indicator feed blocks. Default, indicator feeds block only domain names. Settable only for `dns` and `dns_resolver` rules. */ ipIndicatorFeeds?: boolean | null; /** Send matching traffic to the supplied destination IP address and port. Settable only for `l4` rules with the action set to `l4_override`. */ l4override?: GatewayRulesCreateResponseRuleSettingsL4override | null; /** Configure a notification to display on the user's device when this rule matched. Settable for all types of rules with the action set to `block`. */ notificationSettings?: GatewayRulesCreateResponseRuleSettingsNotificationSettings | null; /** Defines a hostname for override, for the matching DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideHost?: string | null; /** Defines a an IP or set of IPs for overriding matched DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideIps?: GatewayRulesResetExpirationResponseRuleSettingsOverrideIpsList | null; /** Configure DLP payload logging. Settable only for `http` rules. */ payloadLog?: GatewayRulesCreateResponseRuleSettingsPayloadLog | null; /** Configure settings that apply to quarantine rules. Settable only for `http` rules. */ quarantine?: GatewayRulesResetExpirationResponseRuleSettingsQuarantine | null; /** Apply settings to redirect rules. Settable only for `http` rules with the action set to `redirect`. */ redirect?: GatewayRulesCreateResponseRuleSettingsRedirect | null; /** Configure to forward the query to the internal DNS service, passing the specified 'view_id' as input. Not used when 'dns_resolvers' is specified or 'resolve_dns_through_cloudflare' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsInternally?: GatewayRulesResetExpirationResponseRuleSettingsResolveDnsInternally | null; /** Enable to send queries that match the policy to Cloudflare's default 1.1.1.1 DNS resolver. Cannot set when 'dns_resolvers' specified or 'resolve_dns_internally' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsThroughCloudflare?: boolean | null; /** Configure behavior when an upstream certificate is invalid or an SSL error occurs. Settable only for `http` rules with the action set to `allow`. */ untrustedCert?: GatewayRulesResetExpirationResponseRuleSettingsUntrustedCert | null; } export const GatewayRulesResetExpirationResponseRuleSettings = /*@__PURE__*/ S.suspend(() => S.Struct({ addHeaders: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsAddHeadersMap, ).pipe(T.Body("add_headers")), ), allowChildBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_child_bypass")), ), auditSsh: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsAuditSsh).pipe( T.Body("audit_ssh"), ), ), bisoAdminControls: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsBisoAdminControls, ).pipe(T.Body("biso_admin_controls")), ), blockPage: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsBlockPage).pipe( T.Body("block_page"), ), ), blockPageEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("block_page_enabled")), ), blockReason: S.optional(S.NullOr(S.String).pipe(T.Body("block_reason"))), bypassParentRule: S.optional( S.NullOr(S.Boolean).pipe(T.Body("bypass_parent_rule")), ), checkSession: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsCheckSession).pipe( T.Body("check_session"), ), ), dnsResolvers: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsDnsResolvers, ).pipe(T.Body("dns_resolvers")), ), egress: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsEgress), ), forensicCopy: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsForensicCopy).pipe( T.Body("forensic_copy"), ), ), ignoreCnameCategoryMatches: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ignore_cname_category_matches")), ), insecureDisableDnssecValidation: S.optional( S.NullOr(S.Boolean).pipe(T.Body("insecure_disable_dnssec_validation")), ), ipCategories: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ip_categories")), ), ipIndicatorFeeds: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ip_indicator_feeds")), ), l4override: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsL4override), ), notificationSettings: S.optional( S.NullOr( GatewayRulesCreateResponseRuleSettingsNotificationSettings, ).pipe(T.Body("notification_settings")), ), overrideHost: S.optional( S.NullOr(S.String).pipe(T.Body("override_host")), ), overrideIps: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsOverrideIpsList, ).pipe(T.Body("override_ips")), ), payloadLog: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsPayloadLog).pipe( T.Body("payload_log"), ), ), quarantine: S.optional( S.NullOr(GatewayRulesResetExpirationResponseRuleSettingsQuarantine), ), redirect: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsRedirect), ), resolveDnsInternally: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsResolveDnsInternally, ).pipe(T.Body("resolve_dns_internally")), ), resolveDnsThroughCloudflare: S.optional( S.NullOr(S.Boolean).pipe(T.Body("resolve_dns_through_cloudflare")), ), untrustedCert: S.optional( S.NullOr( GatewayRulesResetExpirationResponseRuleSettingsUntrustedCert, ).pipe(T.Body("untrusted_cert")), ), }), ).annotate({ identifier: "GatewayRulesResetExpirationResponseRuleSettings", }) as any as S.Schema; export type GatewayRulesResetExpirationResponseSchedule = GatewayRulesCreateResponseSchedule; export const GatewayRulesResetExpirationResponseSchedule = GatewayRulesCreateResponseSchedule; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ResetExpirationGatewayRuleResponse { /** Specify the action to perform when the associated traffic, identity, and device posture expressions either absent or evaluate to `true`. */ action: GatewayRulesResetExpirationResponseAction; /** Specify whether the rule is enabled. */ enabled: boolean; /** Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value. */ filters: GatewayRulesResetExpirationResponseFiltersList; /** Specify the rule name. */ name: string; /** Set the order of your rules. Lower values indicate higher precedence. At each processing phase, evaluate applicable rules in ascending order of this value. Refer to [Order of enforcement](http://developers.cloudflare.com/learning-paths/secure-internet-traffic/understand-policies/order-of-enforcement/#manage-precedence-with-terraform) to manage precedence via Terraform. */ precedence: number; /** Specify the wirefilter expression used for traffic matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ traffic: string; /** Identify the API resource with a UUID. */ id?: string | null; createdAt?: string | null; /** Indicate the date of deletion, if any. */ deletedAt?: string | null; /** Specify the rule description. */ description?: string | null; /** Specify the wirefilter expression used for device posture check. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ devicePosture?: string | null; /** Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This does not apply to HTTP or network policies. Settable only for `dns` rules. */ expiration?: GatewayRulesCreateResponseExpiration | null; /** Specify the wirefilter expression used for identity matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ identity?: string | null; /** Indicate that this rule is shared via the Orgs API and read only. */ readOnly?: boolean | null; /** Defines settings for this rule. Settings apply only to specific rule types and must use compatible selectors. If Terraform detects drift, confirm the setting supports your rule type and check whether the API modifies the value. Use API-returned values in your configuration to prevent drift. */ ruleSettings?: GatewayRulesResetExpirationResponseRuleSettings | null; /** Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules. */ schedule?: GatewayRulesCreateResponseSchedule | null; /** Indicate that this rule is sharable via the Orgs API. */ sharable?: boolean | null; /** Provide the account tag of the account that created the rule. */ sourceAccount?: string | null; updatedAt?: string | null; /** Indicate the version number of the rule(read-only). */ version?: number | null; /** Indicate a warning for a misconfigured rule, if any. */ warningStatus?: string | null; } export const ResetExpirationGatewayRuleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ action: GatewayRulesResetExpirationResponseAction, enabled: S.Boolean, filters: GatewayRulesResetExpirationResponseFiltersList, name: S.String, precedence: S.Number, traffic: S.String, id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), description: S.optional(S.NullOr(S.String)), devicePosture: S.optional( S.NullOr(S.String).pipe(T.Body("device_posture")), ), expiration: S.optional(S.NullOr(GatewayRulesCreateResponseExpiration)), identity: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), ruleSettings: S.optional( S.NullOr(GatewayRulesResetExpirationResponseRuleSettings).pipe( T.Body("rule_settings"), ), ), schedule: S.optional(S.NullOr(GatewayRulesCreateResponseSchedule)), sharable: S.optional(S.NullOr(S.Boolean)), sourceAccount: S.optional( S.NullOr(S.String).pipe(T.Body("source_account")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), version: S.optional(S.NullOr(S.Number)), warningStatus: S.optional( S.NullOr(S.String).pipe(T.Body("warning_status")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ResetExpirationGatewayRuleResponse", }) as any as S.Schema; export interface ResetRiskScoringRequest { accountId: string; userId: string; } export const ResetRiskScoringRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), userId: S.String.pipe(T.Label("user_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/zt_risk_scoring/{user_id}/reset", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ResetRiskScoringRequest", }) as any as S.Schema; export type ResetRiskScoringResponse = unknown; export const ResetRiskScoringResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ResetRiskScoringResponse", }) as any as S.Schema; export interface ResumeCasbIntegrationRequest { accountId: string; id: string; } export const ResumeCasbIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String.pipe(T.Label()), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/one/integrations/{id}/resume", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ResumeCasbIntegrationRequest", }) as any as S.Schema; export type ResumeCasbIntegrationResponseApplicationMap = { [key: string]: string | undefined; }; export const ResumeCasbIntegrationResponseApplicationMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export type ResumeCasbIntegrationResponseAuthMethodMap = { [key: string]: string | undefined; }; export const ResumeCasbIntegrationResponseAuthMethodMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export type ResumeCasbIntegrationResponseAuthorizationLinkComponentsMap = { [key: string]: unknown | undefined; }; export const ResumeCasbIntegrationResponseAuthorizationLinkComponentsMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export interface ResumeCasbIntegrationResponseAuthorizationLink { components: ResumeCasbIntegrationResponseAuthorizationLinkComponentsMap; link: string; } export const ResumeCasbIntegrationResponseAuthorizationLink = /*@__PURE__*/ S.suspend(() => S.Struct({ components: ResumeCasbIntegrationResponseAuthorizationLinkComponentsMap, link: S.String, }), ).annotate({ identifier: "ResumeCasbIntegrationResponseAuthorizationLink", }) as any as S.Schema; export type ResumeCasbIntegrationResponseDlpProfilesList = Array; export const ResumeCasbIntegrationResponseDlpProfilesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type ResumeCasbIntegrationResponseHealthDetailsItemMap = { [key: string]: unknown | undefined; }; export const ResumeCasbIntegrationResponseHealthDetailsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type ResumeCasbIntegrationResponseHealthDetailsList = Array; export const ResumeCasbIntegrationResponseHealthDetailsList = /*@__PURE__*/ S.Array( ResumeCasbIntegrationResponseHealthDetailsItemMap, ) as any as S.Schema; export type ResumeCasbIntegrationResponseUseCasesItemMap = { [key: string]: unknown | undefined; }; export const ResumeCasbIntegrationResponseUseCasesItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type ResumeCasbIntegrationResponseUseCasesList = Array; export const ResumeCasbIntegrationResponseUseCasesList = /*@__PURE__*/ S.Array( ResumeCasbIntegrationResponseUseCasesItemMap, ) as any as S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface ResumeCasbIntegrationResponse { /** Integration ID. */ id: string; application: ResumeCasbIntegrationResponseApplicationMap; /** The integration's authentication method. */ authMethod: ResumeCasbIntegrationResponseAuthMethodMap; /** Authorization link for the integration. */ authorizationLink: ResumeCasbIntegrationResponseAuthorizationLink; /** When the integration was created. */ created: string; /** Credentials expiry time. */ credentialsExpiry: string; /** DLP Profiles enabled for the integration. */ dlpProfiles: ResumeCasbIntegrationResponseDlpProfilesList; /** Health details with remediation hints. */ healthDetails: ResumeCasbIntegrationResponseHealthDetailsList; /** Whether the user paused the integration. */ isPaused: boolean; /** Last time the integration was hydrated. */ lastHydrated: string; /** Name of the integration. */ name: string; /** Organization ID. */ organizationId: number; /** Integration status. */ status: string; /** When the integration was last updated. */ updated: string; /** Use cases enabled for the integration. */ useCases: ResumeCasbIntegrationResponseUseCasesList; } export const ResumeCasbIntegrationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, application: ResumeCasbIntegrationResponseApplicationMap, authMethod: ResumeCasbIntegrationResponseAuthMethodMap.pipe( T.Body("auth_method"), ), authorizationLink: ResumeCasbIntegrationResponseAuthorizationLink.pipe( T.Body("authorization_link"), ), created: S.String, credentialsExpiry: S.String.pipe(T.Body("credentials_expiry")), dlpProfiles: ResumeCasbIntegrationResponseDlpProfilesList.pipe( T.Body("dlp_profiles"), ), healthDetails: ResumeCasbIntegrationResponseHealthDetailsList.pipe( T.Body("health_details"), ), isPaused: S.Boolean.pipe(T.Body("is_paused")), lastHydrated: S.String.pipe(T.Body("last_hydrated")), name: S.String, organizationId: S.Number.pipe(T.Body("organization_id")), status: S.String, updated: S.String, useCases: ResumeCasbIntegrationResponseUseCasesList.pipe( T.Body("use_cases"), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ResumeCasbIntegrationResponse", }) as any as S.Schema; export interface RevokeDeviceDevicesRequest { accountId: string; deviceId: string; } export const RevokeDeviceDevicesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), deviceId: S.String.pipe(T.Label("device_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/devices/physical-devices/{device_id}/revoke", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RevokeDeviceDevicesRequest", }) as any as S.Schema; export type RevokeDeviceDevicesResponse = unknown; export const RevokeDeviceDevicesResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RevokeDeviceDevicesResponse", }) as any as S.Schema; export type DevicesRegistrationsRevokeRequestIdList = Array; export const DevicesRegistrationsRevokeRequestIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface RevokeDeviceRegistrationRequest { accountId: string; /** A list of registration IDs to revoke. */ id: DevicesRegistrationsRevokeRequestIdList; } export const RevokeDeviceRegistrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: DevicesRegistrationsRevokeRequestIdList.pipe(T.Query()), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/devices/registrations/revoke", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RevokeDeviceRegistrationRequest", }) as any as S.Schema; export type RevokeDeviceRegistrationResponse = unknown; export const RevokeDeviceRegistrationResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RevokeDeviceRegistrationResponse", }) as any as S.Schema; export interface RevokeTokensAccessApplicationForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** Identifier. */ appId: string; } export const RevokeTokensAccessApplicationForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), appId: S.String.pipe(T.Label("app_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/apps/{app_id}/revoke_tokens", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RevokeTokensAccessApplicationForAccountRequest", }) as any as S.Schema; export type RevokeTokensAccessApplicationResponse = unknown; export const RevokeTokensAccessApplicationResponse = /*@__PURE__*/ S.suspend( () => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RevokeTokensAccessApplicationResponse", }) as any as S.Schema; export interface RevokeTokensAccessApplicationForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** Identifier. */ appId: string; } export const RevokeTokensAccessApplicationForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), appId: S.String.pipe(T.Label("app_id")), }) .pipe( T.Http({ method: "POST", uri: "/zones/{zone_id}/access/apps/{app_id}/revoke_tokens", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RevokeTokensAccessApplicationForZoneRequest", }) as any as S.Schema; export interface RevokeUsersOrganizationForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** When set to `true`, all devices associated with the user will be revoked. */ devices?: boolean; /** The email of the user to revoke. */ email: string; /** The uuid of the user to revoke. */ userUid?: string; /** When set to `true`, the user will be required to re-authenticate to WARP for all Gateway policies that enforce a WARP client session duration. When `false`, the user’s WARP session will remain active */ warpSessionReauth?: boolean; } export const RevokeUsersOrganizationForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), devices: S.optional(S.Boolean.pipe(T.Query())), email: S.String, userUid: S.optional(S.String.pipe(T.Body("user_uid"))), warpSessionReauth: S.optional( S.Boolean.pipe(T.Body("warp_session_reauth")), ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/organizations/revoke_user", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RevokeUsersOrganizationForAccountRequest", }) as any as S.Schema; export type RevokeUsersOrganizationResponse = boolean; export const RevokeUsersOrganizationResponse = /*@__PURE__*/ S.suspend(() => S.Boolean.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RevokeUsersOrganizationResponse", }) as any as S.Schema; export interface RevokeUsersOrganizationForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** When set to `true`, all devices associated with the user will be revoked. */ devices?: boolean; /** The email of the user to revoke. */ email: string; /** The uuid of the user to revoke. */ userUid?: string; /** When set to `true`, the user will be required to re-authenticate to WARP for all Gateway policies that enforce a WARP client session duration. When `false`, the user’s WARP session will remain active */ warpSessionReauth?: boolean; } export const RevokeUsersOrganizationForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), devices: S.optional(S.Boolean.pipe(T.Query())), email: S.String, userUid: S.optional(S.String.pipe(T.Body("user_uid"))), warpSessionReauth: S.optional( S.Boolean.pipe(T.Body("warp_session_reauth")), ), }) .pipe( T.Http({ method: "POST", uri: "/zones/{zone_id}/access/organizations/revoke_user", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RevokeUsersOrganizationForZoneRequest", }) as any as S.Schema; export interface RotateAccessKeyRequest { /** Identifier. */ accountId: string; } export const RotateAccessKeyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/keys/rotate", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RotateAccessKeyRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface RotateAccessKeyResponse { /** The number of days until the next key rotation. */ daysUntilNextRotation?: number | null; /** The number of days between key rotations. */ keyRotationIntervalDays?: number | null; /** The timestamp of the previous key rotation. */ lastKeyRotationAt?: string | null; } export const RotateAccessKeyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ daysUntilNextRotation: S.optional( S.NullOr(S.Number).pipe(T.Body("days_until_next_rotation")), ), keyRotationIntervalDays: S.optional( S.NullOr(S.Number).pipe(T.Body("key_rotation_interval_days")), ), lastKeyRotationAt: S.optional( S.NullOr(S.String).pipe(T.Body("last_key_rotation_at")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RotateAccessKeyResponse", }) as any as S.Schema; export interface RotateAccessSamlCertificateRequest { /** Identifier. */ accountId: string; /** UUID. */ samlCertSetId: string; } export const RotateAccessSamlCertificateRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), samlCertSetId: S.String.pipe(T.Label("saml_cert_set_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/saml_certificates/{saml_cert_set_id}/rotate", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RotateAccessSamlCertificateRequest", }) as any as S.Schema; export type AccessSamlCertificatesRotateResponseCurrentCertificate = AccessSamlCertificatesGetResponseCurrentCertificate; export const AccessSamlCertificatesRotateResponseCurrentCertificate = AccessSamlCertificatesGetResponseCurrentCertificate; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface RotateAccessSamlCertificateResponse { /** When the certificate set was created */ createdAt: string; /** Unique identifier for the certificate set */ uid: string; /** When the certificate set was last updated */ updatedAt: string; /** The current active certificate */ currentCertificate?: AccessSamlCertificatesGetResponseCurrentCertificate | null; /** The previous certificate (maintained during rotation period). May be null when no rotation has occurred. Mirrors the structure of `saml_certificate`. */ previousCertificate?: unknown | null; } export const RotateAccessSamlCertificateResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ createdAt: S.String.pipe(T.Body("created_at")), uid: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), currentCertificate: S.optional( S.NullOr(AccessSamlCertificatesGetResponseCurrentCertificate).pipe( T.Body("current_certificate"), ), ), previousCertificate: S.optional( S.NullOr(S.Unknown).pipe(T.Body("previous_certificate")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RotateAccessSamlCertificateResponse", }) as any as S.Schema; export interface RotateAccessServiceTokenRequest { /** Identifier. */ accountId: string; /** UUID. */ serviceTokenId: string; /** The expiration of the previous `client_secret`. If not provided, it defaults to the current timestamp in order to immediately expire the previous secret. */ previousClientSecretExpiresAt?: string; } export const RotateAccessServiceTokenRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), serviceTokenId: S.String.pipe(T.Label("service_token_id")), previousClientSecretExpiresAt: S.optional( S.String.pipe(T.Body("previous_client_secret_expires_at")), ), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/service_tokens/{service_token_id}/rotate", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RotateAccessServiceTokenRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface RotateAccessServiceTokenResponse { /** The ID of the service token. */ id?: string | null; /** The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header. */ clientId?: string | null; /** The Client Secret for the service token. Access will check for this value in the `CF-Access-Client-Secret` request header. */ clientSecret?: string | null; /** The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h). */ duration?: string | null; /** The name of the service token. */ name?: string | null; } export const RotateAccessServiceTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional(S.NullOr(S.String).pipe(T.Body("client_secret"))), duration: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RotateAccessServiceTokenResponse", }) as any as S.Schema; export interface RotateSeedGatewayAuditSshSettingRequest { accountId: string; } export const RotateSeedGatewayAuditSshSettingRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/gateway/audit_ssh_settings/rotate_seed", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RotateSeedGatewayAuditSshSettingRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface RotateSeedGatewayAuditSshSettingResponse { createdAt?: string | null; /** Provide the Base64-encoded HPKE public key that encrypts SSH session logs. See https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/#enable-ssh-command-logging. */ publicKey?: string | null; /** Identify the seed ID. */ seedId?: string | null; updatedAt?: string | null; } export const RotateSeedGatewayAuditSshSettingResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), seedId: S.optional(S.NullOr(S.String).pipe(T.Body("seed_id"))), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "RotateSeedGatewayAuditSshSettingResponse", }) as any as S.Schema; export interface SyncAccessAiControlMcpServerRequest { accountId: string; /** portal id */ id: string; } export const SyncAccessAiControlMcpServerRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String.pipe(T.Label()), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/access/ai-controls/mcp/servers/{id}/sync", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "SyncAccessAiControlMcpServerRequest", }) as any as S.Schema; export type AccessAiControlsMcpServersSyncResponseErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export const AccessAiControlsMcpServersSyncResponseErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface SyncAccessAiControlMcpServerResponse { error?: string | null; errorDetails?: AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails | null; status?: string | null; } export const SyncAccessAiControlMcpServerResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ error: S.optional(S.NullOr(S.String)), errorDetails: S.optional( S.NullOr( AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails, ).pipe(T.Body("error_details")), ), status: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "SyncAccessAiControlMcpServerResponse", }) as any as S.Schema; export type DexTracerouteTestsNetworkPathRequestInterval = "minute" | "hour"; export const DexTracerouteTestsNetworkPathRequestInterval = /*@__PURE__*/ S.String; export interface TestNetworkPathDexTracerouteRequest { /** Unique identifier linked to an account. */ accountId: string; /** API Resource UUID tag. */ testId: string; /** Device to filter traceroute result runs to. */ deviceId: string; /** Start time for aggregate metrics in ISO ms. */ from: string; /** Time interval for aggregate time slots. */ interval: DexTracerouteTestsNetworkPathRequestInterval | (string & {}); /** End time for aggregate metrics in ISO ms. */ to: string; } export const TestNetworkPathDexTracerouteRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), testId: S.String.pipe(T.Label("test_id")), deviceId: S.String.pipe(T.Query()), from: S.String.pipe(T.Query()), interval: DexTracerouteTestsNetworkPathRequestInterval.pipe(T.Query()), to: S.String.pipe(T.Query()), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/traceroute-tests/{test_id}/network-path", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "TestNetworkPathDexTracerouteRequest", }) as any as S.Schema; export type DexTracerouteTestsNetworkPathResponseKind = "traceroute"; export const DexTracerouteTestsNetworkPathResponseKind = /*@__PURE__*/ S.String; export interface DexTracerouteTestsNetworkPathResponseNetworkPathSlotsItem { /** API Resource UUID tag. */ id: string; /** Round trip time in ms of the client to app mile */ clientToAppRttMs: number; /** Round trip time in ms of the client to Cloudflare egress mile */ clientToCfEgressRttMs: number; /** Round trip time in ms of the client to Cloudflare ingress mile */ clientToCfIngressRttMs: number; timestamp: string; /** Round trip time in ms of the client to ISP mile */ clientToIspRttMs?: number | null; } export const DexTracerouteTestsNetworkPathResponseNetworkPathSlotsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, clientToAppRttMs: S.Number, clientToCfEgressRttMs: S.Number, clientToCfIngressRttMs: S.Number, timestamp: S.String, clientToIspRttMs: S.optional(S.NullOr(S.Number)), }), ).annotate({ identifier: "DexTracerouteTestsNetworkPathResponseNetworkPathSlotsItem", }) as any as S.Schema; export type DexTracerouteTestsNetworkPathResponseNetworkPathSlotsList = Array; export const DexTracerouteTestsNetworkPathResponseNetworkPathSlotsList = /*@__PURE__*/ S.Array( DexTracerouteTestsNetworkPathResponseNetworkPathSlotsItem, ) as any as S.Schema; export type DexTracerouteTestsNetworkPathResponseNetworkPathSamplingUnit = "hours"; export const DexTracerouteTestsNetworkPathResponseNetworkPathSamplingUnit = /*@__PURE__*/ S.String; export interface DexTracerouteTestsNetworkPathResponseNetworkPathSampling { unit: DexTracerouteTestsNetworkPathResponseNetworkPathSamplingUnit; value: number; } export const DexTracerouteTestsNetworkPathResponseNetworkPathSampling = /*@__PURE__*/ S.suspend(() => S.Struct({ unit: DexTracerouteTestsNetworkPathResponseNetworkPathSamplingUnit, value: S.Number, }), ).annotate({ identifier: "DexTracerouteTestsNetworkPathResponseNetworkPathSampling", }) as any as S.Schema; export interface DexTracerouteTestsNetworkPathResponseNetworkPath { slots: DexTracerouteTestsNetworkPathResponseNetworkPathSlotsList; /** Specifies the sampling applied, if any, to the slots response. When sampled, results shown represent the first test run to the start of each sampling interval. */ sampling?: DexTracerouteTestsNetworkPathResponseNetworkPathSampling | null; } export const DexTracerouteTestsNetworkPathResponseNetworkPath = /*@__PURE__*/ S.suspend(() => S.Struct({ slots: DexTracerouteTestsNetworkPathResponseNetworkPathSlotsList, sampling: S.optional( S.NullOr(DexTracerouteTestsNetworkPathResponseNetworkPathSampling), ), }), ).annotate({ identifier: "DexTracerouteTestsNetworkPathResponseNetworkPath", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface TestNetworkPathDexTracerouteResponse { /** API Resource UUID tag. */ id: string; /** Name of the device that ran the test. */ deviceName?: string | null; /** The interval at which the Traceroute synthetic application test is set to run. */ interval?: string | null; kind?: DexTracerouteTestsNetworkPathResponseKind | null; name?: string | null; networkPath?: DexTracerouteTestsNetworkPathResponseNetworkPath | null; /** The host of the Traceroute synthetic application test. */ url?: string | null; } export const TestNetworkPathDexTracerouteResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, deviceName: S.optional(S.NullOr(S.String)), interval: S.optional(S.NullOr(S.String)), kind: S.optional(S.NullOr(DexTracerouteTestsNetworkPathResponseKind)), name: S.optional(S.NullOr(S.String)), networkPath: S.optional( S.NullOr(DexTracerouteTestsNetworkPathResponseNetworkPath), ), url: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "TestNetworkPathDexTracerouteResponse", }) as any as S.Schema; export type DexTracerouteTestsPercentilesRequestDeviceIdList = Array; export const DexTracerouteTestsPercentilesRequestDeviceIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface TestPercentilesDexTracerouteRequest { /** Unique identifier linked to an account. */ accountId: string; /** API Resource UUID tag. */ testId: string; /** Start time for the query in ISO (RFC3339 - ISO 8601) format. */ from: string; /** End time for the query in ISO (RFC3339 - ISO 8601) format. */ to: string; /** Optionally filter result stats to a Cloudflare colo. Cannot be used in combination with deviceId param. */ colo?: string; /** Optionally filter result stats to a specific device(s). Cannot be used in combination with colo param. */ deviceId?: DexTracerouteTestsPercentilesRequestDeviceIdList; } export const TestPercentilesDexTracerouteRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), testId: S.String.pipe(T.Label("test_id")), from: S.String.pipe(T.Query()), to: S.String.pipe(T.Query()), colo: S.optional(S.String.pipe(T.Query())), deviceId: S.optional( DexTracerouteTestsPercentilesRequestDeviceIdList.pipe(T.Query()), ), }) .pipe( T.Http({ method: "GET", uri: "/accounts/{account_id}/dex/traceroute-tests/{test_id}/percentiles", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "TestPercentilesDexTracerouteRequest", }) as any as S.Schema; export type DexTracerouteTestsPercentilesResponseHopsCount = DexHttpTestsPercentilesGetResponseDnsResponseTimeMs; export const DexTracerouteTestsPercentilesResponseHopsCount = DexHttpTestsPercentilesGetResponseDnsResponseTimeMs; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface TestPercentilesDexTracerouteResponse { hopsCount?: DexHttpTestsPercentilesGetResponseDnsResponseTimeMs | null; packetLossPct?: DexHttpTestsPercentilesGetResponseDnsResponseTimeMs | null; roundTripTimeMs?: DexHttpTestsPercentilesGetResponseDnsResponseTimeMs | null; } export const TestPercentilesDexTracerouteResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ hopsCount: S.optional( S.NullOr(DexHttpTestsPercentilesGetResponseDnsResponseTimeMs), ), packetLossPct: S.optional( S.NullOr(DexHttpTestsPercentilesGetResponseDnsResponseTimeMs), ), roundTripTimeMs: S.optional( S.NullOr(DexHttpTestsPercentilesGetResponseDnsResponseTimeMs), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "TestPercentilesDexTracerouteResponse", }) as any as S.Schema; export type DevicesRegistrationsUnrevokeRequestIdList = Array; export const DevicesRegistrationsUnrevokeRequestIdList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface UnrevokeDeviceRegistrationRequest { accountId: string; /** A list of registration IDs to unrevoke. */ id: DevicesRegistrationsUnrevokeRequestIdList; } export const UnrevokeDeviceRegistrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: DevicesRegistrationsUnrevokeRequestIdList.pipe(T.Query()), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/devices/registrations/unrevoke", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UnrevokeDeviceRegistrationRequest", }) as any as S.Schema; export type UnrevokeDeviceRegistrationResponse = unknown; export const UnrevokeDeviceRegistrationResponse = /*@__PURE__*/ S.suspend(() => S.Unknown.pipe(T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UnrevokeDeviceRegistrationResponse", }) as any as S.Schema; export type AccessAiControlsMcpPortalsUpdateRequestServersItemUpdatedPromptsItem = AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem; export const AccessAiControlsMcpPortalsUpdateRequestServersItemUpdatedPromptsItem = AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem; export type AccessAiControlsMcpPortalsUpdateRequestServersItemUpdatedPromptsList = Array; export const AccessAiControlsMcpPortalsUpdateRequestServersItemUpdatedPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem, ) as any as S.Schema; export type AccessAiControlsMcpPortalsUpdateRequestServersItemUpdatedToolsItem = AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem; export const AccessAiControlsMcpPortalsUpdateRequestServersItemUpdatedToolsItem = AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem; export type AccessAiControlsMcpPortalsUpdateRequestServersItemUpdatedToolsList = Array; export const AccessAiControlsMcpPortalsUpdateRequestServersItemUpdatedToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem, ) as any as S.Schema; export interface AccessAiControlsMcpPortalsUpdateRequestServersItem { /** server id */ serverId: string; defaultDisabled?: boolean; onBehalf?: boolean; updatedPrompts?: AccessAiControlsMcpPortalsUpdateRequestServersItemUpdatedPromptsList; updatedTools?: AccessAiControlsMcpPortalsUpdateRequestServersItemUpdatedToolsList; } export const AccessAiControlsMcpPortalsUpdateRequestServersItem = /*@__PURE__*/ S.suspend(() => S.Struct({ serverId: S.String.pipe(T.Body("server_id")), defaultDisabled: S.optional(S.Boolean.pipe(T.Body("default_disabled"))), onBehalf: S.optional(S.Boolean.pipe(T.Body("on_behalf"))), updatedPrompts: S.optional( AccessAiControlsMcpPortalsUpdateRequestServersItemUpdatedPromptsList.pipe( T.Body("updated_prompts"), ), ), updatedTools: S.optional( AccessAiControlsMcpPortalsUpdateRequestServersItemUpdatedToolsList.pipe( T.Body("updated_tools"), ), ), }), ).annotate({ identifier: "AccessAiControlsMcpPortalsUpdateRequestServersItem", }) as any as S.Schema; export type AccessAiControlsMcpPortalsUpdateRequestServersList = Array; export const AccessAiControlsMcpPortalsUpdateRequestServersList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsUpdateRequestServersItem, ) as any as S.Schema; export interface UpdateAccessAiControlMcpPortalRequest { accountId: string; /** portal id */ id: string; /** Allow remote code execution in Dynamic Workers (beta) */ allowCodeMode?: boolean; description?: string; hostname?: string; name?: string; /** Route outbound MCP traffic through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean; servers?: AccessAiControlsMcpPortalsUpdateRequestServersList; } export const UpdateAccessAiControlMcpPortalRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String.pipe(T.Label()), allowCodeMode: S.optional(S.Boolean.pipe(T.Body("allow_code_mode"))), description: S.optional(S.String), hostname: S.optional(S.String), name: S.optional(S.String), secureWebGateway: S.optional( S.Boolean.pipe(T.Body("secure_web_gateway")), ), servers: S.optional(AccessAiControlsMcpPortalsUpdateRequestServersList), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/ai-controls/mcp/portals/{id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessAiControlMcpPortalRequest", }) as any as S.Schema; export type AccessAiControlsMcpPortalsUpdateResponseServersItemAuthType = | "oauth" | "bearer" | "unauthenticated"; export const AccessAiControlsMcpPortalsUpdateResponseServersItemAuthType = /*@__PURE__*/ S.String; export type AccessAiControlsMcpPortalsUpdateResponseServersItemPromptsItemMap = { [key: string]: unknown | undefined }; export const AccessAiControlsMcpPortalsUpdateResponseServersItemPromptsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpPortalsUpdateResponseServersItemPromptsList = Array; export const AccessAiControlsMcpPortalsUpdateResponseServersItemPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsUpdateResponseServersItemPromptsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpPortalsUpdateResponseServersItemToolsItemMap = { [key: string]: unknown | undefined; }; export const AccessAiControlsMcpPortalsUpdateResponseServersItemToolsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpPortalsUpdateResponseServersItemToolsList = Array; export const AccessAiControlsMcpPortalsUpdateResponseServersItemToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsUpdateResponseServersItemToolsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpPortalsUpdateResponseServersItemErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export const AccessAiControlsMcpPortalsUpdateResponseServersItemErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export type AccessAiControlsMcpPortalsUpdateResponseServersItemUpdatedPromptsItem = AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem; export const AccessAiControlsMcpPortalsUpdateResponseServersItemUpdatedPromptsItem = AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem; export type AccessAiControlsMcpPortalsUpdateResponseServersItemUpdatedPromptsList = Array; export const AccessAiControlsMcpPortalsUpdateResponseServersItemUpdatedPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem, ) as any as S.Schema; export type AccessAiControlsMcpPortalsUpdateResponseServersItemUpdatedToolsItem = AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem; export const AccessAiControlsMcpPortalsUpdateResponseServersItemUpdatedToolsItem = AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem; export type AccessAiControlsMcpPortalsUpdateResponseServersItemUpdatedToolsList = Array; export const AccessAiControlsMcpPortalsUpdateResponseServersItemUpdatedToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateResponseServersItemUpdatedPromptsItem, ) as any as S.Schema; export interface AccessAiControlsMcpPortalsUpdateResponseServersItem { /** server id */ id: string; authType: AccessAiControlsMcpPortalsUpdateResponseServersItemAuthType; hostname: string; name: string; prompts: AccessAiControlsMcpPortalsUpdateResponseServersItemPromptsList; /** server id */ serverId: string; tools: AccessAiControlsMcpPortalsUpdateResponseServersItemToolsList; createdAt?: string | null; createdBy?: string | null; defaultDisabled?: boolean | null; description?: string | null; error?: string | null; errorDetails?: AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails | null; /** When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true. Effective behavior is gated by the gateway worker's per-env rollout mode KV key. */ isSharedOauthCallbackEnabled?: boolean | null; lastSuccessfulSync?: string | null; lastSynced?: string | null; modifiedAt?: string | null; modifiedBy?: string | null; onBehalf?: boolean | null; /** Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean | null; status?: string | null; updatedPrompts?: AccessAiControlsMcpPortalsUpdateResponseServersItemUpdatedPromptsList | null; updatedTools?: AccessAiControlsMcpPortalsUpdateResponseServersItemUpdatedToolsList | null; } export const AccessAiControlsMcpPortalsUpdateResponseServersItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, authType: AccessAiControlsMcpPortalsUpdateResponseServersItemAuthType.pipe( T.Body("auth_type"), ), hostname: S.String, name: S.String, prompts: AccessAiControlsMcpPortalsUpdateResponseServersItemPromptsList, serverId: S.String.pipe(T.Body("server_id")), tools: AccessAiControlsMcpPortalsUpdateResponseServersItemToolsList, createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), createdBy: S.optional(S.NullOr(S.String).pipe(T.Body("created_by"))), defaultDisabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("default_disabled")), ), description: S.optional(S.NullOr(S.String)), error: S.optional(S.NullOr(S.String)), errorDetails: S.optional( S.NullOr( AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails, ).pipe(T.Body("error_details")), ), isSharedOauthCallbackEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_shared_oauth_callback_enabled")), ), lastSuccessfulSync: S.optional( S.NullOr(S.String).pipe(T.Body("last_successful_sync")), ), lastSynced: S.optional(S.NullOr(S.String).pipe(T.Body("last_synced"))), modifiedAt: S.optional(S.NullOr(S.String).pipe(T.Body("modified_at"))), modifiedBy: S.optional(S.NullOr(S.String).pipe(T.Body("modified_by"))), onBehalf: S.optional(S.NullOr(S.Boolean).pipe(T.Body("on_behalf"))), secureWebGateway: S.optional( S.NullOr(S.Boolean).pipe(T.Body("secure_web_gateway")), ), status: S.optional(S.NullOr(S.String)), updatedPrompts: S.optional( S.NullOr( AccessAiControlsMcpPortalsUpdateResponseServersItemUpdatedPromptsList, ).pipe(T.Body("updated_prompts")), ), updatedTools: S.optional( S.NullOr( AccessAiControlsMcpPortalsUpdateResponseServersItemUpdatedToolsList, ).pipe(T.Body("updated_tools")), ), }), ).annotate({ identifier: "AccessAiControlsMcpPortalsUpdateResponseServersItem", }) as any as S.Schema; export type AccessAiControlsMcpPortalsUpdateResponseServersList = Array; export const AccessAiControlsMcpPortalsUpdateResponseServersList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsUpdateResponseServersItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateAccessAiControlMcpPortalResponse { /** portal id */ id: string; hostname: string; name: string; servers: AccessAiControlsMcpPortalsUpdateResponseServersList; /** Allow remote code execution in Dynamic Workers (beta) */ allowCodeMode?: boolean | null; createdAt?: string | null; createdBy?: string | null; description?: string | null; modifiedAt?: string | null; modifiedBy?: string | null; /** Route outbound MCP traffic through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean | null; } export const UpdateAccessAiControlMcpPortalResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, hostname: S.String, name: S.String, servers: AccessAiControlsMcpPortalsUpdateResponseServersList, allowCodeMode: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_code_mode")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), createdBy: S.optional(S.NullOr(S.String).pipe(T.Body("created_by"))), description: S.optional(S.NullOr(S.String)), modifiedAt: S.optional(S.NullOr(S.String).pipe(T.Body("modified_at"))), modifiedBy: S.optional(S.NullOr(S.String).pipe(T.Body("modified_by"))), secureWebGateway: S.optional( S.NullOr(S.Boolean).pipe(T.Body("secure_web_gateway")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessAiControlMcpPortalResponse", }) as any as S.Schema; export type AccessAiControlsMcpServersUpdateRequestUpdatedPromptsItem = AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem; export const AccessAiControlsMcpServersUpdateRequestUpdatedPromptsItem = AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem; export type AccessAiControlsMcpServersUpdateRequestUpdatedPromptsList = Array; export const AccessAiControlsMcpServersUpdateRequestUpdatedPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem, ) as any as S.Schema; export type AccessAiControlsMcpServersUpdateRequestUpdatedToolsItem = AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem; export const AccessAiControlsMcpServersUpdateRequestUpdatedToolsItem = AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem; export type AccessAiControlsMcpServersUpdateRequestUpdatedToolsList = Array; export const AccessAiControlsMcpServersUpdateRequestUpdatedToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpPortalsCreateRequestServersItemUpdatedPromptsItem, ) as any as S.Schema; export interface UpdateAccessAiControlMcpServerRequest { accountId: string; /** server id */ id: string; authCredentials?: string; description?: string; /** When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true. Effective behavior is gated by the gateway worker's per-env rollout mode KV key. */ isSharedOauthCallbackEnabled?: boolean; name?: string; /** Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean; updatedPrompts?: AccessAiControlsMcpServersUpdateRequestUpdatedPromptsList; updatedTools?: AccessAiControlsMcpServersUpdateRequestUpdatedToolsList; } export const UpdateAccessAiControlMcpServerRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String.pipe(T.Label()), authCredentials: S.optional(S.String.pipe(T.Body("auth_credentials"))), description: S.optional(S.String), isSharedOauthCallbackEnabled: S.optional( S.Boolean.pipe(T.Body("is_shared_oauth_callback_enabled")), ), name: S.optional(S.String), secureWebGateway: S.optional( S.Boolean.pipe(T.Body("secure_web_gateway")), ), updatedPrompts: S.optional( AccessAiControlsMcpServersUpdateRequestUpdatedPromptsList.pipe( T.Body("updated_prompts"), ), ), updatedTools: S.optional( AccessAiControlsMcpServersUpdateRequestUpdatedToolsList.pipe( T.Body("updated_tools"), ), ), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/ai-controls/mcp/servers/{id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessAiControlMcpServerRequest", }) as any as S.Schema; export type AccessAiControlsMcpServersUpdateResponseAuthType = | "oauth" | "bearer" | "unauthenticated"; export const AccessAiControlsMcpServersUpdateResponseAuthType = /*@__PURE__*/ S.String; export type AccessAiControlsMcpServersUpdateResponsePromptsItemMap = { [key: string]: unknown | undefined; }; export const AccessAiControlsMcpServersUpdateResponsePromptsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpServersUpdateResponsePromptsList = Array; export const AccessAiControlsMcpServersUpdateResponsePromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersUpdateResponsePromptsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpServersUpdateResponseToolsItemMap = { [key: string]: unknown | undefined; }; export const AccessAiControlsMcpServersUpdateResponseToolsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type AccessAiControlsMcpServersUpdateResponseToolsList = Array; export const AccessAiControlsMcpServersUpdateResponseToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersUpdateResponseToolsItemMap, ) as any as S.Schema; export type AccessAiControlsMcpServersUpdateResponseErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export const AccessAiControlsMcpServersUpdateResponseErrorDetails = AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails; export type AccessAiControlsMcpServersUpdateResponseUpdatedPromptsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export const AccessAiControlsMcpServersUpdateResponseUpdatedPromptsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export type AccessAiControlsMcpServersUpdateResponseUpdatedPromptsList = Array; export const AccessAiControlsMcpServersUpdateResponseUpdatedPromptsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem, ) as any as S.Schema; export type AccessAiControlsMcpServersUpdateResponseUpdatedToolsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export const AccessAiControlsMcpServersUpdateResponseUpdatedToolsItem = AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem; export type AccessAiControlsMcpServersUpdateResponseUpdatedToolsList = Array; export const AccessAiControlsMcpServersUpdateResponseUpdatedToolsList = /*@__PURE__*/ S.Array( AccessAiControlsMcpServersCreateResponseUpdatedPromptsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateAccessAiControlMcpServerResponse { /** server id */ id: string; authType: AccessAiControlsMcpServersUpdateResponseAuthType; hostname: string; name: string; prompts: AccessAiControlsMcpServersUpdateResponsePromptsList; tools: AccessAiControlsMcpServersUpdateResponseToolsList; createdAt?: string | null; createdBy?: string | null; description?: string | null; error?: string | null; errorDetails?: AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails | null; /** When true, the gateway worker uses the shared Cloudflare-owned OAuth callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the customer portal hostname. Defaults to false (off); opt in per server by setting true. Effective behavior is gated by the gateway worker's per-env rollout mode KV key. */ isSharedOauthCallbackEnabled?: boolean | null; lastSuccessfulSync?: string | null; lastSynced?: string | null; modifiedAt?: string | null; modifiedBy?: string | null; /** Route outbound traffic to this MCP server through Zero Trust Secure Web Gateway */ secureWebGateway?: boolean | null; status?: string | null; updatedPrompts?: AccessAiControlsMcpServersUpdateResponseUpdatedPromptsList | null; updatedTools?: AccessAiControlsMcpServersUpdateResponseUpdatedToolsList | null; } export const UpdateAccessAiControlMcpServerResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, authType: AccessAiControlsMcpServersUpdateResponseAuthType.pipe( T.Body("auth_type"), ), hostname: S.String, name: S.String, prompts: AccessAiControlsMcpServersUpdateResponsePromptsList, tools: AccessAiControlsMcpServersUpdateResponseToolsList, createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), createdBy: S.optional(S.NullOr(S.String).pipe(T.Body("created_by"))), description: S.optional(S.NullOr(S.String)), error: S.optional(S.NullOr(S.String)), errorDetails: S.optional( S.NullOr( AccessAiControlsMcpPortalsCreateResponseServersItemErrorDetails, ).pipe(T.Body("error_details")), ), isSharedOauthCallbackEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_shared_oauth_callback_enabled")), ), lastSuccessfulSync: S.optional( S.NullOr(S.String).pipe(T.Body("last_successful_sync")), ), lastSynced: S.optional(S.NullOr(S.String).pipe(T.Body("last_synced"))), modifiedAt: S.optional(S.NullOr(S.String).pipe(T.Body("modified_at"))), modifiedBy: S.optional(S.NullOr(S.String).pipe(T.Body("modified_by"))), secureWebGateway: S.optional( S.NullOr(S.Boolean).pipe(T.Body("secure_web_gateway")), ), status: S.optional(S.NullOr(S.String)), updatedPrompts: S.optional( S.NullOr( AccessAiControlsMcpServersUpdateResponseUpdatedPromptsList, ).pipe(T.Body("updated_prompts")), ), updatedTools: S.optional( S.NullOr(AccessAiControlsMcpServersUpdateResponseUpdatedToolsList).pipe( T.Body("updated_tools"), ), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessAiControlMcpServerResponse", }) as any as S.Schema; export type AccessApplicationsUpdateRequestTypeSelfHostedApplication = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsUpdateRequestTypeSelfHostedApplication = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestTypeBrowserSSHApplication = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsUpdateRequestTypeBrowserSSHApplication = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestType = | AccessApplicationsUpdateRequestTypeSelfHostedApplication | (string & {}) | AccessApplicationsUpdateRequestTypeBrowserSSHApplication | (string & {}); export const AccessApplicationsUpdateRequestType = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([[], []]), ); export type AccessApplicationsUpdateRequestAllowedIdpsList = Array; export const AccessApplicationsUpdateRequestAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedHeadersList = Array; export const AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedHeadersList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedMethodsItem = | "GET" | "POST" | "HEAD" | "PUT" | "DELETE" | "CONNECT" | "OPTIONS" | "TRACE" | "PATCH"; export const AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedMethodsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedMethodsList = Array< | AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedMethodsItem | (string & {}) >; export const AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedMethodsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedMethodsItem, ) as any as S.Schema; export type AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedOriginsList = Array; export const AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedOriginsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplication { /** Allows all HTTP request headers. */ allowAllHeaders?: boolean; /** Allows all HTTP request methods. */ allowAllMethods?: boolean; /** Allows all origins. */ allowAllOrigins?: boolean; /** When set to `true`, includes credentials (cookies, authorization headers, or TLS client certificates) with requests. */ allowCredentials?: boolean; /** Allowed HTTP request headers. */ allowedHeaders?: AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedHeadersList; /** Allowed HTTP request methods. */ allowedMethods?: AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedMethodsList; /** Allowed origins. */ allowedOrigins?: AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedOriginsList; /** The maximum number of seconds the results of a preflight request can be cached. */ maxAge?: number; } export const AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAllHeaders: S.optional(S.Boolean.pipe(T.Body("allow_all_headers"))), allowAllMethods: S.optional(S.Boolean.pipe(T.Body("allow_all_methods"))), allowAllOrigins: S.optional(S.Boolean.pipe(T.Body("allow_all_origins"))), allowCredentials: S.optional(S.Boolean.pipe(T.Body("allow_credentials"))), allowedHeaders: S.optional( AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedHeadersList.pipe( T.Body("allowed_headers"), ), ), allowedMethods: S.optional( AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedMethodsList.pipe( T.Body("allowed_methods"), ), ), allowedOrigins: S.optional( AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplicationAllowedOriginsList.pipe( T.Body("allowed_origins"), ), ), maxAge: S.optional(S.Number.pipe(T.Body("max_age"))), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplication", }) as any as S.Schema; export type AccessApplicationsUpdateRequestCustomPagesList = Array; export const AccessApplicationsUpdateRequestCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateRequestDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsUpdateRequestDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestDestinationsItemPublicDestination { type?: | AccessApplicationsUpdateRequestDestinationsItemPublicDestinationType | (string & {}); /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string; } export const AccessApplicationsUpdateRequestDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( AccessApplicationsUpdateRequestDestinationsItemPublicDestinationType, ), uri: S.optional(S.String), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsUpdateRequestDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsUpdateRequestDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsUpdateRequestDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: | AccessApplicationsUpdateRequestDestinationsItemPrivateDestinationL4Protocol | (string & {}); /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string; type?: | AccessApplicationsUpdateRequestDestinationsItemPrivateDestinationType | (string & {}); /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string; } export const AccessApplicationsUpdateRequestDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.String), hostname: S.optional(S.String), l4Protocol: S.optional( AccessApplicationsUpdateRequestDestinationsItemPrivateDestinationL4Protocol.pipe( T.Body("l4_protocol"), ), ), portRange: S.optional(S.String.pipe(T.Body("port_range"))), type: S.optional( AccessApplicationsUpdateRequestDestinationsItemPrivateDestinationType, ), vnetId: S.optional(S.String.pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsUpdateRequestDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsUpdateRequestDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string; type?: | AccessApplicationsUpdateRequestDestinationsItemViaMcpServerPortalDestinationType | (string & {}); } export const AccessApplicationsUpdateRequestDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.String.pipe(T.Body("mcp_server_id"))), type: S.optional( AccessApplicationsUpdateRequestDestinationsItemViaMcpServerPortalDestinationType, ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsUpdateRequestDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsUpdateRequestDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestDestinationsItemWorkerDestination { type: AccessApplicationsUpdateRequestDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsUpdateRequestDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateRequestDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsUpdateRequestDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsUpdateRequestDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestDestinationsItemPreviewWorkerDestination { type: AccessApplicationsUpdateRequestDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsUpdateRequestDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateRequestDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsUpdateRequestDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsUpdateRequestDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestDestinationsItemAllWorkersDestination { type: AccessApplicationsUpdateRequestDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsUpdateRequestDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateRequestDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsUpdateRequestDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsUpdateRequestDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsUpdateRequestDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsUpdateRequestDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsUpdateRequestDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateRequestDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsUpdateRequestDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsUpdateRequestDestinationsItem = | AccessApplicationsUpdateRequestDestinationsItemPublicDestination | AccessApplicationsUpdateRequestDestinationsItemPrivateDestination | AccessApplicationsUpdateRequestDestinationsItemViaMcpServerPortalDestination | AccessApplicationsUpdateRequestDestinationsItemWorkerDestination | AccessApplicationsUpdateRequestDestinationsItemPreviewWorkerDestination | AccessApplicationsUpdateRequestDestinationsItemAllWorkersDestination | AccessApplicationsUpdateRequestDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsUpdateRequestDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsUpdateRequestDestinationsList = Array; export const AccessApplicationsUpdateRequestDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestDestinationsItem, ) as any as S.Schema; export type AccessApplicationsUpdateRequestMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateRequestMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestMfaConfigAllowedAuthenticatorsList = Array< | AccessApplicationsUpdateRequestMfaConfigAllowedAuthenticatorsItem | (string & {}) >; export const AccessApplicationsUpdateRequestMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateRequestMfaConfigAllowedAuthenticatorsList; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string; } export const AccessApplicationsUpdateRequestMfaConfig = /*@__PURE__*/ S.suspend( () => S.Struct({ allowedAuthenticators: S.optional( AccessApplicationsUpdateRequestMfaConfigAllowedAuthenticatorsList.pipe( T.Body("allowed_authenticators"), ), ), mfaDisabled: S.optional(S.Boolean.pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateRequestOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsUpdateRequestOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsUpdateRequestOauthConfigurationDynamicClientRegistrationAllowedUrisList; /** Whether dynamic client registration is enabled. */ enabled?: boolean; } export const AccessApplicationsUpdateRequestOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.Boolean.pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.Boolean.pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( AccessApplicationsUpdateRequestOauthConfigurationDynamicClientRegistrationAllowedUrisList.pipe( T.Body("allowed_uris"), ), ), enabled: S.optional(S.Boolean), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsUpdateRequestOauthConfigurationGrant = AccessApplicationsCreateRequestOauthConfigurationGrant; export const AccessApplicationsUpdateRequestOauthConfigurationGrant = AccessApplicationsCreateRequestOauthConfigurationGrant; export interface AccessApplicationsUpdateRequestOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsUpdateRequestOauthConfigurationDynamicClientRegistration; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateRequestOauthConfigurationGrant; } export const AccessApplicationsUpdateRequestOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( AccessApplicationsUpdateRequestOauthConfigurationDynamicClientRegistration.pipe( T.Body("dynamic_client_registration"), ), ), enabled: S.optional(S.Boolean), grant: S.optional(AccessApplicationsCreateRequestOauthConfigurationGrant), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemAccessAppPolicyLink = AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemAccessAppPolicyLink; export const AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemAccessAppPolicyLink = AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemAccessAppPolicyLink; export type AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItemEmailAddressesList; /** The UUID of an re-usable email list. */ emailListUuid?: string; } export const AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItemEmailAddressesList.pipe( T.Body("email_addresses"), ), ), emailListUuid: S.optional(S.String.pipe(T.Body("email_list_uuid"))), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsList = Array; export const AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array< | AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem | (string & {}) >; export const AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array< | AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem | (string & {}) >; export const AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList; } export const AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList.pipe( T.Body("allowed_clipboard_local_to_remote_formats"), ), ), allowedClipboardRemoteToLocalFormats: S.optional( AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList.pipe( T.Body("allowed_clipboard_remote_to_local_formats"), ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdp; } export const AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRulesRdp, ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRules", }) as any as S.Schema; export type AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsList = Array< | AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsItem | (string & {}) >; export const AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2MfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsList; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string; } export const AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2MfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2MfaConfigAllowedAuthenticatorsList.pipe( T.Body("allowed_authenticators"), ), ), mfaDisabled: S.optional(S.Boolean.pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2MfaConfig", }) as any as S.Schema; export interface AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2 { /** The UUID of the policy */ id?: string; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsList; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRules; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2MfaConfig; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string; } export const AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2 = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.String), approvalGroups: S.optional( AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ApprovalGroupsList.pipe( T.Body("approval_groups"), ), ), approvalRequired: S.optional(S.Boolean.pipe(T.Body("approval_required"))), connectionRules: S.optional( AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2ConnectionRules.pipe( T.Body("connection_rules"), ), ), isolationRequired: S.optional( S.Boolean.pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2MfaConfig.pipe( T.Body("mfa_config"), ), ), precedence: S.optional(S.Number), purposeJustificationPrompt: S.optional( S.String.pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.Boolean.pipe(T.Body("purpose_justification_required")), ), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2", }) as any as S.Schema; export type AccessApplicationsUpdateForAccountRequestPoliciesSelfHostedApplicationItem = | string | AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemAccessAppPolicyLink | AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2 | InlineAccessPolicy; export const AccessApplicationsUpdateForAccountRequestPoliciesSelfHostedApplicationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [], ["id", "precedence"], [ "id", "approvalGroups", "approvalRequired", "connectionRules", "isolationRequired", "mfaConfig", "precedence", "purposeJustificationPrompt", "purposeJustificationRequired", "sessionDuration", ], [ "id", "decision", "include", "exclude", "require", "name", "precedence", "approvalGroups", "approvalRequired", "isolationRequired", "purposeJustificationPrompt", "purposeJustificationRequired", "sessionDuration", ], ]), ); export type AccessApplicationsUpdateForAccountRequestPoliciesSelfHostedApplicationList = Array; export const AccessApplicationsUpdateForAccountRequestPoliciesSelfHostedApplicationList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateForAccountRequestPoliciesSelfHostedApplicationItem, ) as any as S.Schema; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemDecision = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemGitHubOrganizationRuleGithubOrganization = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemGitHubOrganizationRuleGithubOrganization = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array< | AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem | (string & {}) >; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRule { userRiskScore: AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItemAccessUserRiskScoreRule | AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeList = Array; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemConnectionRulesSshUsernamesList = Array; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemConnectionRulesSshUsernamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemConnectionRulesSsh { /** Contains the Unix usernames that may be used when connecting over SSH. */ usernames: AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemConnectionRulesSshUsernamesList; /** Enables using Identity Provider email alias as SSH username. */ allowEmailAlias?: boolean; } export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemConnectionRulesSsh = /*@__PURE__*/ S.suspend(() => S.Struct({ usernames: AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemConnectionRulesSshUsernamesList, allowEmailAlias: S.optional(S.Boolean.pipe(T.Body("allow_email_alias"))), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemConnectionRulesSsh", }) as any as S.Schema; export interface AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemConnectionRules { /** The SSH-specific rules that define how users may connect to the targets secured by your application. */ ssh?: AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemConnectionRulesSsh; } export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ ssh: S.optional( AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemConnectionRulesSsh, ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemGroupRule = AccessPoliciesCreateRequestExcludeItemGroupRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemGroupRule = AccessPoliciesCreateRequestExcludeItemGroupRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestExcludeItemAzureGroupRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestExcludeItemAzureGroupRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemCertificateRule = AccessPoliciesCreateRequestExcludeItemCertificateRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemCertificateRule = AccessPoliciesCreateRequestExcludeItemCertificateRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemCountryRule = AccessPoliciesCreateRequestExcludeItemCountryRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemCountryRule = AccessPoliciesCreateRequestExcludeItemCountryRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemDomainRule = AccessPoliciesCreateRequestExcludeItemDomainRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemDomainRule = AccessPoliciesCreateRequestExcludeItemDomainRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemEmailListRule = AccessPoliciesCreateRequestExcludeItemEmailListRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemEmailListRule = AccessPoliciesCreateRequestExcludeItemEmailListRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemEmailRule = AccessPoliciesCreateRequestExcludeItemEmailRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemEmailRule = AccessPoliciesCreateRequestExcludeItemEmailRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestExcludeItemEveryoneRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestExcludeItemEveryoneRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemIPListRule = AccessPoliciesCreateRequestExcludeItemIPListRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemIPListRule = AccessPoliciesCreateRequestExcludeItemIPListRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemIPRule = AccessPoliciesCreateRequestExcludeItemIPRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemIPRule = AccessPoliciesCreateRequestExcludeItemIPRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestExcludeItemOktaGroupRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestExcludeItemOktaGroupRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestExcludeItemSAMLGroupRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestExcludeItemSAMLGroupRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestExcludeItemServiceTokenRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestExcludeItemServiceTokenRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessUserRiskScoreRule = AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessUserRiskScoreRule = AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItem = | AccessPoliciesCreateRequestExcludeItemGroupRule | AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule | AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestExcludeItemAzureGroupRule | AccessPoliciesCreateRequestExcludeItemCertificateRule | AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule | AccessPoliciesCreateRequestExcludeItemCountryRule | AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestExcludeItemDomainRule | AccessPoliciesCreateRequestExcludeItemEmailListRule | AccessPoliciesCreateRequestExcludeItemEmailRule | AccessPoliciesCreateRequestExcludeItemEveryoneRule | AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule | AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule | AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestExcludeItemIPListRule | AccessPoliciesCreateRequestExcludeItemIPRule | AccessPoliciesCreateRequestExcludeItemOktaGroupRule | AccessPoliciesCreateRequestExcludeItemSAMLGroupRule | AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestExcludeItemServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule | AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule | AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeList = Array; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsItem = "piv_key"; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsList = Array< | AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsItem | (string & {}) >; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemMfaConfig { /** Lists the MFA methods that users can authenticate with. For infrastructure applications, only `piv_key` is supported. */ allowedAuthenticators?: AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsList; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`. */ sessionDuration?: string; } export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemMfaConfigAllowedAuthenticatorsList.pipe( T.Body("allowed_authenticators"), ), ), mfaDisabled: S.optional(S.Boolean.pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemGroupRule = AccessPoliciesCreateRequestExcludeItemGroupRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemGroupRule = AccessPoliciesCreateRequestExcludeItemGroupRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessAuthContextRule = AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessAuthContextRule = AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAuthenticationMethodRule = AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAuthenticationMethodRule = AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAzureGroupRule = AccessPoliciesCreateRequestExcludeItemAzureGroupRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAzureGroupRule = AccessPoliciesCreateRequestExcludeItemAzureGroupRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemCertificateRule = AccessPoliciesCreateRequestExcludeItemCertificateRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemCertificateRule = AccessPoliciesCreateRequestExcludeItemCertificateRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessCommonNameRule = AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessCommonNameRule = AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemCountryRule = AccessPoliciesCreateRequestExcludeItemCountryRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemCountryRule = AccessPoliciesCreateRequestExcludeItemCountryRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessDevicePostureRule = AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessDevicePostureRule = AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemDomainRule = AccessPoliciesCreateRequestExcludeItemDomainRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemDomainRule = AccessPoliciesCreateRequestExcludeItemDomainRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemEmailListRule = AccessPoliciesCreateRequestExcludeItemEmailListRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemEmailListRule = AccessPoliciesCreateRequestExcludeItemEmailListRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemEmailRule = AccessPoliciesCreateRequestExcludeItemEmailRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemEmailRule = AccessPoliciesCreateRequestExcludeItemEmailRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemEveryoneRule = AccessPoliciesCreateRequestExcludeItemEveryoneRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemEveryoneRule = AccessPoliciesCreateRequestExcludeItemEveryoneRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemExternalEvaluationRule = AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemExternalEvaluationRule = AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemGitHubOrganizationRule = AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemGitHubOrganizationRule = AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemGSuiteGroupRule = AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemGSuiteGroupRule = AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessLoginMethodRule = AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessLoginMethodRule = AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemIPListRule = AccessPoliciesCreateRequestExcludeItemIPListRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemIPListRule = AccessPoliciesCreateRequestExcludeItemIPListRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemIPRule = AccessPoliciesCreateRequestExcludeItemIPRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemIPRule = AccessPoliciesCreateRequestExcludeItemIPRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemOktaGroupRule = AccessPoliciesCreateRequestExcludeItemOktaGroupRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemOktaGroupRule = AccessPoliciesCreateRequestExcludeItemOktaGroupRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemSAMLGroupRule = AccessPoliciesCreateRequestExcludeItemSAMLGroupRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemSAMLGroupRule = AccessPoliciesCreateRequestExcludeItemSAMLGroupRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessOIDCClaimRule = AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessOIDCClaimRule = AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemServiceTokenRule = AccessPoliciesCreateRequestExcludeItemServiceTokenRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemServiceTokenRule = AccessPoliciesCreateRequestExcludeItemServiceTokenRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessUserRiskScoreRule = AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessUserRiskScoreRule = AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItem = | AccessPoliciesCreateRequestExcludeItemGroupRule | AccessPoliciesCreateRequestExcludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessAuthContextRule | AccessPoliciesCreateRequestExcludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestExcludeItemAzureGroupRule | AccessPoliciesCreateRequestExcludeItemCertificateRule | AccessPoliciesCreateRequestExcludeItemAccessCommonNameRule | AccessPoliciesCreateRequestExcludeItemCountryRule | AccessPoliciesCreateRequestExcludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestExcludeItemDomainRule | AccessPoliciesCreateRequestExcludeItemEmailListRule | AccessPoliciesCreateRequestExcludeItemEmailRule | AccessPoliciesCreateRequestExcludeItemEveryoneRule | AccessPoliciesCreateRequestExcludeItemExternalEvaluationRule | AccessPoliciesCreateRequestExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestExcludeItemGSuiteGroupRule | AccessPoliciesCreateRequestExcludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestExcludeItemIPListRule | AccessPoliciesCreateRequestExcludeItemIPRule | AccessPoliciesCreateRequestExcludeItemOktaGroupRule | AccessPoliciesCreateRequestExcludeItemSAMLGroupRule | AccessPoliciesCreateRequestExcludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestExcludeItemServiceTokenRule | AccessPoliciesCreateRequestExcludeItemAccessLinkedAppTokenRule | AccessPoliciesCreateRequestExcludeItemAccessUserRiskScoreRule | AccessPoliciesCreateRequestExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireList = Array; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItem { /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision: | AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemDecision | (string & {}); /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include: AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeList; /** The name of the Access policy. */ name: string; /** The rules that define how users may connect to the targets secured by your application. */ connectionRules?: AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemConnectionRules; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeList; /** Configures multi-factor authentication (MFA) settings for infrastructure applications. */ mfaConfig?: AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemMfaConfig; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireList; } export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItem = /*@__PURE__*/ S.suspend(() => S.Struct({ decision: AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemDecision, include: AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemIncludeList, name: S.String, connectionRules: S.optional( AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemConnectionRules.pipe( T.Body("connection_rules"), ), ), exclude: S.optional( AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemExcludeList, ), mfaConfig: S.optional( AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemMfaConfig.pipe( T.Body("mfa_config"), ), ), require: S.optional( AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItemRequireList, ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItem", }) as any as S.Schema; export type AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationList = Array; export const AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationItem, ) as any as S.Schema; export type AccessApplicationsUpdateForAccountRequestPolicies = | AccessApplicationsUpdateForAccountRequestPoliciesSelfHostedApplicationList | AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationList; export const AccessApplicationsUpdateForAccountRequestPolicies = /*@__PURE__*/ S.Unknown.pipe(T.UnionCases([[], []])); export type AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasicScheme = "httpbasic"; export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasicScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasic { /** Password used to authenticate with the remote SCIM service. */ password: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasicScheme; /** User name used to authenticate with the remote SCIM service. */ user: string; } export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasic = /*@__PURE__*/ S.suspend(() => S.Struct({ password: S.String, scheme: AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasicScheme, user: S.String, }), ).annotate({ identifier: "AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasic", }) as any as S.Schema; export type AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme = "oauthbearertoken"; export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerToken { /** Token used to authenticate with the remote SCIM service. */ token: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme; } export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerToken = /*@__PURE__*/ S.suspend(() => S.Struct({ token: S.String, scheme: AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerToken", }) as any as S.Schema; export type AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2Scheme = "oauth2"; export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2Scheme = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2ScopesList = Array; export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2ScopesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2 { /** URL used to generate the auth code used during token generation. */ authorizationUrl: string; /** Client ID used to authenticate when generating a token for authenticating with the remote SCIM service. */ clientId: string; /** Secret used to authenticate when generating a token for authenticating with the remove SCIM service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2Scheme; /** URL used to generate the token used to authenticate with the remote SCIM service. */ tokenUrl: string; /** The authorization scopes to request when generating the token used to authenticate with the remove SCIM service. */ scopes?: AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2ScopesList; } export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2 = /*@__PURE__*/ S.suspend(() => S.Struct({ authorizationUrl: S.String.pipe(T.Body("authorization_url")), clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2Scheme, tokenUrl: S.String.pipe(T.Body("token_url")), scopes: S.optional( AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2ScopesList, ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2", }) as any as S.Schema; export type AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthentication = | AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationHTTPBasic | AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], [ "authorizationUrl", "clientId", "clientSecret", "scheme", "tokenUrl", "scopes", ], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationMappingsItemOperations = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItemOperations; export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationMappingsItemOperations = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItemOperations; export type AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItemOperations; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: | AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationMappingsItemStrictness | (string & {}); /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string; } export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.Boolean), filter: S.optional(S.String), operations: S.optional( AccessApplicationsCreateRequestScimConfigSelfHostedApplicationMappingsItemOperations, ), strictness: S.optional( AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationMappingsItemStrictness, ), transformJsonata: S.optional(S.String.pipe(T.Body("transform_jsonata"))), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationMappingsItem", }) as any as S.Schema; export type AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationMappingsList = Array; export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationMappingsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestScimConfigSelfHostedApplication { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthentication; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationMappingsList; } export const AccessApplicationsUpdateRequestScimConfigSelfHostedApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationAuthentication, ), deactivateOnDelete: S.optional( S.Boolean.pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.Boolean), mappings: S.optional( AccessApplicationsUpdateRequestScimConfigSelfHostedApplicationMappingsList, ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestScimConfigSelfHostedApplication", }) as any as S.Schema; export type AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthentication = | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateRequestScimConfigSelfHostedApplicationAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsUpdateRequestScimConfigSaaSApplicationMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestScimConfigSaaSApplicationMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: | AccessApplicationsUpdateRequestScimConfigSaaSApplicationMappingsItemStrictness | (string & {}); /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string; } export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.Boolean), filter: S.optional(S.String), operations: S.optional(S.Unknown), strictness: S.optional( AccessApplicationsUpdateRequestScimConfigSaaSApplicationMappingsItemStrictness, ), transformJsonata: S.optional(S.String.pipe(T.Body("transform_jsonata"))), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestScimConfigSaaSApplicationMappingsItem", }) as any as S.Schema; export type AccessApplicationsUpdateRequestScimConfigSaaSApplicationMappingsList = Array; export const AccessApplicationsUpdateRequestScimConfigSaaSApplicationMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestScimConfigSaaSApplicationMappingsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestScimConfigSaaSApplication { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthentication; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsUpdateRequestScimConfigSaaSApplicationMappingsList; } export const AccessApplicationsUpdateRequestScimConfigSaaSApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( AccessApplicationsUpdateRequestScimConfigSaaSApplicationAuthentication, ), deactivateOnDelete: S.optional( S.Boolean.pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.Boolean), mappings: S.optional( AccessApplicationsUpdateRequestScimConfigSaaSApplicationMappingsList, ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestScimConfigSaaSApplication", }) as any as S.Schema; export type AccessApplicationsUpdateRequestScimConfig = | AccessApplicationsUpdateRequestScimConfigSelfHostedApplication | AccessApplicationsUpdateRequestScimConfigSaaSApplication; export const AccessApplicationsUpdateRequestScimConfig = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "idpUid", "remoteUri", "authentication", "deactivateOnDelete", "enabled", "mappings", ], [ "idpUid", "remoteUri", "authentication", "deactivateOnDelete", "enabled", "mappings", ], ]), ); export type AccessApplicationsUpdateRequestSelfHostedDomainsList = Array; export const AccessApplicationsUpdateRequestSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateRequestTagsList = Array; export const AccessApplicationsUpdateRequestTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppAuthType = | "saml" | "oidc"; export const AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppAuthType = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItemNameFormat = | "urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" | "urn:oasis:names:tc:SAML:2.0:attrname-format:basic" | "urn:oasis:names:tc:SAML:2.0:attrname-format:uri"; export const AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItemNameFormat = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem = AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem; export const AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem = AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem; export type AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList = Array; export const AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItemSource { /** The name of the IdP attribute. */ name?: string; /** A mapping from IdP ID to attribute name. */ nameByIdp?: AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList; } export const AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItemSource = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.String), nameByIdp: S.optional( AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList.pipe( T.Body("name_by_idp"), ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItemSource", }) as any as S.Schema; export interface AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItem { /** The SAML FriendlyName of the attribute. */ friendlyName?: string; /** The name of the attribute. */ name?: string; /** A globally unique name for an identity or service provider. */ nameFormat?: | AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItemNameFormat | (string & {}); /** If the attribute is required when building a SAML assertion. */ required?: boolean; source?: AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItemSource; } export const AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ friendlyName: S.optional(S.String.pipe(T.Body("friendly_name"))), name: S.optional(S.String), nameFormat: S.optional( AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItemNameFormat.pipe( T.Body("name_format"), ), ), required: S.optional(S.Boolean), source: S.optional( AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItemSource, ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItem", }) as any as S.Schema; export type AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesList = Array; export const AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesItem, ) as any as S.Schema; export type AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppNameIdFormat = | "id" | "email"; export const AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppNameIdFormat = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateRequestSaasAppSAMLSaaSApp { /** Optional identifier indicating the authentication protocol used for the saas app. Required for OIDC. Default if unset is "saml" */ authType?: | AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppAuthType | (string & {}); /** The service provider's endpoint that is responsible for receiving and parsing a SAML assertion. */ consumerServiceUrl?: string; customAttributes?: AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesList; /** The URL that the user will be redirected to after a successful login for IDP initiated logins. */ defaultRelayState?: string; /** The unique identifier for your SaaS application. */ idpEntityId?: string; /** The format of the name identifier sent to the SaaS application. */ nameIdFormat?: | AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppNameIdFormat | (string & {}); /** A [JSONata](https://jsonata.org/) expression that transforms an application's user identities into a NameID value for its SAML assertion. This expression should evaluate to a singular string. The output of this expression can override the `name_id_format` setting. */ nameIdTransformJsonata?: string; /** The Access public certificate that will be used to verify your identity. */ publicKey?: string; /** A [JSONata] (https://jsonata.org/) expression that transforms an application's user identities into attribute assertions in the SAML response. The expression can transform id, email, name, and groups values. It can also transform fields listed in the saml_attributes or oidc_fields of the identity provider used to authenticate. The output of this expression must be a JSON object. */ samlAttributeTransformJsonata?: string; /** A globally unique name for an identity or service provider. */ spEntityId?: string; /** The endpoint where your SaaS application will send login requests. */ ssoEndpoint?: string; } export const AccessApplicationsUpdateRequestSaasAppSAMLSaaSApp = /*@__PURE__*/ S.suspend(() => S.Struct({ authType: S.optional( AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppAuthType.pipe( T.Body("auth_type"), ), ), consumerServiceUrl: S.optional( S.String.pipe(T.Body("consumer_service_url")), ), customAttributes: S.optional( AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppCustomAttributesList.pipe( T.Body("custom_attributes"), ), ), defaultRelayState: S.optional( S.String.pipe(T.Body("default_relay_state")), ), idpEntityId: S.optional(S.String.pipe(T.Body("idp_entity_id"))), nameIdFormat: S.optional( AccessApplicationsUpdateRequestSaasAppSAMLSaaSAppNameIdFormat.pipe( T.Body("name_id_format"), ), ), nameIdTransformJsonata: S.optional( S.String.pipe(T.Body("name_id_transform_jsonata")), ), publicKey: S.optional(S.String.pipe(T.Body("public_key"))), samlAttributeTransformJsonata: S.optional( S.String.pipe(T.Body("saml_attribute_transform_jsonata")), ), spEntityId: S.optional(S.String.pipe(T.Body("sp_entity_id"))), ssoEndpoint: S.optional(S.String.pipe(T.Body("sso_endpoint"))), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestSaasAppSAMLSaaSApp", }) as any as S.Schema; export type AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppAuthType = | "saml" | "oidc"; export const AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppAuthType = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItemScope = | "groups" | "profile" | "email" | "openid"; export const AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItemScope = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap = { [key: string]: string | undefined }; export const AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItemSource { /** The name of the IdP claim. */ name?: string; /** A mapping from IdP ID to claim name. */ nameByIdp?: AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap; } export const AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItemSource = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.String), nameByIdp: S.optional( AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap.pipe( T.Body("name_by_idp"), ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItemSource", }) as any as S.Schema; export interface AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItem { /** The name of the claim. */ name?: string; /** If the claim is required when building an OIDC token. */ required?: boolean; /** The scope of the claim. */ scope?: | AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItemScope | (string & {}); source?: AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItemSource; } export const AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.String), required: S.optional(S.Boolean), scope: S.optional( AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItemScope, ), source: S.optional( AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItemSource, ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItem", }) as any as S.Schema; export type AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsList = Array; export const AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsItem, ) as any as S.Schema; export type AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppGrantTypesItem = | "authorization_code" | "authorization_code_with_pkce" | "refresh_tokens" | "hybrid" | "implicit"; export const AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppGrantTypesItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppGrantTypesList = Array< | AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppGrantTypesItem | (string & {}) >; export const AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppGrantTypesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppGrantTypesItem, ) as any as S.Schema; export type AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppHybridAndImplicitOptions = AccessApplicationsCreateRequestSaasAppOIDCSaaSAppHybridAndImplicitOptions; export const AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppHybridAndImplicitOptions = AccessApplicationsCreateRequestSaasAppOIDCSaaSAppHybridAndImplicitOptions; export type AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppRedirectUrisList = Array; export const AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppRedirectUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppRefreshTokenOptions = AccessApplicationsCreateRequestSaasAppOIDCSaaSAppRefreshTokenOptions; export const AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppRefreshTokenOptions = AccessApplicationsCreateRequestSaasAppOIDCSaaSAppRefreshTokenOptions; export type AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppScopesItem = | "openid" | "groups" | "email" | "profile"; export const AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppScopesItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppScopesList = Array< AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppScopesItem | (string & {}) >; export const AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppScopesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppScopesItem, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestSaasAppOIDCSaaSApp { /** The lifetime of the OIDC Access Token after creation. Valid units are m,h. Must be greater than or equal to 1m and less than or equal to 24h. */ accessTokenLifetime?: string; /** If client secret should be required on the token endpoint when authorization_code_with_pkce grant is used. */ allowPkceWithoutClientSecret?: boolean; /** The URL where this applications tile redirects users */ appLauncherUrl?: string; /** Identifier of the authentication protocol used for the saas app. Required for OIDC. */ authType?: | AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppAuthType | (string & {}); /** The application client id */ clientId?: string; /** The application client secret, only returned on POST request. */ clientSecret?: string; customClaims?: AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsList; /** The OIDC flows supported by this application */ grantTypes?: AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppGrantTypesList; /** A regex to filter Cloudflare groups returned in ID token and userinfo endpoint */ groupFilterRegex?: string; hybridAndImplicitOptions?: AccessApplicationsCreateRequestSaasAppOIDCSaaSAppHybridAndImplicitOptions; /** The Access public certificate that will be used to verify your identity. */ publicKey?: string; /** The permitted URL's for Cloudflare to return Authorization codes and Access/ID tokens */ redirectUris?: AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppRedirectUrisList; refreshTokenOptions?: AccessApplicationsCreateRequestSaasAppOIDCSaaSAppRefreshTokenOptions; /** Define the user information shared with access, "offline_access" scope will be automatically enabled if refresh tokens are enabled */ scopes?: AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppScopesList; } export const AccessApplicationsUpdateRequestSaasAppOIDCSaaSApp = /*@__PURE__*/ S.suspend(() => S.Struct({ accessTokenLifetime: S.optional( S.String.pipe(T.Body("access_token_lifetime")), ), allowPkceWithoutClientSecret: S.optional( S.Boolean.pipe(T.Body("allow_pkce_without_client_secret")), ), appLauncherUrl: S.optional(S.String.pipe(T.Body("app_launcher_url"))), authType: S.optional( AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppAuthType.pipe( T.Body("auth_type"), ), ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), customClaims: S.optional( AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppCustomClaimsList.pipe( T.Body("custom_claims"), ), ), grantTypes: S.optional( AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppGrantTypesList.pipe( T.Body("grant_types"), ), ), groupFilterRegex: S.optional(S.String.pipe(T.Body("group_filter_regex"))), hybridAndImplicitOptions: S.optional( AccessApplicationsCreateRequestSaasAppOIDCSaaSAppHybridAndImplicitOptions.pipe( T.Body("hybrid_and_implicit_options"), ), ), publicKey: S.optional(S.String.pipe(T.Body("public_key"))), redirectUris: S.optional( AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppRedirectUrisList.pipe( T.Body("redirect_uris"), ), ), refreshTokenOptions: S.optional( AccessApplicationsCreateRequestSaasAppOIDCSaaSAppRefreshTokenOptions.pipe( T.Body("refresh_token_options"), ), ), scopes: S.optional( AccessApplicationsUpdateRequestSaasAppOIDCSaaSAppScopesList, ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestSaasAppOIDCSaaSApp", }) as any as S.Schema; export type AccessApplicationsUpdateRequestSaasApp = | AccessApplicationsUpdateRequestSaasAppSAMLSaaSApp | AccessApplicationsUpdateRequestSaasAppOIDCSaaSApp; export const AccessApplicationsUpdateRequestSaasApp = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "authType", "consumerServiceUrl", "customAttributes", "defaultRelayState", "idpEntityId", "nameIdFormat", "nameIdTransformJsonata", "publicKey", "samlAttributeTransformJsonata", "spEntityId", "ssoEndpoint", ], [ "accessTokenLifetime", "allowPkceWithoutClientSecret", "appLauncherUrl", "authType", "clientId", "clientSecret", "customClaims", "grantTypes", "groupFilterRegex", "hybridAndImplicitOptions", "publicKey", "redirectUris", "refreshTokenOptions", "scopes", ], ]), ); export type AccessApplicationsUpdateRequestFooterLinksItem = AccessApplicationsCreateRequestFooterLinksItem; export const AccessApplicationsUpdateRequestFooterLinksItem = AccessApplicationsCreateRequestFooterLinksItem; export type AccessApplicationsUpdateRequestFooterLinksList = Array; export const AccessApplicationsUpdateRequestFooterLinksList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestFooterLinksItem, ) as any as S.Schema; export type AccessApplicationsUpdateRequestLandingPageDesign = AccessApplicationsCreateRequestLandingPageDesign; export const AccessApplicationsUpdateRequestLandingPageDesign = AccessApplicationsCreateRequestLandingPageDesign; export type AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItemProtocol = "SSH"; export const AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItemProtocol = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesValueList = Array; export const AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesMap = { [key: string]: | AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesValueList | undefined; }; export const AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesMap = /*@__PURE__*/ S.Record( S.String, AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesValueList, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItem { /** The port that the targets use for the chosen communication protocol. A port cannot be assigned to multiple protocols. */ port: number; /** The communication protocol your application secures. */ protocol: | AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItemProtocol | (string & {}); /** Contains a map of target attribute keys to target attribute values. */ targetAttributes: AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesMap; } export const AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItem = /*@__PURE__*/ S.suspend(() => S.Struct({ port: S.Number, protocol: AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItemProtocol, targetAttributes: AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItemTargetAttributesMap.pipe( T.Body("target_attributes"), ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItem", }) as any as S.Schema; export type AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationList = Array; export const AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationItem, ) as any as S.Schema; export type AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItemProtocol = "RDP"; export const AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItemProtocol = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesValueList = Array; export const AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesMap = { [key: string]: | AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesValueList | undefined; }; export const AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesMap = /*@__PURE__*/ S.Record( S.String, AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesValueList, ) as any as S.Schema; export interface AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItem { /** The port that the targets use for the chosen communication protocol. A port cannot be assigned to multiple protocols. */ port: number; /** The communication protocol your application secures. */ protocol: | AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItemProtocol | (string & {}); /** Contains a map of target attribute keys to target attribute values. */ targetAttributes: AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesMap; } export const AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItem = /*@__PURE__*/ S.suspend(() => S.Struct({ port: S.Number, protocol: AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItemProtocol, targetAttributes: AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItemTargetAttributesMap.pipe( T.Body("target_attributes"), ), }), ).annotate({ identifier: "AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItem", }) as any as S.Schema; export type AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationList = Array; export const AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationItem, ) as any as S.Schema; export type AccessApplicationsUpdateRequestTargetCriteria = | AccessApplicationsUpdateRequestTargetCriteriaInfrastructureApplicationList | AccessApplicationsUpdateRequestTargetCriteriaBrowserRDPApplicationList; export const AccessApplicationsUpdateRequestTargetCriteria = /*@__PURE__*/ S.Unknown.pipe(T.UnionCases([[], []])); export interface UpdateAccessApplicationForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** Identifier. */ appId: string; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string; /** The application type. */ type?: AccessApplicationsUpdateRequestType; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean; /** Enables loading application content in an iFrame. */ allowIframe?: boolean; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsUpdateRequestAllowedIdpsList; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean; corsHeaders?: AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplication; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsUpdateRequestCustomPagesList; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsUpdateRequestDestinationsList; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateRequestMfaConfig; /** The name of the application. */ name?: string; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsUpdateRequestOauthConfiguration; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean; /** The policies that Access applies to the application, in ascending order of precedence. Items can reference existing policies or create new policies exclusive to the application. Reusable and inline policies are mutually exclusive. */ policies?: AccessApplicationsUpdateForAccountRequestPolicies; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsUpdateRequestScimConfig; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsUpdateRequestSelfHostedDomainsList; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsUpdateRequestTagsList; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean; saasApp?: AccessApplicationsUpdateRequestSaasApp; /** The image URL of the logo shown in the App Launcher header. */ appLauncherLogoUrl?: string; /** The background color of the App Launcher page. */ bgColor?: string; /** The links in the App Launcher footer. */ footerLinks?: AccessApplicationsUpdateRequestFooterLinksList; /** The background color of the App Launcher header. */ headerBgColor?: string; /** The design of the App Launcher landing page shown to users when they log in. */ landingPageDesign?: AccessApplicationsCreateRequestLandingPageDesign; /** Determines when to skip the App Launcher landing page. */ skipAppLauncherLoginPage?: boolean; targetCriteria?: AccessApplicationsUpdateRequestTargetCriteria; } export const UpdateAccessApplicationForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), appId: S.String.pipe(T.Label("app_id")), domain: S.optional(S.String), type: S.optional(AccessApplicationsUpdateRequestType), allowAuthenticateViaWarp: S.optional( S.Boolean.pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.Boolean.pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( AccessApplicationsUpdateRequestAllowedIdpsList.pipe( T.Body("allowed_idps"), ), ), appLauncherVisible: S.optional( S.Boolean.pipe(T.Body("app_launcher_visible")), ), autoRedirectToIdentity: S.optional( S.Boolean.pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplication.pipe( T.Body("cors_headers"), ), ), customDenyMessage: S.optional( S.String.pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional(S.String.pipe(T.Body("custom_deny_url"))), customNonIdentityDenyUrl: S.optional( S.String.pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( AccessApplicationsUpdateRequestCustomPagesList.pipe( T.Body("custom_pages"), ), ), destinations: S.optional(AccessApplicationsUpdateRequestDestinationsList), eagerRedirectCookieSetting: S.optional( S.Boolean.pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.Boolean.pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.Boolean.pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.String.pipe(T.Body("logo_url"))), mfaConfig: S.optional( AccessApplicationsUpdateRequestMfaConfig.pipe(T.Body("mfa_config")), ), name: S.optional(S.String), oauthConfiguration: S.optional( AccessApplicationsUpdateRequestOauthConfiguration.pipe( T.Body("oauth_configuration"), ), ), optionsPreflightBypass: S.optional( S.Boolean.pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.Boolean.pipe(T.Body("path_cookie_attribute")), ), policies: S.optional(AccessApplicationsUpdateForAccountRequestPolicies), readServiceTokensFromHeader: S.optional( S.String.pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.String.pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( AccessApplicationsUpdateRequestScimConfig.pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( AccessApplicationsUpdateRequestSelfHostedDomainsList.pipe( T.Body("self_hosted_domains"), ), ), service_auth_401_redirect: S.optional(S.Boolean), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), skipInterstitial: S.optional(S.Boolean.pipe(T.Body("skip_interstitial"))), tags: S.optional(AccessApplicationsUpdateRequestTagsList), useClientlessIsolationAppLauncherUrl: S.optional( S.Boolean.pipe(T.Body("use_clientless_isolation_app_launcher_url")), ), saasApp: S.optional( AccessApplicationsUpdateRequestSaasApp.pipe(T.Body("saas_app")), ), appLauncherLogoUrl: S.optional( S.String.pipe(T.Body("app_launcher_logo_url")), ), bgColor: S.optional(S.String.pipe(T.Body("bg_color"))), footerLinks: S.optional( AccessApplicationsUpdateRequestFooterLinksList.pipe( T.Body("footer_links"), ), ), headerBgColor: S.optional(S.String.pipe(T.Body("header_bg_color"))), landingPageDesign: S.optional( AccessApplicationsCreateRequestLandingPageDesign.pipe( T.Body("landing_page_design"), ), ), skipAppLauncherLoginPage: S.optional( S.Boolean.pipe(T.Body("skip_app_launcher_login_page")), ), targetCriteria: S.optional( AccessApplicationsUpdateRequestTargetCriteria.pipe( T.Body("target_criteria"), ), ), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/apps/{app_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessApplicationForAccountRequest", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsUpdateResultSelfHostedApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSelfHostedApplicationAllowedIdpsList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationCorsHeadersAllowedHeadersList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationCorsHeadersAllowedHeadersList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationCorsHeadersAllowedMethodsItem = | "GET" | "POST" | "HEAD" | "PUT" | "DELETE" | "CONNECT" | "OPTIONS" | "TRACE" | "PATCH"; export const AccessApplicationsUpdateResultSelfHostedApplicationCorsHeadersAllowedMethodsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSelfHostedApplicationCorsHeadersAllowedMethodsList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationCorsHeadersAllowedMethodsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSelfHostedApplicationCorsHeadersAllowedMethodsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationCorsHeadersAllowedOriginsList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationCorsHeadersAllowedOriginsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSelfHostedApplicationCorsHeaders { /** Allows all HTTP request headers. */ allowAllHeaders?: boolean | null; /** Allows all HTTP request methods. */ allowAllMethods?: boolean | null; /** Allows all origins. */ allowAllOrigins?: boolean | null; /** When set to `true`, includes credentials (cookies, authorization headers, or TLS client certificates) with requests. */ allowCredentials?: boolean | null; /** Allowed HTTP request headers. */ allowedHeaders?: AccessApplicationsUpdateResultSelfHostedApplicationCorsHeadersAllowedHeadersList | null; /** Allowed HTTP request methods. */ allowedMethods?: AccessApplicationsUpdateResultSelfHostedApplicationCorsHeadersAllowedMethodsList | null; /** Allowed origins. */ allowedOrigins?: AccessApplicationsUpdateResultSelfHostedApplicationCorsHeadersAllowedOriginsList | null; /** The maximum number of seconds the results of a preflight request can be cached. */ maxAge?: number | null; } export const AccessApplicationsUpdateResultSelfHostedApplicationCorsHeaders = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAllHeaders: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_all_headers")), ), allowAllMethods: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_all_methods")), ), allowAllOrigins: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_all_origins")), ), allowCredentials: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_credentials")), ), allowedHeaders: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationCorsHeadersAllowedHeadersList, ).pipe(T.Body("allowed_headers")), ), allowedMethods: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationCorsHeadersAllowedMethodsList, ).pipe(T.Body("allowed_methods")), ), allowedOrigins: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationCorsHeadersAllowedOriginsList, ).pipe(T.Body("allowed_origins")), ), maxAge: S.optional(S.NullOr(S.Number).pipe(T.Body("max_age"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationCorsHeaders", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationCustomPagesList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPublicDestination { type?: AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemWorkerDestination { type: AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItem = | AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPublicDestination | AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPrivateDestination | AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemWorkerDestination | AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllWorkersDestination | AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsUpdateResultSelfHostedApplicationDestinationsList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSelfHostedApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSelfHostedApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultSelfHostedApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsUpdateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsUpdateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsUpdateResultSelfHostedApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsUpdateResultSelfHostedApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsUpdateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsUpdateResultSelfHostedApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationPoliciesList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme = "httpbasic"; export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic { /** Password used to authenticate with the remote SCIM service. */ password: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme; /** User name used to authenticate with the remote SCIM service. */ user: string; } export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = /*@__PURE__*/ S.suspend(() => S.Struct({ password: S.String, scheme: AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasicScheme, user: S.String, }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme = "oauthbearertoken"; export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken { /** Token used to authenticate with the remote SCIM service. */ token: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme; } export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = /*@__PURE__*/ S.suspend(() => S.Struct({ token: S.String, scheme: AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme = "oauth2"; export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 { /** URL used to generate the auth code used during token generation. */ authorizationUrl: string; /** Client ID used to authenticate when generating a token for authenticating with the remote SCIM service. */ clientId: string; /** Secret used to authenticate when generating a token for authenticating with the remove SCIM service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme; /** URL used to generate the token used to authenticate with the remote SCIM service. */ tokenUrl: string; /** The authorization scopes to request when generating the token used to authenticate with the remove SCIM service. */ scopes?: AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList | null; } export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = /*@__PURE__*/ S.suspend(() => S.Struct({ authorizationUrl: S.String.pipe(T.Body("authorization_url")), clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2Scheme, tokenUrl: S.String.pipe(T.Body("token_url")), scopes: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2ScopesList, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthentication = | AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic | AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], [ "authorizationUrl", "clientId", "clientSecret", "scheme", "tokenUrl", "scopes", ], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsUpdateResultSelfHostedApplicationScimConfigMappingsItemOperations = AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations; export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigMappingsItemOperations = AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations; export type AccessApplicationsUpdateResultSelfHostedApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSelfHostedApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsUpdateResultSelfHostedApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationScimConfigMappingsItemOperations, ), ), strictness: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationScimConfigMappingsList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSelfHostedApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSelfHostedApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsUpdateResultSelfHostedApplicationScimConfigMappingsList | null; } export const AccessApplicationsUpdateResultSelfHostedApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationSelfHostedDomainsList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultSelfHostedApplicationTagsList = Array; export const AccessApplicationsUpdateResultSelfHostedApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSelfHostedApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; /** The application type. */ type: AccessApplicationsUpdateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsUpdateResultSelfHostedApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsUpdateResultSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsUpdateResultSelfHostedApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsUpdateResultSelfHostedApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultSelfHostedApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsUpdateResultSelfHostedApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsUpdateResultSelfHostedApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsUpdateResultSelfHostedApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsUpdateResultSelfHostedApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsUpdateResultSelfHostedApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, type: AccessApplicationsUpdateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesList, ), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsUpdateResultSelfHostedApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSelfHostedApplication", }) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationAllowedIdpsList = Array; export const AccessApplicationsUpdateResultSaaSApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationCustomPagesList = Array; export const AccessApplicationsUpdateResultSaaSApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSaaSApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsUpdateResultSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSaaSApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireList = Array; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSaaSApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsUpdateResultSaaSApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultSaaSApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsUpdateResultSaaSApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationPoliciesList = Array; export const AccessApplicationsUpdateResultSaaSApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSaaSApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppAuthType = | "saml" | "oidc"; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppAuthType = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat = | "urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified" | "urn:oasis:names:tc:SAML:2.0:attrname-format:basic" | "urn:oasis:names:tc:SAML:2.0:attrname-format:uri"; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem = AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem = AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList = Array; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList = /*@__PURE__*/ S.Array( AccessApplicationsCreateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource { /** The name of the IdP attribute. */ name?: string | null; /** A mapping from IdP ID to attribute name. */ nameByIdp?: AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList | null; } export const AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.NullOr(S.String)), nameByIdp: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSourceNameByIdpList, ).pipe(T.Body("name_by_idp")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource", }) as any as S.Schema; export interface AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem { /** The SAML FriendlyName of the attribute. */ friendlyName?: string | null; /** The name of the attribute. */ name?: string | null; /** A globally unique name for an identity or service provider. */ nameFormat?: AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat | null; /** If the attribute is required when building a SAML assertion. */ required?: boolean | null; source?: AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource | null; } export const AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ friendlyName: S.optional( S.NullOr(S.String).pipe(T.Body("friendly_name")), ), name: S.optional(S.NullOr(S.String)), nameFormat: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemNameFormat, ).pipe(T.Body("name_format")), ), required: S.optional(S.NullOr(S.Boolean)), source: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItemSource, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList = Array; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat = | "id" | "email"; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSApp { /** Optional identifier indicating the authentication protocol used for the saas app. Required for OIDC. Default if unset is "saml" */ authType?: AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppAuthType | null; /** The service provider's endpoint that is responsible for receiving and parsing a SAML assertion. */ consumerServiceUrl?: string | null; customAttributes?: AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList | null; /** The URL that the user will be redirected to after a successful login for IDP initiated logins. */ defaultRelayState?: string | null; /** The unique identifier for your SaaS application. */ idpEntityId?: string | null; /** The format of the name identifier sent to the SaaS application. */ nameIdFormat?: AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat | null; /** A [JSONata](https://jsonata.org/) expression that transforms an application's user identities into a NameID value for its SAML assertion. This expression should evaluate to a singular string. The output of this expression can override the `name_id_format` setting. */ nameIdTransformJsonata?: string | null; /** The Access public certificate that will be used to verify your identity. */ publicKey?: string | null; /** A [JSONata] (https://jsonata.org/) expression that transforms an application's user identities into attribute assertions in the SAML response. The expression can transform id, email, name, and groups values. It can also transform fields listed in the saml_attributes or oidc_fields of the identity provider used to authenticate. The output of this expression must be a JSON object. */ samlAttributeTransformJsonata?: string | null; /** A globally unique name for an identity or service provider. */ spEntityId?: string | null; /** The endpoint where your SaaS application will send login requests. */ ssoEndpoint?: string | null; } export const AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSApp = /*@__PURE__*/ S.suspend(() => S.Struct({ authType: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppAuthType, ).pipe(T.Body("auth_type")), ), consumerServiceUrl: S.optional( S.NullOr(S.String).pipe(T.Body("consumer_service_url")), ), customAttributes: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppCustomAttributesList, ).pipe(T.Body("custom_attributes")), ), defaultRelayState: S.optional( S.NullOr(S.String).pipe(T.Body("default_relay_state")), ), idpEntityId: S.optional(S.NullOr(S.String).pipe(T.Body("idp_entity_id"))), nameIdFormat: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSAppNameIdFormat, ).pipe(T.Body("name_id_format")), ), nameIdTransformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("name_id_transform_jsonata")), ), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), samlAttributeTransformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("saml_attribute_transform_jsonata")), ), spEntityId: S.optional(S.NullOr(S.String).pipe(T.Body("sp_entity_id"))), ssoEndpoint: S.optional(S.NullOr(S.String).pipe(T.Body("sso_endpoint"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSApp", }) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppAuthType = | "saml" | "oidc"; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppAuthType = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope = | "groups" | "profile" | "email" | "openid"; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap = { [key: string]: string | undefined }; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource { /** The name of the IdP claim. */ name?: string | null; /** A mapping from IdP ID to claim name. */ nameByIdp?: AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap | null; } export const AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.NullOr(S.String)), nameByIdp: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSourceNameByIdpMap, ).pipe(T.Body("name_by_idp")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource", }) as any as S.Schema; export interface AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem { /** The name of the claim. */ name?: string | null; /** If the claim is required when building an OIDC token. */ required?: boolean | null; /** The scope of the claim. */ scope?: AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope | null; source?: AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource | null; } export const AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.optional(S.NullOr(S.String)), required: S.optional(S.NullOr(S.Boolean)), scope: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemScope, ), ), source: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItemSource, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList = Array; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesItem = | "authorization_code" | "authorization_code_with_pkce" | "refresh_tokens" | "hybrid" | "implicit"; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList = Array; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions = AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions = AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList = Array; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions = AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions = AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppScopesItem = | "openid" | "groups" | "email" | "profile"; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppScopesItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppScopesList = Array; export const AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppScopesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppScopesItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSApp { /** The lifetime of the OIDC Access Token after creation. Valid units are m,h. Must be greater than or equal to 1m and less than or equal to 24h. */ accessTokenLifetime?: string | null; /** If client secret should be required on the token endpoint when authorization_code_with_pkce grant is used. */ allowPkceWithoutClientSecret?: boolean | null; /** The URL where this applications tile redirects users */ appLauncherUrl?: string | null; /** Identifier of the authentication protocol used for the saas app. Required for OIDC. */ authType?: AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppAuthType | null; /** The application client id */ clientId?: string | null; /** The application client secret, only returned on POST request. */ clientSecret?: string | null; customClaims?: AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList | null; /** The OIDC flows supported by this application */ grantTypes?: AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList | null; /** A regex to filter Cloudflare groups returned in ID token and userinfo endpoint */ groupFilterRegex?: string | null; hybridAndImplicitOptions?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions | null; /** The Access public certificate that will be used to verify your identity. */ publicKey?: string | null; /** The permitted URL's for Cloudflare to return Authorization codes and Access/ID tokens */ redirectUris?: AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList | null; refreshTokenOptions?: AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions | null; /** Define the user information shared with access, "offline_access" scope will be automatically enabled if refresh tokens are enabled */ scopes?: AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppScopesList | null; } export const AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSApp = /*@__PURE__*/ S.suspend(() => S.Struct({ accessTokenLifetime: S.optional( S.NullOr(S.String).pipe(T.Body("access_token_lifetime")), ), allowPkceWithoutClientSecret: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_pkce_without_client_secret")), ), appLauncherUrl: S.optional( S.NullOr(S.String).pipe(T.Body("app_launcher_url")), ), authType: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppAuthType, ).pipe(T.Body("auth_type")), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), customClaims: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppCustomClaimsList, ).pipe(T.Body("custom_claims")), ), grantTypes: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppGrantTypesList, ).pipe(T.Body("grant_types")), ), groupFilterRegex: S.optional( S.NullOr(S.String).pipe(T.Body("group_filter_regex")), ), hybridAndImplicitOptions: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppHybridAndImplicitOptions, ).pipe(T.Body("hybrid_and_implicit_options")), ), publicKey: S.optional(S.NullOr(S.String).pipe(T.Body("public_key"))), redirectUris: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppRedirectUrisList, ).pipe(T.Body("redirect_uris")), ), refreshTokenOptions: S.optional( S.NullOr( AccessApplicationsCreateResultSaaSApplicationSaasAppOIDCSaaSAppRefreshTokenOptions, ).pipe(T.Body("refresh_token_options")), ), scopes: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSAppScopesList, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSApp", }) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationSaasApp = | AccessApplicationsUpdateResultSaaSApplicationSaasAppSAMLSaaSApp | AccessApplicationsUpdateResultSaaSApplicationSaasAppOIDCSaaSApp; export const AccessApplicationsUpdateResultSaaSApplicationSaasApp = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "authType", "consumerServiceUrl", "customAttributes", "defaultRelayState", "idpEntityId", "nameIdFormat", "nameIdTransformJsonata", "publicKey", "samlAttributeTransformJsonata", "spEntityId", "ssoEndpoint", ], [ "accessTokenLifetime", "allowPkceWithoutClientSecret", "appLauncherUrl", "authType", "clientId", "clientSecret", "customClaims", "grantTypes", "groupFilterRegex", "hybridAndImplicitOptions", "publicKey", "redirectUris", "refreshTokenOptions", "scopes", ], ]), ); export type AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsUpdateResultSaaSApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsUpdateResultSaaSApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultSaaSApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsUpdateResultSaaSApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsUpdateResultSaaSApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationScimConfigMappingsList = Array; export const AccessApplicationsUpdateResultSaaSApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultSaaSApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSaaSApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsUpdateResultSaaSApplicationScimConfigMappingsList | null; } export const AccessApplicationsUpdateResultSaaSApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultSaaSApplicationTagsList = Array; export const AccessApplicationsUpdateResultSaaSApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultSaaSApplication { /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsUpdateResultSaaSApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsUpdateResultSaaSApplicationCustomPagesList | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsUpdateResultSaaSApplicationPoliciesList | null; saasApp?: AccessApplicationsUpdateResultSaaSApplicationSaasApp | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsUpdateResultSaaSApplicationScimConfig | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsUpdateResultSaaSApplicationTagsList | null; /** The application type. */ type?: AccessApplicationsUpdateResultSelfHostedApplicationType | null; } export const AccessApplicationsUpdateResultSaaSApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customPages: S.optional( S.NullOr( AccessApplicationsUpdateResultSaaSApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr(AccessApplicationsUpdateResultSaaSApplicationPoliciesList), ), saasApp: S.optional( S.NullOr(AccessApplicationsUpdateResultSaaSApplicationSaasApp).pipe( T.Body("saas_app"), ), ), scimConfig: S.optional( S.NullOr(AccessApplicationsUpdateResultSaaSApplicationScimConfig).pipe( T.Body("scim_config"), ), ), tags: S.optional( S.NullOr(AccessApplicationsUpdateResultSaaSApplicationTagsList), ), type: S.optional( S.NullOr(AccessApplicationsUpdateResultSelfHostedApplicationType), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultSaaSApplication", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsUpdateResultBrowserSSHApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserSSHApplicationAllowedIdpsList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationCustomPagesList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPublicDestination { type?: AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemWorkerDestination { type: AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItem = | AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPublicDestination | AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPrivateDestination | AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemWorkerDestination | AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllWorkersDestination | AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserSSHApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultBrowserSSHApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigMappingsList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserSSHApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigMappingsList | null; } export const AccessApplicationsUpdateResultBrowserSSHApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationSelfHostedDomainsList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserSSHApplicationTagsList = Array; export const AccessApplicationsUpdateResultBrowserSSHApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserSSHApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; /** The application type. */ type: AccessApplicationsUpdateResultBrowserSSHApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsUpdateResultBrowserSSHApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsUpdateResultSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsUpdateResultBrowserSSHApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultBrowserSSHApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsUpdateResultBrowserSSHApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsUpdateResultBrowserSSHApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsUpdateResultBrowserSSHApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsUpdateResultBrowserSSHApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, type: AccessApplicationsUpdateResultBrowserSSHApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationPoliciesList, ), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserSSHApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsUpdateResultBrowserSSHApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserSSHApplication", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsUpdateResultBrowserVNCApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserVNCApplicationAllowedIdpsList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationCustomPagesList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPublicDestination { type?: AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemWorkerDestination { type: AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItem = | AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPublicDestination | AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPrivateDestination | AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemWorkerDestination | AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllWorkersDestination | AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserVNCApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultBrowserVNCApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigMappingsList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserVNCApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigMappingsList | null; } export const AccessApplicationsUpdateResultBrowserVNCApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationSelfHostedDomainsList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserVNCApplicationTagsList = Array; export const AccessApplicationsUpdateResultBrowserVNCApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserVNCApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; /** The application type. */ type: AccessApplicationsUpdateResultBrowserVNCApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsUpdateResultBrowserVNCApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsUpdateResultSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsUpdateResultBrowserVNCApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultBrowserVNCApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsUpdateResultBrowserVNCApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsUpdateResultBrowserVNCApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsUpdateResultBrowserVNCApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsUpdateResultBrowserVNCApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, type: AccessApplicationsUpdateResultBrowserVNCApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationPoliciesList, ), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserVNCApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsUpdateResultBrowserVNCApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserVNCApplication", }) as any as S.Schema; export type AccessApplicationsUpdateResultAppLauncherApplicationType = | "self_hosted" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint"; export const AccessApplicationsUpdateResultAppLauncherApplicationType = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultAppLauncherApplicationAllowedIdpsList = Array; export const AccessApplicationsUpdateResultAppLauncherApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultAppLauncherApplicationCustomPagesList = Array; export const AccessApplicationsUpdateResultAppLauncherApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateResultAppLauncherApplicationFooterLinksItem = AccessApplicationsCreateRequestFooterLinksItem; export const AccessApplicationsUpdateResultAppLauncherApplicationFooterLinksItem = AccessApplicationsCreateRequestFooterLinksItem; export type AccessApplicationsUpdateResultAppLauncherApplicationFooterLinksList = Array; export const AccessApplicationsUpdateResultAppLauncherApplicationFooterLinksList = /*@__PURE__*/ S.Array( AccessApplicationsCreateRequestFooterLinksItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultAppLauncherApplicationLandingPageDesign = AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign; export const AccessApplicationsUpdateResultAppLauncherApplicationLandingPageDesign = AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireList = Array; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultAppLauncherApplicationPoliciesList = Array; export const AccessApplicationsUpdateResultAppLauncherApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultAppLauncherApplication { /** The application type. */ type: AccessApplicationsUpdateResultAppLauncherApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsUpdateResultAppLauncherApplicationAllowedIdpsList | null; /** The image URL of the logo shown in the App Launcher header. */ appLauncherLogoUrl?: string | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The background color of the App Launcher page. */ bgColor?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsUpdateResultAppLauncherApplicationCustomPagesList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** The links in the App Launcher footer. */ footerLinks?: AccessApplicationsUpdateResultAppLauncherApplicationFooterLinksList | null; /** The background color of the App Launcher header. */ headerBgColor?: string | null; /** The design of the App Launcher landing page shown to users when they log in. */ landingPageDesign?: AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsUpdateResultAppLauncherApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Determines when to skip the App Launcher landing page. */ skipAppLauncherLoginPage?: boolean | null; } export const AccessApplicationsUpdateResultAppLauncherApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultAppLauncherApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsUpdateResultAppLauncherApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherLogoUrl: S.optional( S.NullOr(S.String).pipe(T.Body("app_launcher_logo_url")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), bgColor: S.optional(S.NullOr(S.String).pipe(T.Body("bg_color"))), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsUpdateResultAppLauncherApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), footerLinks: S.optional( S.NullOr( AccessApplicationsUpdateResultAppLauncherApplicationFooterLinksList, ).pipe(T.Body("footer_links")), ), headerBgColor: S.optional( S.NullOr(S.String).pipe(T.Body("header_bg_color")), ), landingPageDesign: S.optional( S.NullOr( AccessApplicationsCreateResultAppLauncherApplicationLandingPageDesign, ).pipe(T.Body("landing_page_design")), ), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsUpdateResultAppLauncherApplicationPoliciesList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipAppLauncherLoginPage: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_app_launcher_login_page")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultAppLauncherApplication", }) as any as S.Schema; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationAllowedIdpsList = Array; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationCustomPagesList = Array; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList = Array; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesList = Array; export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplication { /** The application type. */ type: AccessApplicationsUpdateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationCustomPagesList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplication", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationAllowedIdpsList = Array; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationCustomPagesList = Array; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireList = Array; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesList = Array; export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserIsolationPermissionsApplication { /** The application type. */ type: AccessApplicationsUpdateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationCustomPagesList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserIsolationPermissionsApplication", }) as any as S.Schema; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationAllowedIdpsList = Array; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationCustomPagesList = Array; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList = Array; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesList = Array; export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplication { /** The application type. */ type: AccessApplicationsUpdateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationCustomPagesList | null; /** The proxy endpoint domain in the format: 10 alphanumeric characters followed by .proxy.cloudflare-gateway.com */ domain?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesList | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowedIdps: S.optional( S.NullOr( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), domain: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplication", }) as any as S.Schema; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireList = Array; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBookmarkApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBookmarkApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesList = Array; export const AccessApplicationsUpdateResultBookmarkApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBookmarkApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBookmarkApplicationTagsList = Array; export const AccessApplicationsUpdateResultBookmarkApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBookmarkApplication { /** UUID. */ id?: string | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** The URL or domain of the bookmark. */ domain?: string | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsUpdateResultBookmarkApplicationPoliciesList | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsUpdateResultBookmarkApplicationTagsList | null; /** The application type. */ type?: AccessApplicationsUpdateResultSelfHostedApplicationType | null; } export const AccessApplicationsUpdateResultBookmarkApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), domain: S.optional(S.NullOr(S.String)), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr(AccessApplicationsUpdateResultBookmarkApplicationPoliciesList), ), tags: S.optional( S.NullOr(AccessApplicationsUpdateResultBookmarkApplicationTagsList), ), type: S.optional( S.NullOr(AccessApplicationsUpdateResultSelfHostedApplicationType), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBookmarkApplication", }) as any as S.Schema; export type AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItemProtocol = "SSH"; export const AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItemProtocol = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList = Array; export const AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesMap = { [key: string]: | AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList | undefined; }; export const AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesMap = /*@__PURE__*/ S.Record( S.String, AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesValueList, ) as any as S.Schema; export interface AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItem { /** The port that the targets use for the chosen communication protocol. A port cannot be assigned to multiple protocols. */ port: number; /** The communication protocol your application secures. */ protocol: AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItemProtocol; /** Contains a map of target attribute keys to target attribute values. */ targetAttributes: AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesMap; } export const AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItem = /*@__PURE__*/ S.suspend(() => S.Struct({ port: S.Number, protocol: AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItemProtocol, targetAttributes: AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItemTargetAttributesMap.pipe( T.Body("target_attributes"), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaList = Array; export const AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList = Array; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemConnectionRulesSsh { /** Contains the Unix usernames that may be used when connecting over SSH. */ usernames: AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList; /** Enables using Identity Provider email alias as SSH username. */ allowEmailAlias?: boolean | null; } export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemConnectionRulesSsh = /*@__PURE__*/ S.suspend(() => S.Struct({ usernames: AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemConnectionRulesSshUsernamesList, allowEmailAlias: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_email_alias")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemConnectionRulesSsh", }) as any as S.Schema; export interface AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemConnectionRules { /** The SSH-specific rules that define how users may connect to the targets secured by your application. */ ssh?: AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemConnectionRulesSsh | null; } export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ ssh: S.optional( S.NullOr( AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemConnectionRulesSsh, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = "piv_key"; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. For infrastructure applications, only `piv_key` is supported. */ allowedAuthenticators?: AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireList = Array; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** The rules that define how users may connect to the targets secured by your application. */ connectionRules?: AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeList | null; /** Configures multi-factor authentication (MFA) settings for infrastructure applications. */ mfaConfig?: AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireList | null; updatedAt?: string | null; } export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), connectionRules: S.optional( S.NullOr( AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemIncludeList, ), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), require: S.optional( S.NullOr( AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItemRequireList, ), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultInfrastructureApplicationPoliciesList = Array; export const AccessApplicationsUpdateResultInfrastructureApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultInfrastructureApplicationPoliciesItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultInfrastructureApplication { targetCriteria: AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaList; /** The application type. */ type: AccessApplicationsUpdateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** Audience tag. */ aud?: string | null; /** The name of the application. */ name?: string | null; policies?: AccessApplicationsUpdateResultInfrastructureApplicationPoliciesList | null; } export const AccessApplicationsUpdateResultInfrastructureApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ targetCriteria: AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaList.pipe( T.Body("target_criteria"), ), type: AccessApplicationsUpdateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), aud: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), policies: S.optional( S.NullOr( AccessApplicationsUpdateResultInfrastructureApplicationPoliciesList, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultInfrastructureApplication", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItemProtocol = "RDP"; export const AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItemProtocol = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap = { [key: string]: | AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList | undefined; }; export const AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap = /*@__PURE__*/ S.Record( S.String, AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesValueList, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItem { /** The port that the targets use for the chosen communication protocol. A port cannot be assigned to multiple protocols. */ port: number; /** The communication protocol your application secures. */ protocol: AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItemProtocol; /** Contains a map of target attribute keys to target attribute values. */ targetAttributes: AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap; } export const AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItem = /*@__PURE__*/ S.suspend(() => S.Struct({ port: S.Number, protocol: AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItemProtocol, targetAttributes: AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItemTargetAttributesMap.pipe( T.Body("target_attributes"), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationAllowedIdpsList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationCustomPagesList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPublicDestination { type?: AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemWorkerDestination { type: AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItem = | AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPublicDestination | AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPrivateDestination | AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemWorkerDestination | AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllWorkersDestination | AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserRDPApplicationMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultBrowserRDPApplicationMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigMappingsList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserRDPApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigMappingsList | null; } export const AccessApplicationsUpdateResultBrowserRDPApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationSelfHostedDomainsList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationSelfHostedDomainsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultBrowserRDPApplicationTagsList = Array; export const AccessApplicationsUpdateResultBrowserRDPApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultBrowserRDPApplication { /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain: string; targetCriteria: AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaList; /** The application type. */ type: AccessApplicationsUpdateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** Enables loading application content in an iFrame. */ allowIframe?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsUpdateResultBrowserRDPApplicationAllowedIdpsList | null; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; corsHeaders?: AccessApplicationsUpdateResultSelfHostedApplicationCorsHeaders | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsUpdateResultBrowserRDPApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsList | null; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean | null; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultBrowserRDPApplicationMfaConfig | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean | null; policies?: AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesList | null; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsUpdateResultBrowserRDPApplicationScimConfig | null; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsUpdateResultBrowserRDPApplicationSelfHostedDomainsList | null; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsUpdateResultBrowserRDPApplicationTagsList | null; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean | null; } export const AccessApplicationsUpdateResultBrowserRDPApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ domain: S.String, targetCriteria: AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaList.pipe( T.Body("target_criteria"), ), type: AccessApplicationsUpdateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.NullOr(S.Boolean).pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationCorsHeaders, ).pipe(T.Body("cors_headers")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationDestinationsList, ), ), eagerRedirectCookieSetting: S.optional( S.NullOr(S.Boolean).pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("path_cookie_attribute")), ), policies: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationPoliciesList, ), ), readServiceTokensFromHeader: S.optional( S.NullOr(S.String).pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationScimConfig, ).pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( S.NullOr( AccessApplicationsUpdateResultBrowserRDPApplicationSelfHostedDomainsList, ).pipe(T.Body("self_hosted_domains")), ), service_auth_401_redirect: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), skipInterstitial: S.optional( S.NullOr(S.Boolean).pipe(T.Body("skip_interstitial")), ), tags: S.optional( S.NullOr(AccessApplicationsUpdateResultBrowserRDPApplicationTagsList), ), useClientlessIsolationAppLauncherUrl: S.optional( S.NullOr(S.Boolean).pipe( T.Body("use_clientless_isolation_app_launcher_url"), ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultBrowserRDPApplication", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationAllowedIdpsList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationCustomPagesList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPublicDestination { type?: AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemWorkerDestination { type: AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationDestinationsItem = | AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPublicDestination | AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPrivateDestination | AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemWorkerDestination | AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllWorkersDestination | AccessApplicationsUpdateResultMcpServerApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsUpdateResultMcpServerApplicationDestinationsList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsUpdateResultMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsUpdateResultMcpServerApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsUpdateResultMcpServerApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsUpdateResultMcpServerApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsUpdateResultMcpServerApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsUpdateResultMcpServerApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationPoliciesList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsUpdateResultMcpServerApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsUpdateResultMcpServerApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationScimConfigMappingsList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsUpdateResultMcpServerApplicationScimConfigMappingsList | null; } export const AccessApplicationsUpdateResultMcpServerApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerApplicationTagsList = Array; export const AccessApplicationsUpdateResultMcpServerApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerApplication { /** The application type. */ type: AccessApplicationsUpdateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsUpdateResultMcpServerApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsUpdateResultMcpServerApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsUpdateResultMcpServerApplicationDestinationsList | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsUpdateResultMcpServerApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; policies?: AccessApplicationsUpdateResultMcpServerApplicationPoliciesList | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsUpdateResultMcpServerApplicationScimConfig | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsUpdateResultMcpServerApplicationTagsList | null; } export const AccessApplicationsUpdateResultMcpServerApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowedIdps: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationDestinationsList, ), ), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), policies: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationPoliciesList, ), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerApplicationScimConfig, ).pipe(T.Body("scim_config")), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), tags: S.optional( S.NullOr(AccessApplicationsUpdateResultMcpServerApplicationTagsList), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerApplication", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationAllowedIdpsList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationAllowedIdpsList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationCustomPagesList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationCustomPagesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPublicDestinationType = "public"; export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPublicDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPublicDestination { type?: AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPublicDestinationType | null; /** The URI of the destination. Public destinations' URIs can include a domain and path with [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/). */ uri?: string | null; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPublicDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPublicDestinationType, ), ), uri: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPublicDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol = | "tcp" | "udp"; export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationType = "private"; export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPrivateDestination { /** The CIDR range of the destination. Single IPs will be computed as /32. */ cidr?: string | null; /** The hostname of the destination. Matches a valid SNI served by an HTTPS origin. */ hostname?: string | null; /** The L4 protocol of the destination. When omitted, both UDP and TCP traffic will match. */ l4Protocol?: AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol | null; /** The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match. */ portRange?: string | null; type?: AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationType | null; /** The VNET ID to match the destination. When omitted, all VNETs will match. */ vnetId?: string | null; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPrivateDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ cidr: S.optional(S.NullOr(S.String)), hostname: S.optional(S.NullOr(S.String)), l4Protocol: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationL4Protocol, ).pipe(T.Body("l4_protocol")), ), portRange: S.optional(S.NullOr(S.String).pipe(T.Body("port_range"))), type: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPrivateDestinationType, ), ), vnetId: S.optional(S.NullOr(S.String).pipe(T.Body("vnet_id"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPrivateDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType = "via_mcp_server_portal"; export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination { /** The MCP server id configured in ai-controls. */ mcpServerId?: string | null; type?: AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType | null; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ mcpServerId: S.optional(S.NullOr(S.String).pipe(T.Body("mcp_server_id"))), type: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestinationType, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemWorkerDestinationType = "worker"; export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemWorkerDestination { type: AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemWorkerDestinationType; /** The ID of the Cloudflare Worker to protect with Access. */ workerId: string; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemWorkerDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType = "preview_worker"; export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination { type: AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType; /** The ID of the Cloudflare Worker whose preview deployments to protect with Access. */ workerId: string; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestinationType, workerId: S.String.pipe(T.Body("worker_id")), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType = "all_workers"; export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestination { type: AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType = "all_preview_workers"; export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination { type: AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestinationType, }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItem = | AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPublicDestination | AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPrivateDestination | AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemViaMcpServerPortalDestination | AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemWorkerDestination | AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemPreviewWorkerDestination | AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllWorkersDestination | AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItemAllPreviewWorkersDestination; export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["type", "uri"], ["cidr", "hostname", "l4Protocol", "portRange", "type", "vnetId"], ["mcpServerId", "type"], ["type", "workerId"], ["type", "workerId"], ["type"], ["type"], ]), ); export type AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration { /** Allows any client with redirect URIs on localhost. */ allowAnyOnLocalhost?: boolean | null; /** Allows any client with redirect URIs on 127.0.0.1. */ allowAnyOnLoopback?: boolean | null; /** The URIs that are allowed as redirect URIs for dynamically registered clients. Must use the `https` protocol. Paths may end in `/*` to match all sub-paths. */ allowedUris?: AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList | null; /** Whether dynamic client registration is enabled. */ enabled?: boolean | null; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAnyOnLocalhost: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_localhost")), ), allowAnyOnLoopback: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_any_on_loopback")), ), allowedUris: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistrationAllowedUrisList, ).pipe(T.Body("allowed_uris")), ), enabled: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export const AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfigurationGrant = AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfiguration { /** Settings for OAuth dynamic client registration. */ dynamicClientRegistration?: AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration | null; /** Whether the OAuth configuration is enabled for this application. When set to `false`, Access will not handle OAuth for this application. Defaults to `true` if omitted. */ enabled?: boolean | null; /** Settings for OAuth grant behavior. */ grant?: AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant | null; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfiguration = /*@__PURE__*/ S.suspend(() => S.Struct({ dynamicClientRegistration: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfigurationDynamicClientRegistration, ).pipe(T.Body("dynamic_client_registration")), ), enabled: S.optional(S.NullOr(S.Boolean)), grant: S.optional( S.NullOr( AccessApplicationsCreateResultSelfHostedApplicationOauthConfigurationGrant, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfiguration", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdp | null; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRulesRdp, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRules", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemMfaConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItem { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemConnectionRules, ).pipe(T.Body("connection_rules")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr( AccessApplicationsUpdateResultSelfHostedApplicationPoliciesItemDecision, ), ), exclude: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemExcludeList, ), ), include: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemIncludeList, ), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemMfaConfig, ).pipe(T.Body("mfa_config")), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItemRequireList, ), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic; export type AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken; export type AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 = AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2; export type AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = "access_service_token"; export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken { /** Client ID of the Access service token used to authenticate with the remote service. */ clientId: string; /** Client secret of the Access service token used to authenticate with the remote service. */ clientSecret: string; /** The authentication scheme to use when making SCIM requests to this application. */ scheme: AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken = /*@__PURE__*/ S.suspend(() => S.Struct({ clientId: S.String.pipe(T.Body("client_id")), clientSecret: S.String.pipe(T.Body("client_secret")), scheme: AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceTokenScheme, }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemAccessSCIMConfigAuthenticationAccessServiceToken; export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], ]), ); export type AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItem, ) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthentication = | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationHTTPBasic | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOAuthBearerToken | AccessApplicationsCreateResultSelfHostedApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationItemSCIMConfigAuthenticationOauth2 | AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken | AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthenticationAccessSCIMConfigMultiAuthenticationList; export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthentication = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["password", "scheme", "user"], ["token", "scheme"], ["authorizationUrl", "clientId", "clientSecret"], ["clientId", "clientSecret", "scheme"], [], ]), ); export type AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigMappingsItemStrictness = | "strict" | "passthrough"; export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigMappingsItemStrictness = /*@__PURE__*/ S.String; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigMappingsItem { /** Which SCIM resource type this mapping applies to. */ schema: string; /** Whether or not this mapping is enabled. */ enabled?: boolean | null; /** A [SCIM filter expression](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.2.2) that matches resources that should be provisioned to this application. */ filter?: string | null; /** Whether or not this mapping applies to creates, updates, or deletes. */ operations?: unknown | null; /** The level of adherence to outbound resource schemas when provisioning to this mapping. ‘Strict’ removes unknown values, while ‘passthrough’ passes unknown values to the target. */ strictness?: AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigMappingsItemStrictness | null; /** A [JSONata](https://jsonata.org/) expression that transforms the resource before provisioning it in the application. */ transformJsonata?: string | null; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigMappingsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ schema: S.String, enabled: S.optional(S.NullOr(S.Boolean)), filter: S.optional(S.NullOr(S.String)), operations: S.optional(S.NullOr(S.Unknown)), strictness: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigMappingsItemStrictness, ), ), transformJsonata: S.optional( S.NullOr(S.String).pipe(T.Body("transform_jsonata")), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigMappingsItem", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigMappingsList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigMappingsList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigMappingsItem, ) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfig { /** The UID of the IdP to use as the source for SCIM resources to provision to this application. */ idpUid: string; /** The base URI for the application's SCIM-compatible API. */ remoteUri: string; /** Attributes for configuring HTTP Basic authentication scheme for SCIM provisioning to an application. */ authentication?: AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthentication | null; /** If false, propagates DELETE requests to the target application for SCIM resources. If true, sets 'active' to false on the SCIM resource. Note: Some targets do not support DELETE operations. */ deactivateOnDelete?: boolean | null; /** Whether SCIM provisioning is turned on for this application. */ enabled?: boolean | null; /** A list of mappings to apply to SCIM resources before provisioning them in this application. These can transform or filter the resources to be provisioned. */ mappings?: AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigMappingsList | null; } export const AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ idpUid: S.String.pipe(T.Body("idp_uid")), remoteUri: S.String.pipe(T.Body("remote_uri")), authentication: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigAuthentication, ), ), deactivateOnDelete: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deactivate_on_delete")), ), enabled: S.optional(S.NullOr(S.Boolean)), mappings: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfigMappingsList, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfig", }) as any as S.Schema; export type AccessApplicationsUpdateResultMcpServerPortalApplicationTagsList = Array; export const AccessApplicationsUpdateResultMcpServerPortalApplicationTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsUpdateResultMcpServerPortalApplication { /** The application type. */ type: AccessApplicationsUpdateResultSelfHostedApplicationType; /** UUID. */ id?: string | null; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean | null; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsUpdateResultMcpServerPortalApplicationAllowedIdpsList | null; /** Audience tag. */ aud?: string | null; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean | null; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string | null; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string | null; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsUpdateResultMcpServerPortalApplicationCustomPagesList | null; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsList | null; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string | null; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the application. */ name?: string | null; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfiguration | null; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean | null; policies?: AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesList | null; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string | null; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfig | null; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string | null; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsUpdateResultMcpServerPortalApplicationTagsList | null; } export const AccessApplicationsUpdateResultMcpServerPortalApplication = /*@__PURE__*/ S.suspend(() => S.Struct({ type: AccessApplicationsUpdateResultSelfHostedApplicationType, id: S.optional(S.NullOr(S.String)), allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), allowedIdps: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationAllowedIdpsList, ).pipe(T.Body("allowed_idps")), ), aud: S.optional(S.NullOr(S.String)), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customDenyMessage: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_deny_url")), ), customNonIdentityDenyUrl: S.optional( S.NullOr(S.String).pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationCustomPagesList, ).pipe(T.Body("custom_pages")), ), destinations: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationDestinationsList, ), ), domain: S.optional(S.NullOr(S.String)), httpOnlyCookieAttribute: S.optional( S.NullOr(S.Boolean).pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), oauthConfiguration: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationOauthConfiguration, ).pipe(T.Body("oauth_configuration")), ), optionsPreflightBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("options_preflight_bypass")), ), policies: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationPoliciesList, ), ), sameSiteCookieAttribute: S.optional( S.NullOr(S.String).pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationScimConfig, ).pipe(T.Body("scim_config")), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), tags: S.optional( S.NullOr( AccessApplicationsUpdateResultMcpServerPortalApplicationTagsList, ), ), }), ).annotate({ identifier: "AccessApplicationsUpdateResultMcpServerPortalApplication", }) as any as S.Schema; export type AccessApplicationsUpdateResult = | AccessApplicationsUpdateResultSelfHostedApplication | AccessApplicationsUpdateResultSaaSApplication | AccessApplicationsUpdateResultBrowserSSHApplication | AccessApplicationsUpdateResultBrowserVNCApplication | AccessApplicationsUpdateResultAppLauncherApplication | AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplication | AccessApplicationsUpdateResultBrowserIsolationPermissionsApplication | AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplication | AccessApplicationsUpdateResultBookmarkApplication | AccessApplicationsUpdateResultInfrastructureApplication | AccessApplicationsUpdateResultBrowserRDPApplication | AccessApplicationsUpdateResultMcpServerApplication | AccessApplicationsUpdateResultMcpServerPortalApplication; export const AccessApplicationsUpdateResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "domain", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "id", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "customPages", "logoUrl", "name", "policies", "saasApp", "scimConfig", "tags", "type", ], [ "domain", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "domain", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "type", "id", "allowedIdps", "appLauncherLogoUrl", "aud", "autoRedirectToIdentity", "bgColor", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "footerLinks", "headerBgColor", "landingPageDesign", "name", "policies", "sessionDuration", "skipAppLauncherLoginPage", ], [ "type", "id", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "name", "policies", "sessionDuration", ], [ "type", "id", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "name", "policies", "sessionDuration", ], [ "type", "id", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "domain", "name", "policies", "sessionDuration", ], [ "id", "appLauncherVisible", "aud", "domain", "logoUrl", "name", "policies", "tags", "type", ], ["targetCriteria", "type", "id", "aud", "name", "policies"], [ "domain", "targetCriteria", "type", "id", "allowAuthenticateViaWarp", "allowIframe", "allowedIdps", "appLauncherVisible", "aud", "autoRedirectToIdentity", "corsHeaders", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "eagerRedirectCookieSetting", "enableBindingCookie", "httpOnlyCookieAttribute", "logoUrl", "mfaConfig", "name", "oauthConfiguration", "optionsPreflightBypass", "pathCookieAttribute", "policies", "readServiceTokensFromHeader", "sameSiteCookieAttribute", "scimConfig", "selfHostedDomains", "service_auth_401_redirect", "sessionDuration", "skipInterstitial", "tags", "useClientlessIsolationAppLauncherUrl", ], [ "type", "id", "allowAuthenticateViaWarp", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "httpOnlyCookieAttribute", "logoUrl", "name", "oauthConfiguration", "optionsPreflightBypass", "policies", "sameSiteCookieAttribute", "scimConfig", "sessionDuration", "tags", ], [ "type", "id", "allowAuthenticateViaWarp", "allowedIdps", "aud", "autoRedirectToIdentity", "customDenyMessage", "customDenyUrl", "customNonIdentityDenyUrl", "customPages", "destinations", "domain", "httpOnlyCookieAttribute", "logoUrl", "name", "oauthConfiguration", "optionsPreflightBypass", "policies", "sameSiteCookieAttribute", "scimConfig", "sessionDuration", "tags", ], ]), ); export type UpdateAccessApplicationResponse = AccessApplicationsUpdateResult; export const UpdateAccessApplicationResponse = /*@__PURE__*/ S.suspend(() => AccessApplicationsUpdateResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "UpdateAccessApplicationResponse", }) as any as S.Schema; export type AccessApplicationsUpdateForZoneRequestPoliciesSelfHostedApplicationItem = | string | AccessApplicationsCreateRequestPoliciesSelfHostedApplicationItemAccessAppPolicyLink | AccessApplicationsUpdateRequestPoliciesSelfHostedApplicationItemCase2 | InlineAccessPolicy; export const AccessApplicationsUpdateForZoneRequestPoliciesSelfHostedApplicationItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [], ["id", "precedence"], [ "id", "approvalGroups", "approvalRequired", "connectionRules", "isolationRequired", "mfaConfig", "precedence", "purposeJustificationPrompt", "purposeJustificationRequired", "sessionDuration", ], [ "id", "decision", "include", "exclude", "require", "name", "precedence", "approvalGroups", "approvalRequired", "isolationRequired", "purposeJustificationPrompt", "purposeJustificationRequired", "sessionDuration", ], ]), ); export type AccessApplicationsUpdateForZoneRequestPoliciesSelfHostedApplicationList = Array; export const AccessApplicationsUpdateForZoneRequestPoliciesSelfHostedApplicationList = /*@__PURE__*/ S.Array( AccessApplicationsUpdateForZoneRequestPoliciesSelfHostedApplicationItem, ) as any as S.Schema; export type AccessApplicationsUpdateForZoneRequestPolicies = | AccessApplicationsUpdateForZoneRequestPoliciesSelfHostedApplicationList | AccessApplicationsUpdateRequestPoliciesInfrastructureApplicationList; export const AccessApplicationsUpdateForZoneRequestPolicies = /*@__PURE__*/ S.Unknown.pipe(T.UnionCases([[], []])); export interface UpdateAccessApplicationForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** Identifier. */ appId: string; /** The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher. */ domain?: string; /** The application type. */ type?: AccessApplicationsUpdateRequestType; /** When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication. */ allowAuthenticateViaWarp?: boolean; /** Enables loading application content in an iFrame. */ allowIframe?: boolean; /** The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account. */ allowedIdps?: AccessApplicationsUpdateRequestAllowedIdpsList; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean; /** When set to `true`, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps. */ autoRedirectToIdentity?: boolean; corsHeaders?: AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplication; /** The custom error message shown to a user when they are denied access to the application. */ customDenyMessage?: string; /** The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules. */ customDenyUrl?: string; /** The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules. */ customNonIdentityDenyUrl?: string; /** The custom pages that will be displayed when applicable for this application */ customPages?: AccessApplicationsUpdateRequestCustomPagesList; /** List of destinations secured by Access. This supersedes `self_hosted_domains` to allow for more flexibility in defining different types of domains. If `destinations` are provided, then `self_hosted_domains` will be ignored. */ destinations?: AccessApplicationsUpdateRequestDestinationsList; /** Preemptively sets the Access session cookie on every hostname in a multi-hostname self-hosted application during the initial redirect chain, rather than setting it lazily on first visit. Defaults to true. Set to false to disable the eager redirect cookie behavior. */ eagerRedirectCookieSetting?: boolean; /** Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks. */ enableBindingCookie?: boolean; /** Enables the HttpOnly cookie attribute, which increases security against XSS attacks. */ httpOnlyCookieAttribute?: boolean; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsUpdateRequestMfaConfig; /** The name of the application. */ name?: string; /** **Beta:** Optional configuration for managing an OAuth authorization flow controlled by Access. When set, Access will act as the OAuth authorization server for this application. Only compatible with OAuth clients that support [RFC 8707](https://datatracker.ietf.org/doc/html/rfc8707) (Resource Indicators for OAuth 2.0). This feature is currently in beta. */ oauthConfiguration?: AccessApplicationsUpdateRequestOauthConfiguration; /** Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if cors_headers is set. */ optionsPreflightBypass?: boolean; /** Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default */ pathCookieAttribute?: boolean; /** The policies that Access applies to the application, in ascending order of precedence. Items can reference existing policies or create new policies exclusive to the application. Reusable and inline policies are mutually exclusive. */ policies?: AccessApplicationsUpdateForZoneRequestPolicies; /** Allows matching Access Service Tokens passed HTTP in a single header with this name. */ readServiceTokensFromHeader?: string; /** Sets the SameSite cookie setting, which provides increased security against CSRF attacks. */ sameSiteCookieAttribute?: string; /** Configuration for provisioning to this application via SCIM. This is currently in closed beta. */ scimConfig?: AccessApplicationsUpdateRequestScimConfig; /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until **November 21, 2025.** If `destinations` are provided, then `self_hosted_domains` will be ignored. */ selfHostedDomains?: AccessApplicationsUpdateRequestSelfHostedDomainsList; /** Returns a 401 status code when the request is blocked by a Service Auth policy. */ service_auth_401_redirect?: boolean; /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */ sessionDuration?: string; /** Enables automatic authentication through cloudflared. */ skipInterstitial?: boolean; /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */ tags?: AccessApplicationsUpdateRequestTagsList; /** Determines if users can access this application via a clientless browser isolation URL. */ useClientlessIsolationAppLauncherUrl?: boolean; saasApp?: AccessApplicationsUpdateRequestSaasApp; /** The image URL of the logo shown in the App Launcher header. */ appLauncherLogoUrl?: string; /** The background color of the App Launcher page. */ bgColor?: string; /** The links in the App Launcher footer. */ footerLinks?: AccessApplicationsUpdateRequestFooterLinksList; /** The background color of the App Launcher header. */ headerBgColor?: string; /** The design of the App Launcher landing page shown to users when they log in. */ landingPageDesign?: AccessApplicationsCreateRequestLandingPageDesign; /** Determines when to skip the App Launcher landing page. */ skipAppLauncherLoginPage?: boolean; targetCriteria?: AccessApplicationsUpdateRequestTargetCriteria; } export const UpdateAccessApplicationForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), appId: S.String.pipe(T.Label("app_id")), domain: S.optional(S.String), type: S.optional(AccessApplicationsUpdateRequestType), allowAuthenticateViaWarp: S.optional( S.Boolean.pipe(T.Body("allow_authenticate_via_warp")), ), allowIframe: S.optional(S.Boolean.pipe(T.Body("allow_iframe"))), allowedIdps: S.optional( AccessApplicationsUpdateRequestAllowedIdpsList.pipe( T.Body("allowed_idps"), ), ), appLauncherVisible: S.optional( S.Boolean.pipe(T.Body("app_launcher_visible")), ), autoRedirectToIdentity: S.optional( S.Boolean.pipe(T.Body("auto_redirect_to_identity")), ), corsHeaders: S.optional( AccessApplicationsUpdateRequestCorsHeadersSelfHostedApplication.pipe( T.Body("cors_headers"), ), ), customDenyMessage: S.optional( S.String.pipe(T.Body("custom_deny_message")), ), customDenyUrl: S.optional(S.String.pipe(T.Body("custom_deny_url"))), customNonIdentityDenyUrl: S.optional( S.String.pipe(T.Body("custom_non_identity_deny_url")), ), customPages: S.optional( AccessApplicationsUpdateRequestCustomPagesList.pipe( T.Body("custom_pages"), ), ), destinations: S.optional(AccessApplicationsUpdateRequestDestinationsList), eagerRedirectCookieSetting: S.optional( S.Boolean.pipe(T.Body("eager_redirect_cookie_setting")), ), enableBindingCookie: S.optional( S.Boolean.pipe(T.Body("enable_binding_cookie")), ), httpOnlyCookieAttribute: S.optional( S.Boolean.pipe(T.Body("http_only_cookie_attribute")), ), logoUrl: S.optional(S.String.pipe(T.Body("logo_url"))), mfaConfig: S.optional( AccessApplicationsUpdateRequestMfaConfig.pipe(T.Body("mfa_config")), ), name: S.optional(S.String), oauthConfiguration: S.optional( AccessApplicationsUpdateRequestOauthConfiguration.pipe( T.Body("oauth_configuration"), ), ), optionsPreflightBypass: S.optional( S.Boolean.pipe(T.Body("options_preflight_bypass")), ), pathCookieAttribute: S.optional( S.Boolean.pipe(T.Body("path_cookie_attribute")), ), policies: S.optional(AccessApplicationsUpdateForZoneRequestPolicies), readServiceTokensFromHeader: S.optional( S.String.pipe(T.Body("read_service_tokens_from_header")), ), sameSiteCookieAttribute: S.optional( S.String.pipe(T.Body("same_site_cookie_attribute")), ), scimConfig: S.optional( AccessApplicationsUpdateRequestScimConfig.pipe(T.Body("scim_config")), ), selfHostedDomains: S.optional( AccessApplicationsUpdateRequestSelfHostedDomainsList.pipe( T.Body("self_hosted_domains"), ), ), service_auth_401_redirect: S.optional(S.Boolean), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), skipInterstitial: S.optional(S.Boolean.pipe(T.Body("skip_interstitial"))), tags: S.optional(AccessApplicationsUpdateRequestTagsList), useClientlessIsolationAppLauncherUrl: S.optional( S.Boolean.pipe(T.Body("use_clientless_isolation_app_launcher_url")), ), saasApp: S.optional( AccessApplicationsUpdateRequestSaasApp.pipe(T.Body("saas_app")), ), appLauncherLogoUrl: S.optional( S.String.pipe(T.Body("app_launcher_logo_url")), ), bgColor: S.optional(S.String.pipe(T.Body("bg_color"))), footerLinks: S.optional( AccessApplicationsUpdateRequestFooterLinksList.pipe( T.Body("footer_links"), ), ), headerBgColor: S.optional(S.String.pipe(T.Body("header_bg_color"))), landingPageDesign: S.optional( AccessApplicationsCreateRequestLandingPageDesign.pipe( T.Body("landing_page_design"), ), ), skipAppLauncherLoginPage: S.optional( S.Boolean.pipe(T.Body("skip_app_launcher_login_page")), ), targetCriteria: S.optional( AccessApplicationsUpdateRequestTargetCriteria.pipe( T.Body("target_criteria"), ), ), }) .pipe( T.Http({ method: "PUT", uri: "/zones/{zone_id}/access/apps/{app_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessApplicationForZoneRequest", }) as any as S.Schema; export type AccessApplicationsPoliciesUpdateRequestApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsPoliciesUpdateRequestApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsPoliciesUpdateRequestApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsPoliciesUpdateRequestApprovalGroupsItemEmailAddressesList; /** The UUID of an re-usable email list. */ emailListUuid?: string; } export const AccessApplicationsPoliciesUpdateRequestApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( AccessApplicationsPoliciesUpdateRequestApprovalGroupsItemEmailAddressesList.pipe( T.Body("email_addresses"), ), ), emailListUuid: S.optional(S.String.pipe(T.Body("email_list_uuid"))), }), ).annotate({ identifier: "AccessApplicationsPoliciesUpdateRequestApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsPoliciesUpdateRequestApprovalGroupsList = Array; export const AccessApplicationsPoliciesUpdateRequestApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesUpdateRequestApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array< | AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem | (string & {}) >; export const AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array< | AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem | (string & {}) >; export const AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesUpdateRequestConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList; } export const AccessApplicationsPoliciesUpdateRequestConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList.pipe( T.Body("allowed_clipboard_local_to_remote_formats"), ), ), allowedClipboardRemoteToLocalFormats: S.optional( AccessApplicationsPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList.pipe( T.Body("allowed_clipboard_remote_to_local_formats"), ), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesUpdateRequestConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsPoliciesUpdateRequestConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsPoliciesUpdateRequestConnectionRulesRdp; } export const AccessApplicationsPoliciesUpdateRequestConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( AccessApplicationsPoliciesUpdateRequestConnectionRulesRdp, ), }), ).annotate({ identifier: "AccessApplicationsPoliciesUpdateRequestConnectionRules", }) as any as S.Schema; export type AccessApplicationsPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsList = Array< | AccessApplicationsPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsItem | (string & {}) >; export const AccessApplicationsPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesUpdateRequestMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsList; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string; } export const AccessApplicationsPoliciesUpdateRequestMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( AccessApplicationsPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsList.pipe( T.Body("allowed_authenticators"), ), ), mfaDisabled: S.optional(S.Boolean.pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "AccessApplicationsPoliciesUpdateRequestMfaConfig", }) as any as S.Schema; export interface UpdateAccessApplicationPolicyForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ appId: string; /** UUID. */ policyId: string; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsPoliciesUpdateRequestApprovalGroupsList; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsPoliciesUpdateRequestConnectionRules; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsPoliciesUpdateRequestMfaConfig; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string; } export const UpdateAccessApplicationPolicyForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), appId: S.String.pipe(T.Label("app_id")), policyId: S.String.pipe(T.Label("policy_id")), approvalGroups: S.optional( AccessApplicationsPoliciesUpdateRequestApprovalGroupsList.pipe( T.Body("approval_groups"), ), ), approvalRequired: S.optional(S.Boolean.pipe(T.Body("approval_required"))), connectionRules: S.optional( AccessApplicationsPoliciesUpdateRequestConnectionRules.pipe( T.Body("connection_rules"), ), ), isolationRequired: S.optional( S.Boolean.pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( AccessApplicationsPoliciesUpdateRequestMfaConfig.pipe( T.Body("mfa_config"), ), ), precedence: S.optional(S.Number), purposeJustificationPrompt: S.optional( S.String.pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.Boolean.pipe(T.Body("purpose_justification_required")), ), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/apps/{app_id}/policies/{policy_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessApplicationPolicyForAccountRequest", }) as any as S.Schema; export type AccessApplicationsPoliciesUpdateResponseApprovalGroupsItemEmailAddressesList = Array; export const AccessApplicationsPoliciesUpdateResponseApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessApplicationsPoliciesUpdateResponseApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessApplicationsPoliciesUpdateResponseApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessApplicationsPoliciesUpdateResponseApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessApplicationsPoliciesUpdateResponseApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesUpdateResponseApprovalGroupsItem", }) as any as S.Schema; export type AccessApplicationsPoliciesUpdateResponseApprovalGroupsList = Array; export const AccessApplicationsPoliciesUpdateResponseApprovalGroupsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesUpdateResponseApprovalGroupsItem, ) as any as S.Schema; export type AccessApplicationsPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessApplicationsPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessApplicationsPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessApplicationsPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessApplicationsPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessApplicationsPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesUpdateResponseConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessApplicationsPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessApplicationsPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessApplicationsPoliciesUpdateResponseConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessApplicationsPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessApplicationsPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesUpdateResponseConnectionRulesRdp", }) as any as S.Schema; export interface AccessApplicationsPoliciesUpdateResponseConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessApplicationsPoliciesUpdateResponseConnectionRulesRdp | null; } export const AccessApplicationsPoliciesUpdateResponseConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional( S.NullOr(AccessApplicationsPoliciesUpdateResponseConnectionRulesRdp), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesUpdateResponseConnectionRules", }) as any as S.Schema; export type AccessApplicationsPoliciesUpdateResponseDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessApplicationsPoliciesUpdateResponseDecision = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesUpdateResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessApplicationsPoliciesUpdateResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessApplicationsPoliciesUpdateResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessApplicationsPoliciesUpdateResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessApplicationsPoliciesUpdateResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessApplicationsPoliciesUpdateResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessApplicationsPoliciesUpdateResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessApplicationsPoliciesUpdateResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessApplicationsPoliciesUpdateResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessApplicationsPoliciesUpdateResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessApplicationsPoliciesUpdateResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessApplicationsPoliciesUpdateResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessApplicationsPoliciesUpdateResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export const AccessApplicationsPoliciesUpdateResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export type AccessApplicationsPoliciesUpdateResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessApplicationsPoliciesUpdateResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessApplicationsPoliciesUpdateResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessApplicationsPoliciesUpdateResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessApplicationsPoliciesUpdateResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessApplicationsPoliciesUpdateResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessApplicationsPoliciesUpdateResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessApplicationsPoliciesUpdateResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessApplicationsPoliciesUpdateResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessApplicationsPoliciesUpdateResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessApplicationsPoliciesUpdateResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessApplicationsPoliciesUpdateResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessApplicationsPoliciesUpdateResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessApplicationsPoliciesUpdateResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsPoliciesUpdateResponseExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessApplicationsPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesUpdateResponseExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsPoliciesUpdateResponseExcludeList = Array; export const AccessApplicationsPoliciesUpdateResponseExcludeList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesUpdateResponseExcludeItem, ) as any as S.Schema; export type AccessApplicationsPoliciesUpdateResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsPoliciesUpdateResponseIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesUpdateResponseIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsPoliciesUpdateResponseIncludeList = Array; export const AccessApplicationsPoliciesUpdateResponseIncludeList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesUpdateResponseIncludeItem, ) as any as S.Schema; export type AccessApplicationsPoliciesUpdateResponseMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessApplicationsPoliciesUpdateResponseMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessApplicationsPoliciesUpdateResponseMfaConfigAllowedAuthenticatorsList = Array; export const AccessApplicationsPoliciesUpdateResponseMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesUpdateResponseMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessApplicationsPoliciesUpdateResponseMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessApplicationsPoliciesUpdateResponseMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessApplicationsPoliciesUpdateResponseMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessApplicationsPoliciesUpdateResponseMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessApplicationsPoliciesUpdateResponseMfaConfig", }) as any as S.Schema; export type AccessApplicationsPoliciesUpdateResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessApplicationsPoliciesUpdateResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesUpdateResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessApplicationsPoliciesUpdateResponseRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessApplicationsPoliciesUpdateResponseRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessApplicationsPoliciesUpdateResponseRequireList = Array; export const AccessApplicationsPoliciesUpdateResponseRequireList = /*@__PURE__*/ S.Array( AccessApplicationsPoliciesUpdateResponseRequireItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateAccessApplicationPolicyResponse { /** The UUID of the policy */ id?: string | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsPoliciesUpdateResponseApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsPoliciesUpdateResponseConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessApplicationsPoliciesUpdateResponseDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessApplicationsPoliciesUpdateResponseExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessApplicationsPoliciesUpdateResponseIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsPoliciesUpdateResponseMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessApplicationsPoliciesUpdateResponseRequireList | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const UpdateAccessApplicationPolicyResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.optional(S.NullOr(S.String)), approvalGroups: S.optional( S.NullOr( AccessApplicationsPoliciesUpdateResponseApprovalGroupsList, ).pipe(T.Body("approval_groups")), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr(AccessApplicationsPoliciesUpdateResponseConnectionRules).pipe( T.Body("connection_rules"), ), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional( S.NullOr(AccessApplicationsPoliciesUpdateResponseDecision), ), exclude: S.optional( S.NullOr(AccessApplicationsPoliciesUpdateResponseExcludeList), ), include: S.optional( S.NullOr(AccessApplicationsPoliciesUpdateResponseIncludeList), ), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr(AccessApplicationsPoliciesUpdateResponseMfaConfig).pipe( T.Body("mfa_config"), ), ), name: S.optional(S.NullOr(S.String)), precedence: S.optional(S.NullOr(S.Number)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional( S.NullOr(AccessApplicationsPoliciesUpdateResponseRequireList), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessApplicationPolicyResponse", }) as any as S.Schema; export interface UpdateAccessApplicationPolicyForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ appId: string; /** UUID. */ policyId: string; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessApplicationsPoliciesUpdateRequestApprovalGroupsList; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessApplicationsPoliciesUpdateRequestConnectionRules; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessApplicationsPoliciesUpdateRequestMfaConfig; /** The order of execution for this policy. Must be unique for each policy within an app. */ precedence?: number; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string; } export const UpdateAccessApplicationPolicyForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), appId: S.String.pipe(T.Label("app_id")), policyId: S.String.pipe(T.Label("policy_id")), approvalGroups: S.optional( AccessApplicationsPoliciesUpdateRequestApprovalGroupsList.pipe( T.Body("approval_groups"), ), ), approvalRequired: S.optional(S.Boolean.pipe(T.Body("approval_required"))), connectionRules: S.optional( AccessApplicationsPoliciesUpdateRequestConnectionRules.pipe( T.Body("connection_rules"), ), ), isolationRequired: S.optional( S.Boolean.pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( AccessApplicationsPoliciesUpdateRequestMfaConfig.pipe( T.Body("mfa_config"), ), ), precedence: S.optional(S.Number), purposeJustificationPrompt: S.optional( S.String.pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.Boolean.pipe(T.Body("purpose_justification_required")), ), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }) .pipe( T.Http({ method: "PUT", uri: "/zones/{zone_id}/access/apps/{app_id}/policies/{policy_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessApplicationPolicyForZoneRequest", }) as any as S.Schema; export interface UpdateAccessBookmarkRequest { accountId: string; /** UUID. */ bookmarkId: string; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean; /** The domain of the Bookmark application. */ domain?: string; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string; /** The name of the Bookmark application. */ name?: string; } export const UpdateAccessBookmarkRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), bookmarkId: S.String.pipe(T.Label("bookmark_id")), appLauncherVisible: S.optional( S.Boolean.pipe(T.Body("app_launcher_visible")), ), domain: S.optional(S.String), logoUrl: S.optional(S.String.pipe(T.Body("logo_url"))), name: S.optional(S.String), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/bookmarks/{bookmark_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessBookmarkRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateAccessBookmarkResponse { /** The unique identifier for the Bookmark application. */ id: string; /** Displays the application in the App Launcher. */ appLauncherVisible?: boolean | null; /** The domain of the Bookmark application. */ domain?: string | null; /** The image URL for the logo shown in the App Launcher dashboard. */ logoUrl?: string | null; /** The name of the Bookmark application. */ name?: string | null; } export const UpdateAccessBookmarkResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, appLauncherVisible: S.optional( S.NullOr(S.Boolean).pipe(T.Body("app_launcher_visible")), ), domain: S.optional(S.NullOr(S.String)), logoUrl: S.optional(S.NullOr(S.String).pipe(T.Body("logo_url"))), name: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessBookmarkResponse", }) as any as S.Schema; export type AccessCertificatesUpdateRequestAssociatedHostnamesList = Array; export const AccessCertificatesUpdateRequestAssociatedHostnamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface UpdateAccessCertificateForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ certificateId: string; /** The hostnames of the applications that will use this certificate. */ associatedHostnames: AccessCertificatesUpdateRequestAssociatedHostnamesList; /** The name of the certificate. */ name?: string; } export const UpdateAccessCertificateForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), certificateId: S.String.pipe(T.Label("certificate_id")), associatedHostnames: AccessCertificatesUpdateRequestAssociatedHostnamesList.pipe( T.Body("associated_hostnames"), ), name: S.optional(S.String), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/certificates/{certificate_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessCertificateForAccountRequest", }) as any as S.Schema; export type AccessCertificatesUpdateResponseAssociatedHostnamesList = Array; export const AccessCertificatesUpdateResponseAssociatedHostnamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateAccessCertificateResponse { /** The ID of the application that will use this certificate. */ id?: string | null; /** The hostnames of the applications that will use this certificate. */ associatedHostnames?: AccessCertificatesUpdateResponseAssociatedHostnamesList | null; expiresOn?: string | null; /** The MD5 fingerprint of the certificate. */ fingerprint?: string | null; /** The name of the certificate. */ name?: string | null; } export const UpdateAccessCertificateResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), associatedHostnames: S.optional( S.NullOr(AccessCertificatesUpdateResponseAssociatedHostnamesList).pipe( T.Body("associated_hostnames"), ), ), expiresOn: S.optional(S.NullOr(S.String).pipe(T.Body("expires_on"))), fingerprint: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessCertificateResponse", }) as any as S.Schema; export interface UpdateAccessCertificateForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ certificateId: string; /** The hostnames of the applications that will use this certificate. */ associatedHostnames: AccessCertificatesUpdateRequestAssociatedHostnamesList; /** The name of the certificate. */ name?: string; } export const UpdateAccessCertificateForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), certificateId: S.String.pipe(T.Label("certificate_id")), associatedHostnames: AccessCertificatesUpdateRequestAssociatedHostnamesList.pipe( T.Body("associated_hostnames"), ), name: S.optional(S.String), }) .pipe( T.Http({ method: "PUT", uri: "/zones/{zone_id}/access/certificates/{certificate_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessCertificateForZoneRequest", }) as any as S.Schema; export type AccessCustomPagesUpdateRequestType = | "identity_denied" | "forbidden"; export const AccessCustomPagesUpdateRequestType = /*@__PURE__*/ S.String; export interface UpdateAccessCustomPageRequest { /** Identifier. */ accountId: string; /** UUID. */ customPageId: string; /** Custom page HTML. */ customHtml: string; /** Custom page name. */ name: string; /** Custom page type. */ type: AccessCustomPagesUpdateRequestType | (string & {}); } export const UpdateAccessCustomPageRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), customPageId: S.String.pipe(T.Label("custom_page_id")), customHtml: S.String.pipe(T.Body("custom_html")), name: S.String, type: AccessCustomPagesUpdateRequestType, }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/custom_pages/{custom_page_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessCustomPageRequest", }) as any as S.Schema; export type AccessCustomPagesUpdateResponseType = | "identity_denied" | "forbidden"; export const AccessCustomPagesUpdateResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateAccessCustomPageResponse { /** Custom page name. */ name: string; /** Custom page type. */ type: AccessCustomPagesUpdateResponseType; /** UUID. */ uid?: string | null; } export const UpdateAccessCustomPageResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.String, type: AccessCustomPagesUpdateResponseType, uid: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessCustomPageResponse", }) as any as S.Schema; export type AccessGroupsUpdateRequestIncludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessGroupsUpdateRequestIncludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessGroupsUpdateRequestIncludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessGroupsUpdateRequestIncludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessGroupsUpdateRequestIncludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessGroupsUpdateRequestIncludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessGroupsUpdateRequestIncludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessGroupsUpdateRequestIncludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessGroupsUpdateRequestIncludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessGroupsUpdateRequestIncludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessGroupsUpdateRequestIncludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessGroupsUpdateRequestIncludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessGroupsUpdateRequestIncludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessGroupsUpdateRequestIncludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessGroupsUpdateRequestIncludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessGroupsUpdateRequestIncludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessGroupsUpdateRequestIncludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessGroupsUpdateRequestIncludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessGroupsUpdateRequestIncludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessGroupsUpdateRequestIncludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessGroupsUpdateRequestIncludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessGroupsUpdateRequestIncludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessGroupsUpdateRequestIncludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessGroupsUpdateRequestIncludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessGroupsUpdateRequestIncludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessGroupsUpdateRequestIncludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessGroupsUpdateRequestIncludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessGroupsUpdateRequestIncludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessGroupsUpdateRequestIncludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessGroupsUpdateRequestIncludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessGroupsUpdateRequestIncludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessGroupsUpdateRequestIncludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessGroupsUpdateRequestIncludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessGroupsUpdateRequestIncludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessGroupsUpdateRequestIncludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessGroupsUpdateRequestIncludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessGroupsUpdateRequestIncludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessGroupsUpdateRequestIncludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessGroupsUpdateRequestIncludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessGroupsUpdateRequestIncludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessGroupsUpdateRequestIncludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessGroupsUpdateRequestIncludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessGroupsUpdateRequestIncludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessGroupsUpdateRequestIncludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessGroupsUpdateRequestIncludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessGroupsUpdateRequestIncludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessGroupsUpdateRequestIncludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessGroupsUpdateRequestIncludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessGroupsUpdateRequestIncludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessGroupsUpdateRequestIncludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessGroupsUpdateRequestIncludeItemGitHubOrganizationRuleGithubOrganization = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization; export const AccessGroupsUpdateRequestIncludeItemGitHubOrganizationRuleGithubOrganization = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization; export type AccessGroupsUpdateRequestIncludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule; export const AccessGroupsUpdateRequestIncludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule; export type AccessGroupsUpdateRequestIncludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessGroupsUpdateRequestIncludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessGroupsUpdateRequestIncludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessGroupsUpdateRequestIncludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessGroupsUpdateRequestIncludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessGroupsUpdateRequestIncludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessGroupsUpdateRequestIncludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessGroupsUpdateRequestIncludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessGroupsUpdateRequestIncludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessGroupsUpdateRequestIncludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessGroupsUpdateRequestIncludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessGroupsUpdateRequestIncludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessGroupsUpdateRequestIncludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessGroupsUpdateRequestIncludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessGroupsUpdateRequestIncludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessGroupsUpdateRequestIncludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessGroupsUpdateRequestIncludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessGroupsUpdateRequestIncludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessGroupsUpdateRequestIncludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessGroupsUpdateRequestIncludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessGroupsUpdateRequestIncludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessGroupsUpdateRequestIncludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessGroupsUpdateRequestIncludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessGroupsUpdateRequestIncludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessGroupsUpdateRequestIncludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessGroupsUpdateRequestIncludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessGroupsUpdateRequestIncludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessGroupsUpdateRequestIncludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessGroupsUpdateRequestIncludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessGroupsUpdateRequestIncludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessGroupsUpdateRequestIncludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessGroupsUpdateRequestIncludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessGroupsUpdateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessGroupsUpdateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessGroupsUpdateRequestIncludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessGroupsUpdateRequestIncludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array< | AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem | (string & {}) >; export const AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRule { userRiskScore: AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessGroupsUpdateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessGroupsUpdateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessGroupsUpdateRequestIncludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsUpdateRequestIncludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export type AccessGroupsUpdateRequestIncludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessGroupsUpdateRequestIncludeItemAccessUserRiskScoreRule | AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsUpdateRequestIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessGroupsUpdateRequestIncludeList = Array; export const AccessGroupsUpdateRequestIncludeList = /*@__PURE__*/ S.Array( AccessGroupsUpdateRequestIncludeItem, ) as any as S.Schema; export interface UpdateAccessGroupForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ groupId: string; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include: AccessGroupsUpdateRequestIncludeList; /** The name of the Access group. */ name: string; /** Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessGroupsUpdateRequestIncludeList; /** Whether this is the default group */ isDefault?: boolean; /** Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules. */ require?: AccessGroupsUpdateRequestIncludeList; } export const UpdateAccessGroupForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), groupId: S.String.pipe(T.Label("group_id")), include: AccessGroupsUpdateRequestIncludeList, name: S.String, exclude: S.optional(AccessGroupsUpdateRequestIncludeList), isDefault: S.optional(S.Boolean.pipe(T.Body("is_default"))), require: S.optional(AccessGroupsUpdateRequestIncludeList), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/groups/{group_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessGroupForAccountRequest", }) as any as S.Schema; export type AccessGroupsUpdateResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessGroupsUpdateResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessGroupsUpdateResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessGroupsUpdateResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessGroupsUpdateResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessGroupsUpdateResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessGroupsUpdateResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessGroupsUpdateResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessGroupsUpdateResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessGroupsUpdateResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessGroupsUpdateResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessGroupsUpdateResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessGroupsUpdateResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessGroupsUpdateResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessGroupsUpdateResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessGroupsUpdateResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessGroupsUpdateResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessGroupsUpdateResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessGroupsUpdateResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessGroupsUpdateResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessGroupsUpdateResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessGroupsUpdateResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessGroupsUpdateResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessGroupsUpdateResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessGroupsUpdateResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessGroupsUpdateResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessGroupsUpdateResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessGroupsUpdateResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessGroupsUpdateResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessGroupsUpdateResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessGroupsUpdateResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessGroupsUpdateResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessGroupsUpdateResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessGroupsUpdateResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessGroupsUpdateResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessGroupsUpdateResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessGroupsUpdateResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessGroupsUpdateResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessGroupsUpdateResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessGroupsUpdateResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessGroupsUpdateResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessGroupsUpdateResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessGroupsUpdateResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessGroupsUpdateResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessGroupsUpdateResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessGroupsUpdateResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessGroupsUpdateResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessGroupsUpdateResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessGroupsUpdateResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessGroupsUpdateResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessGroupsUpdateResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export const AccessGroupsUpdateResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export type AccessGroupsUpdateResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export const AccessGroupsUpdateResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export type AccessGroupsUpdateResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessGroupsUpdateResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessGroupsUpdateResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessGroupsUpdateResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessGroupsUpdateResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessGroupsUpdateResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessGroupsUpdateResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessGroupsUpdateResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessGroupsUpdateResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessGroupsUpdateResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessGroupsUpdateResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessGroupsUpdateResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessGroupsUpdateResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessGroupsUpdateResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessGroupsUpdateResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessGroupsUpdateResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessGroupsUpdateResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessGroupsUpdateResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessGroupsUpdateResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessGroupsUpdateResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessGroupsUpdateResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessGroupsUpdateResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessGroupsUpdateResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessGroupsUpdateResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessGroupsUpdateResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessGroupsUpdateResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessGroupsUpdateResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessGroupsUpdateResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessGroupsUpdateResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessGroupsUpdateResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessGroupsUpdateResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessGroupsUpdateResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessGroupsUpdateResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessGroupsUpdateResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessGroupsUpdateResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessGroupsUpdateResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessGroupsUpdateResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessGroupsUpdateResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessGroupsUpdateResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsUpdateResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export type AccessGroupsUpdateResponseExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessGroupsUpdateResponseExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsUpdateResponseExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessGroupsUpdateResponseExcludeList = Array; export const AccessGroupsUpdateResponseExcludeList = /*@__PURE__*/ S.Array( AccessGroupsUpdateResponseExcludeItem, ) as any as S.Schema; export type AccessGroupsUpdateResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessGroupsUpdateResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessGroupsUpdateResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessGroupsUpdateResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessGroupsUpdateResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessGroupsUpdateResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessGroupsUpdateResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessGroupsUpdateResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessGroupsUpdateResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessGroupsUpdateResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessGroupsUpdateResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessGroupsUpdateResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessGroupsUpdateResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessGroupsUpdateResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessGroupsUpdateResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessGroupsUpdateResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessGroupsUpdateResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessGroupsUpdateResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessGroupsUpdateResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessGroupsUpdateResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessGroupsUpdateResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessGroupsUpdateResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessGroupsUpdateResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessGroupsUpdateResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessGroupsUpdateResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessGroupsUpdateResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessGroupsUpdateResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessGroupsUpdateResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessGroupsUpdateResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessGroupsUpdateResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessGroupsUpdateResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessGroupsUpdateResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessGroupsUpdateResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessGroupsUpdateResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessGroupsUpdateResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessGroupsUpdateResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessGroupsUpdateResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessGroupsUpdateResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessGroupsUpdateResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessGroupsUpdateResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessGroupsUpdateResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessGroupsUpdateResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessGroupsUpdateResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessGroupsUpdateResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessGroupsUpdateResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessGroupsUpdateResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessGroupsUpdateResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessGroupsUpdateResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessGroupsUpdateResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessGroupsUpdateResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessGroupsUpdateResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsUpdateResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessGroupsUpdateResponseIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsUpdateResponseIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessGroupsUpdateResponseIncludeList = Array; export const AccessGroupsUpdateResponseIncludeList = /*@__PURE__*/ S.Array( AccessGroupsUpdateResponseIncludeItem, ) as any as S.Schema; export type AccessGroupsUpdateResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessGroupsUpdateResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessGroupsUpdateResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessGroupsUpdateResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessGroupsUpdateResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessGroupsUpdateResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessGroupsUpdateResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessGroupsUpdateResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessGroupsUpdateResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessGroupsUpdateResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessGroupsUpdateResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessGroupsUpdateResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessGroupsUpdateResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessGroupsUpdateResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessGroupsUpdateResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessGroupsUpdateResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessGroupsUpdateResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessGroupsUpdateResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessGroupsUpdateResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessGroupsUpdateResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessGroupsUpdateResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessGroupsUpdateResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessGroupsUpdateResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessGroupsUpdateResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessGroupsUpdateResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessGroupsUpdateResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessGroupsUpdateResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessGroupsUpdateResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessGroupsUpdateResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessGroupsUpdateResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessGroupsUpdateResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessGroupsUpdateResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessGroupsUpdateResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessGroupsUpdateResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessGroupsUpdateResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessGroupsUpdateResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessGroupsUpdateResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessGroupsUpdateResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessGroupsUpdateResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessGroupsUpdateResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessGroupsUpdateResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessGroupsUpdateResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessGroupsUpdateResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessGroupsUpdateResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessGroupsUpdateResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessGroupsUpdateResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessGroupsUpdateResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessGroupsUpdateResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessGroupsUpdateResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessGroupsUpdateResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessGroupsUpdateResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsUpdateResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessGroupsUpdateResponseRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessGroupsUpdateResponseRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessGroupsUpdateResponseRequireList = Array; export const AccessGroupsUpdateResponseRequireList = /*@__PURE__*/ S.Array( AccessGroupsUpdateResponseRequireItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateAccessGroupResponse { /** UUID. */ id?: string | null; /** Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessGroupsUpdateResponseExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessGroupsUpdateResponseIncludeList | null; /** Whether this is the default group */ isDefault?: boolean | null; /** The name of the Access group. */ name?: string | null; /** Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules. */ require?: AccessGroupsUpdateResponseRequireList | null; } export const UpdateAccessGroupResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), exclude: S.optional(S.NullOr(AccessGroupsUpdateResponseExcludeList)), include: S.optional(S.NullOr(AccessGroupsUpdateResponseIncludeList)), isDefault: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_default"))), name: S.optional(S.NullOr(S.String)), require: S.optional(S.NullOr(AccessGroupsUpdateResponseRequireList)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessGroupResponse", }) as any as S.Schema; export interface UpdateAccessGroupForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ groupId: string; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include: AccessGroupsUpdateRequestIncludeList; /** The name of the Access group. */ name: string; /** Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessGroupsUpdateRequestIncludeList; /** Whether this is the default group */ isDefault?: boolean; /** Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules. */ require?: AccessGroupsUpdateRequestIncludeList; } export const UpdateAccessGroupForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), groupId: S.String.pipe(T.Label("group_id")), include: AccessGroupsUpdateRequestIncludeList, name: S.String, exclude: S.optional(AccessGroupsUpdateRequestIncludeList), isDefault: S.optional(S.Boolean.pipe(T.Body("is_default"))), require: S.optional(AccessGroupsUpdateRequestIncludeList), }) .pipe( T.Http({ method: "PUT", uri: "/zones/{zone_id}/access/groups/{group_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessGroupForZoneRequest", }) as any as S.Schema; export type AccessInfrastructureTargetsUpdateRequestIpIpv4 = AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4; export const AccessInfrastructureTargetsUpdateRequestIpIpv4 = AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4; export type AccessInfrastructureTargetsUpdateRequestIpIpv6 = AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4; export const AccessInfrastructureTargetsUpdateRequestIpIpv6 = AccessInfrastructureTargetsBulkUpdateRequestBodyItemIpIpv4; export type AccessInfrastructureTargetsUpdateRequestIp = AccessInfrastructureTargetsBulkUpdateRequestBodyItemIp; export const AccessInfrastructureTargetsUpdateRequestIp = AccessInfrastructureTargetsBulkUpdateRequestBodyItemIp; export interface UpdateAccessInfrastructureTargetRequest { /** Account identifier */ accountId: string; /** Target identifier */ targetId: string; /** A non-unique field that refers to a target. Case insensitive, maximum */ hostname: string; /** The IPv4/IPv6 address that identifies where to reach a target */ ip: AccessInfrastructureTargetsBulkUpdateRequestBodyItemIp; } export const UpdateAccessInfrastructureTargetRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), targetId: S.String.pipe(T.Label("target_id")), hostname: S.String, ip: AccessInfrastructureTargetsBulkUpdateRequestBodyItemIp, }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/infrastructure/targets/{target_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessInfrastructureTargetRequest", }) as any as S.Schema; export type AccessInfrastructureTargetsUpdateResponseIpIpv4 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export const AccessInfrastructureTargetsUpdateResponseIpIpv4 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export type AccessInfrastructureTargetsUpdateResponseIpIpv6 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export const AccessInfrastructureTargetsUpdateResponseIpIpv6 = AccessInfrastructureTargetsBulkUpdateResultItemIpIpv4; export type AccessInfrastructureTargetsUpdateResponseIp = AccessInfrastructureTargetsBulkUpdateResultItemIp; export const AccessInfrastructureTargetsUpdateResponseIp = AccessInfrastructureTargetsBulkUpdateResultItemIp; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateAccessInfrastructureTargetResponse { /** Target identifier */ id: string; /** Date and time at which the target was created */ createdAt: string; /** A non-unique field that refers to a target */ hostname: string; /** The IPv4/IPv6 address that identifies where to reach a target */ ip: AccessInfrastructureTargetsBulkUpdateResultItemIp; /** Date and time at which the target was modified */ modifiedAt: string; } export const UpdateAccessInfrastructureTargetResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), hostname: S.String, ip: AccessInfrastructureTargetsBulkUpdateResultItemIp, modifiedAt: S.String.pipe(T.Body("modified_at")), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessInfrastructureTargetResponse", }) as any as S.Schema; export type AccessPoliciesUpdateRequestDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessPoliciesUpdateRequestDecision = /*@__PURE__*/ S.String; export type AccessPoliciesUpdateRequestIncludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessPoliciesUpdateRequestIncludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessPoliciesUpdateRequestIncludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessPoliciesUpdateRequestIncludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessPoliciesUpdateRequestIncludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessPoliciesUpdateRequestIncludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessPoliciesUpdateRequestIncludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessPoliciesUpdateRequestIncludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessPoliciesUpdateRequestIncludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessPoliciesUpdateRequestIncludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessPoliciesUpdateRequestIncludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessPoliciesUpdateRequestIncludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessPoliciesUpdateRequestIncludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessPoliciesUpdateRequestIncludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessPoliciesUpdateRequestIncludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessPoliciesUpdateRequestIncludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessPoliciesUpdateRequestIncludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessPoliciesUpdateRequestIncludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessPoliciesUpdateRequestIncludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessPoliciesUpdateRequestIncludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessPoliciesUpdateRequestIncludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessPoliciesUpdateRequestIncludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessPoliciesUpdateRequestIncludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessPoliciesUpdateRequestIncludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessPoliciesUpdateRequestIncludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessPoliciesUpdateRequestIncludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessPoliciesUpdateRequestIncludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessPoliciesUpdateRequestIncludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessPoliciesUpdateRequestIncludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessPoliciesUpdateRequestIncludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessPoliciesUpdateRequestIncludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessPoliciesUpdateRequestIncludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessPoliciesUpdateRequestIncludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessPoliciesUpdateRequestIncludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessPoliciesUpdateRequestIncludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessPoliciesUpdateRequestIncludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessPoliciesUpdateRequestIncludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessPoliciesUpdateRequestIncludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessPoliciesUpdateRequestIncludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessPoliciesUpdateRequestIncludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessPoliciesUpdateRequestIncludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessPoliciesUpdateRequestIncludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessPoliciesUpdateRequestIncludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessPoliciesUpdateRequestIncludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessPoliciesUpdateRequestIncludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessPoliciesUpdateRequestIncludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessPoliciesUpdateRequestIncludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessPoliciesUpdateRequestIncludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessPoliciesUpdateRequestIncludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessPoliciesUpdateRequestIncludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessPoliciesUpdateRequestIncludeItemGitHubOrganizationRuleGithubOrganization = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization; export const AccessPoliciesUpdateRequestIncludeItemGitHubOrganizationRuleGithubOrganization = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRuleGithubOrganization; export type AccessPoliciesUpdateRequestIncludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule; export const AccessPoliciesUpdateRequestIncludeItemGitHubOrganizationRule = AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule; export type AccessPoliciesUpdateRequestIncludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessPoliciesUpdateRequestIncludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessPoliciesUpdateRequestIncludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessPoliciesUpdateRequestIncludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessPoliciesUpdateRequestIncludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessPoliciesUpdateRequestIncludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessPoliciesUpdateRequestIncludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessPoliciesUpdateRequestIncludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessPoliciesUpdateRequestIncludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessPoliciesUpdateRequestIncludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessPoliciesUpdateRequestIncludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessPoliciesUpdateRequestIncludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessPoliciesUpdateRequestIncludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessPoliciesUpdateRequestIncludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessPoliciesUpdateRequestIncludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessPoliciesUpdateRequestIncludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessPoliciesUpdateRequestIncludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessPoliciesUpdateRequestIncludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessPoliciesUpdateRequestIncludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessPoliciesUpdateRequestIncludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessPoliciesUpdateRequestIncludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessPoliciesUpdateRequestIncludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessPoliciesUpdateRequestIncludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessPoliciesUpdateRequestIncludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessPoliciesUpdateRequestIncludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessPoliciesUpdateRequestIncludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessPoliciesUpdateRequestIncludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessPoliciesUpdateRequestIncludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessPoliciesUpdateRequestIncludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessPoliciesUpdateRequestIncludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessPoliciesUpdateRequestIncludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessPoliciesUpdateRequestIncludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessPoliciesUpdateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessPoliciesUpdateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessPoliciesUpdateRequestIncludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessPoliciesUpdateRequestIncludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array< | AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem | (string & {}) >; export const AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRule { userRiskScore: AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessPoliciesUpdateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessPoliciesUpdateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessPoliciesUpdateRequestIncludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesUpdateRequestIncludeItemAccessCloudflareAccountMemberRule = AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export type AccessPoliciesUpdateRequestIncludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessPoliciesCreateRequestIncludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessPoliciesUpdateRequestIncludeItemAccessUserRiskScoreRule | AccessPoliciesCreateRequestIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesUpdateRequestIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesUpdateRequestIncludeList = Array; export const AccessPoliciesUpdateRequestIncludeList = /*@__PURE__*/ S.Array( AccessPoliciesUpdateRequestIncludeItem, ) as any as S.Schema; export type AccessPoliciesUpdateRequestApprovalGroupsItemEmailAddressesList = Array; export const AccessPoliciesUpdateRequestApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessPoliciesUpdateRequestApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessPoliciesUpdateRequestApprovalGroupsItemEmailAddressesList; /** The UUID of an re-usable email list. */ emailListUuid?: string; } export const AccessPoliciesUpdateRequestApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( AccessPoliciesUpdateRequestApprovalGroupsItemEmailAddressesList.pipe( T.Body("email_addresses"), ), ), emailListUuid: S.optional(S.String.pipe(T.Body("email_list_uuid"))), }), ).annotate({ identifier: "AccessPoliciesUpdateRequestApprovalGroupsItem", }) as any as S.Schema; export type AccessPoliciesUpdateRequestApprovalGroupsList = Array; export const AccessPoliciesUpdateRequestApprovalGroupsList = /*@__PURE__*/ S.Array( AccessPoliciesUpdateRequestApprovalGroupsItem, ) as any as S.Schema; export type AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array< | AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem | (string & {}) >; export const AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array< | AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem | (string & {}) >; export const AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessPoliciesUpdateRequestConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList; } export const AccessPoliciesUpdateRequestConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList.pipe( T.Body("allowed_clipboard_local_to_remote_formats"), ), ), allowedClipboardRemoteToLocalFormats: S.optional( AccessPoliciesUpdateRequestConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList.pipe( T.Body("allowed_clipboard_remote_to_local_formats"), ), ), }), ).annotate({ identifier: "AccessPoliciesUpdateRequestConnectionRulesRdp", }) as any as S.Schema; export interface AccessPoliciesUpdateRequestConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessPoliciesUpdateRequestConnectionRulesRdp; } export const AccessPoliciesUpdateRequestConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional(AccessPoliciesUpdateRequestConnectionRulesRdp), }), ).annotate({ identifier: "AccessPoliciesUpdateRequestConnectionRules", }) as any as S.Schema; export type AccessPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsList = Array< | AccessPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsItem | (string & {}) >; export const AccessPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessPoliciesUpdateRequestMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsList; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string; } export const AccessPoliciesUpdateRequestMfaConfig = /*@__PURE__*/ S.suspend( () => S.Struct({ allowedAuthenticators: S.optional( AccessPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsList.pipe( T.Body("allowed_authenticators"), ), ), mfaDisabled: S.optional(S.Boolean.pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "AccessPoliciesUpdateRequestMfaConfig", }) as any as S.Schema; export interface UpdateAccessPolicyRequest { /** Identifier. */ accountId: string; /** The UUID of the policy */ policyId: string; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision: AccessPoliciesUpdateRequestDecision | (string & {}); /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include: AccessPoliciesUpdateRequestIncludeList; /** The name of the Access policy. */ name: string; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessPoliciesUpdateRequestApprovalGroupsList; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessPoliciesUpdateRequestConnectionRules; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessPoliciesUpdateRequestIncludeList; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessPoliciesUpdateRequestMfaConfig; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessPoliciesUpdateRequestIncludeList; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string; } export const UpdateAccessPolicyRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), policyId: S.String.pipe(T.Label("policy_id")), decision: AccessPoliciesUpdateRequestDecision, include: AccessPoliciesUpdateRequestIncludeList, name: S.String, approvalGroups: S.optional( AccessPoliciesUpdateRequestApprovalGroupsList.pipe( T.Body("approval_groups"), ), ), approvalRequired: S.optional(S.Boolean.pipe(T.Body("approval_required"))), connectionRules: S.optional( AccessPoliciesUpdateRequestConnectionRules.pipe( T.Body("connection_rules"), ), ), exclude: S.optional(AccessPoliciesUpdateRequestIncludeList), isolationRequired: S.optional(S.Boolean.pipe(T.Body("isolation_required"))), mfaConfig: S.optional( AccessPoliciesUpdateRequestMfaConfig.pipe(T.Body("mfa_config")), ), purposeJustificationPrompt: S.optional( S.String.pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.Boolean.pipe(T.Body("purpose_justification_required")), ), require: S.optional(AccessPoliciesUpdateRequestIncludeList), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/policies/{policy_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessPolicyRequest", }) as any as S.Schema; export type AccessPoliciesUpdateResponseApprovalGroupsItemEmailAddressesList = Array; export const AccessPoliciesUpdateResponseApprovalGroupsItemEmailAddressesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface AccessPoliciesUpdateResponseApprovalGroupsItem { /** The number of approvals needed to obtain access. */ approvalsNeeded: number; /** A list of emails that can approve the access request. */ emailAddresses?: AccessPoliciesUpdateResponseApprovalGroupsItemEmailAddressesList | null; /** The UUID of an re-usable email list. */ emailListUuid?: string | null; } export const AccessPoliciesUpdateResponseApprovalGroupsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ approvalsNeeded: S.Number.pipe(T.Body("approvals_needed")), emailAddresses: S.optional( S.NullOr( AccessPoliciesUpdateResponseApprovalGroupsItemEmailAddressesList, ).pipe(T.Body("email_addresses")), ), emailListUuid: S.optional( S.NullOr(S.String).pipe(T.Body("email_list_uuid")), ), }), ).annotate({ identifier: "AccessPoliciesUpdateResponseApprovalGroupsItem", }) as any as S.Schema; export type AccessPoliciesUpdateResponseApprovalGroupsList = Array; export const AccessPoliciesUpdateResponseApprovalGroupsList = /*@__PURE__*/ S.Array( AccessPoliciesUpdateResponseApprovalGroupsItem, ) as any as S.Schema; export type AccessPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = "text"; export const AccessPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem = /*@__PURE__*/ S.String; export type AccessPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = Array; export const AccessPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList = /*@__PURE__*/ S.Array( AccessPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsItem, ) as any as S.Schema; export type AccessPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = "text"; export const AccessPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem = /*@__PURE__*/ S.String; export type AccessPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = Array; export const AccessPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList = /*@__PURE__*/ S.Array( AccessPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsItem, ) as any as S.Schema; export interface AccessPoliciesUpdateResponseConnectionRulesRdp { /** Clipboard formats allowed when copying from local machine to remote RDP session. */ allowedClipboardLocalToRemoteFormats?: AccessPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList | null; /** Clipboard formats allowed when copying from remote RDP session to local machine. */ allowedClipboardRemoteToLocalFormats?: AccessPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null; } export const AccessPoliciesUpdateResponseConnectionRulesRdp = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedClipboardLocalToRemoteFormats: S.optional( S.NullOr( AccessPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardLocalToRemoteFormatsList, ).pipe(T.Body("allowed_clipboard_local_to_remote_formats")), ), allowedClipboardRemoteToLocalFormats: S.optional( S.NullOr( AccessPoliciesUpdateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList, ).pipe(T.Body("allowed_clipboard_remote_to_local_formats")), ), }), ).annotate({ identifier: "AccessPoliciesUpdateResponseConnectionRulesRdp", }) as any as S.Schema; export interface AccessPoliciesUpdateResponseConnectionRules { /** The RDP-specific rules that define clipboard behavior for RDP connections. */ rdp?: AccessPoliciesUpdateResponseConnectionRulesRdp | null; } export const AccessPoliciesUpdateResponseConnectionRules = /*@__PURE__*/ S.suspend(() => S.Struct({ rdp: S.optional(S.NullOr(AccessPoliciesUpdateResponseConnectionRulesRdp)), }), ).annotate({ identifier: "AccessPoliciesUpdateResponseConnectionRules", }) as any as S.Schema; export type AccessPoliciesUpdateResponseDecision = | "allow" | "deny" | "non_identity" | "bypass"; export const AccessPoliciesUpdateResponseDecision = /*@__PURE__*/ S.String; export type AccessPoliciesUpdateResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export const AccessPoliciesUpdateResponseExcludeItemGroupRuleGroup = AccessPoliciesCreateRequestIncludeItemGroupRuleGroup; export type AccessPoliciesUpdateResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export const AccessPoliciesUpdateResponseExcludeItemGroupRule = AccessPoliciesCreateRequestIncludeItemGroupRule; export type AccessPoliciesUpdateResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export const AccessPoliciesUpdateResponseExcludeItemAnyValidServiceTokenRule = AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule; export type AccessPoliciesUpdateResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export const AccessPoliciesUpdateResponseExcludeItemAccessAuthContextRuleAuthContext = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRuleAuthContext; export type AccessPoliciesUpdateResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export const AccessPoliciesUpdateResponseExcludeItemAccessAuthContextRule = AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule; export type AccessPoliciesUpdateResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export const AccessPoliciesUpdateResponseExcludeItemAuthenticationMethodRuleAuthMethod = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRuleAuthMethod; export type AccessPoliciesUpdateResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export const AccessPoliciesUpdateResponseExcludeItemAuthenticationMethodRule = AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule; export type AccessPoliciesUpdateResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export const AccessPoliciesUpdateResponseExcludeItemAzureGroupRuleAzureAD = AccessPoliciesCreateRequestIncludeItemAzureGroupRuleAzureAD; export type AccessPoliciesUpdateResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export const AccessPoliciesUpdateResponseExcludeItemAzureGroupRule = AccessPoliciesCreateRequestIncludeItemAzureGroupRule; export type AccessPoliciesUpdateResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export const AccessPoliciesUpdateResponseExcludeItemCertificateRule = AccessPoliciesCreateRequestIncludeItemCertificateRule; export type AccessPoliciesUpdateResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export const AccessPoliciesUpdateResponseExcludeItemAccessCommonNameRuleCommonName = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRuleCommonName; export type AccessPoliciesUpdateResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export const AccessPoliciesUpdateResponseExcludeItemAccessCommonNameRule = AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule; export type AccessPoliciesUpdateResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export const AccessPoliciesUpdateResponseExcludeItemCountryRuleGeo = AccessPoliciesCreateRequestIncludeItemCountryRuleGeo; export type AccessPoliciesUpdateResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export const AccessPoliciesUpdateResponseExcludeItemCountryRule = AccessPoliciesCreateRequestIncludeItemCountryRule; export type AccessPoliciesUpdateResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export const AccessPoliciesUpdateResponseExcludeItemAccessDevicePostureRuleDevicePosture = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRuleDevicePosture; export type AccessPoliciesUpdateResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export const AccessPoliciesUpdateResponseExcludeItemAccessDevicePostureRule = AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule; export type AccessPoliciesUpdateResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export const AccessPoliciesUpdateResponseExcludeItemDomainRuleEmailDomain = AccessPoliciesCreateRequestIncludeItemDomainRuleEmailDomain; export type AccessPoliciesUpdateResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export const AccessPoliciesUpdateResponseExcludeItemDomainRule = AccessPoliciesCreateRequestIncludeItemDomainRule; export type AccessPoliciesUpdateResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export const AccessPoliciesUpdateResponseExcludeItemEmailListRuleEmailList = AccessPoliciesCreateRequestIncludeItemEmailListRuleEmailList; export type AccessPoliciesUpdateResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export const AccessPoliciesUpdateResponseExcludeItemEmailListRule = AccessPoliciesCreateRequestIncludeItemEmailListRule; export type AccessPoliciesUpdateResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export const AccessPoliciesUpdateResponseExcludeItemEmailRuleEmail = AccessPoliciesCreateRequestIncludeItemEmailRuleEmail; export type AccessPoliciesUpdateResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export const AccessPoliciesUpdateResponseExcludeItemEmailRule = AccessPoliciesCreateRequestIncludeItemEmailRule; export type AccessPoliciesUpdateResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export const AccessPoliciesUpdateResponseExcludeItemEveryoneRule = AccessPoliciesCreateRequestIncludeItemEveryoneRule; export type AccessPoliciesUpdateResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export const AccessPoliciesUpdateResponseExcludeItemExternalEvaluationRuleExternalEvaluation = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRuleExternalEvaluation; export type AccessPoliciesUpdateResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export const AccessPoliciesUpdateResponseExcludeItemExternalEvaluationRule = AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule; export type AccessPoliciesUpdateResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export const AccessPoliciesUpdateResponseExcludeItemGitHubOrganizationRuleGithubOrganization = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRuleGithubOrganization; export type AccessPoliciesUpdateResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export const AccessPoliciesUpdateResponseExcludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule; export type AccessPoliciesUpdateResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export const AccessPoliciesUpdateResponseExcludeItemGSuiteGroupRuleGsuite = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRuleGsuite; export type AccessPoliciesUpdateResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export const AccessPoliciesUpdateResponseExcludeItemGSuiteGroupRule = AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule; export type AccessPoliciesUpdateResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export const AccessPoliciesUpdateResponseExcludeItemAccessLoginMethodRuleLoginMethod = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRuleLoginMethod; export type AccessPoliciesUpdateResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export const AccessPoliciesUpdateResponseExcludeItemAccessLoginMethodRule = AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule; export type AccessPoliciesUpdateResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export const AccessPoliciesUpdateResponseExcludeItemIPListRuleIpList = AccessPoliciesCreateRequestIncludeItemIPListRuleIpList; export type AccessPoliciesUpdateResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export const AccessPoliciesUpdateResponseExcludeItemIPListRule = AccessPoliciesCreateRequestIncludeItemIPListRule; export type AccessPoliciesUpdateResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export const AccessPoliciesUpdateResponseExcludeItemIPRuleIp = AccessPoliciesCreateRequestIncludeItemIPRuleIp; export type AccessPoliciesUpdateResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export const AccessPoliciesUpdateResponseExcludeItemIPRule = AccessPoliciesCreateRequestIncludeItemIPRule; export type AccessPoliciesUpdateResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export const AccessPoliciesUpdateResponseExcludeItemOktaGroupRuleOkta = AccessPoliciesCreateRequestIncludeItemOktaGroupRuleOkta; export type AccessPoliciesUpdateResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export const AccessPoliciesUpdateResponseExcludeItemOktaGroupRule = AccessPoliciesCreateRequestIncludeItemOktaGroupRule; export type AccessPoliciesUpdateResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export const AccessPoliciesUpdateResponseExcludeItemSAMLGroupRuleSaml = AccessPoliciesCreateRequestIncludeItemSAMLGroupRuleSaml; export type AccessPoliciesUpdateResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export const AccessPoliciesUpdateResponseExcludeItemSAMLGroupRule = AccessPoliciesCreateRequestIncludeItemSAMLGroupRule; export type AccessPoliciesUpdateResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export const AccessPoliciesUpdateResponseExcludeItemAccessOIDCClaimRuleOidc = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRuleOidc; export type AccessPoliciesUpdateResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export const AccessPoliciesUpdateResponseExcludeItemAccessOIDCClaimRule = AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule; export type AccessPoliciesUpdateResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export const AccessPoliciesUpdateResponseExcludeItemServiceTokenRuleServiceToken = AccessPoliciesCreateRequestIncludeItemServiceTokenRuleServiceToken; export type AccessPoliciesUpdateResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export const AccessPoliciesUpdateResponseExcludeItemServiceTokenRule = AccessPoliciesCreateRequestIncludeItemServiceTokenRule; export type AccessPoliciesUpdateResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export const AccessPoliciesUpdateResponseExcludeItemAccessLinkedAppTokenRuleLinkedAppToken = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRuleLinkedAppToken; export type AccessPoliciesUpdateResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export const AccessPoliciesUpdateResponseExcludeItemAccessLinkedAppTokenRule = AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule; export type AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = | "low" | "medium" | "high" | "unscored"; export const AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem = /*@__PURE__*/ S.String; export type AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = Array; export const AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList = /*@__PURE__*/ S.Array( AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreItem, ) as any as S.Schema; export interface AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore { /** A list of risk score levels to match. Values can be low, medium, high, or unscored. */ userRiskScore: AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList; } export const AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScoreUserRiskScoreList.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore", }) as any as S.Schema; export interface AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRule { userRiskScore: AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore; } export const AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRule = /*@__PURE__*/ S.suspend(() => S.Struct({ userRiskScore: AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRuleUserRiskScore.pipe( T.Body("user_risk_score"), ), }), ).annotate({ identifier: "AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRule", }) as any as S.Schema; export type AccessPoliciesUpdateResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export const AccessPoliciesUpdateResponseExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRuleCloudflareAccountMember; export type AccessPoliciesUpdateResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesUpdateResponseExcludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export type AccessPoliciesUpdateResponseExcludeItem = | AccessPoliciesCreateRequestIncludeItemGroupRule | AccessPoliciesCreateRequestIncludeItemAnyValidServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessAuthContextRule | AccessPoliciesCreateRequestIncludeItemAuthenticationMethodRule | AccessPoliciesCreateRequestIncludeItemAzureGroupRule | AccessPoliciesCreateRequestIncludeItemCertificateRule | AccessPoliciesCreateRequestIncludeItemAccessCommonNameRule | AccessPoliciesCreateRequestIncludeItemCountryRule | AccessPoliciesCreateRequestIncludeItemAccessDevicePostureRule | AccessPoliciesCreateRequestIncludeItemDomainRule | AccessPoliciesCreateRequestIncludeItemEmailListRule | AccessPoliciesCreateRequestIncludeItemEmailRule | AccessPoliciesCreateRequestIncludeItemEveryoneRule | AccessPoliciesCreateRequestIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemGitHubOrganizationRule | AccessPoliciesCreateRequestIncludeItemGSuiteGroupRule | AccessPoliciesCreateRequestIncludeItemAccessLoginMethodRule | AccessPoliciesCreateRequestIncludeItemIPListRule | AccessPoliciesCreateRequestIncludeItemIPRule | AccessPoliciesCreateRequestIncludeItemOktaGroupRule | AccessPoliciesCreateRequestIncludeItemSAMLGroupRule | AccessPoliciesCreateRequestIncludeItemAccessOIDCClaimRule | AccessPoliciesCreateRequestIncludeItemServiceTokenRule | AccessPoliciesCreateRequestIncludeItemAccessLinkedAppTokenRule | AccessPoliciesUpdateResponseExcludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemExcludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesUpdateResponseExcludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["githubOrganization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesUpdateResponseExcludeList = Array; export const AccessPoliciesUpdateResponseExcludeList = /*@__PURE__*/ S.Array( AccessPoliciesUpdateResponseExcludeItem, ) as any as S.Schema; export type AccessPoliciesUpdateResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessPoliciesUpdateResponseIncludeItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessPoliciesUpdateResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessPoliciesUpdateResponseIncludeItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessPoliciesUpdateResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessPoliciesUpdateResponseIncludeItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessPoliciesUpdateResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessPoliciesUpdateResponseIncludeItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessPoliciesUpdateResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessPoliciesUpdateResponseIncludeItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessPoliciesUpdateResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessPoliciesUpdateResponseIncludeItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessPoliciesUpdateResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessPoliciesUpdateResponseIncludeItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessPoliciesUpdateResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessPoliciesUpdateResponseIncludeItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessPoliciesUpdateResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessPoliciesUpdateResponseIncludeItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessPoliciesUpdateResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessPoliciesUpdateResponseIncludeItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessPoliciesUpdateResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessPoliciesUpdateResponseIncludeItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessPoliciesUpdateResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessPoliciesUpdateResponseIncludeItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessPoliciesUpdateResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessPoliciesUpdateResponseIncludeItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessPoliciesUpdateResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessPoliciesUpdateResponseIncludeItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessPoliciesUpdateResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessPoliciesUpdateResponseIncludeItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessPoliciesUpdateResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessPoliciesUpdateResponseIncludeItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessPoliciesUpdateResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessPoliciesUpdateResponseIncludeItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessPoliciesUpdateResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessPoliciesUpdateResponseIncludeItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessPoliciesUpdateResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessPoliciesUpdateResponseIncludeItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessPoliciesUpdateResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessPoliciesUpdateResponseIncludeItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessPoliciesUpdateResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessPoliciesUpdateResponseIncludeItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessPoliciesUpdateResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessPoliciesUpdateResponseIncludeItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessPoliciesUpdateResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessPoliciesUpdateResponseIncludeItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessPoliciesUpdateResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessPoliciesUpdateResponseIncludeItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessPoliciesUpdateResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessPoliciesUpdateResponseIncludeItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessPoliciesUpdateResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesUpdateResponseIncludeItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessPoliciesUpdateResponseIncludeItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesUpdateResponseIncludeItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesUpdateResponseIncludeList = Array; export const AccessPoliciesUpdateResponseIncludeList = /*@__PURE__*/ S.Array( AccessPoliciesUpdateResponseIncludeItem, ) as any as S.Schema; export type AccessPoliciesUpdateResponseMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key"; export const AccessPoliciesUpdateResponseMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type AccessPoliciesUpdateResponseMfaConfigAllowedAuthenticatorsList = Array; export const AccessPoliciesUpdateResponseMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( AccessPoliciesUpdateResponseMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface AccessPoliciesUpdateResponseMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: AccessPoliciesUpdateResponseMfaConfigAllowedAuthenticatorsList | null; /** Indicates whether to disable MFA for this resource. This option is available at the application and policy level. */ mfaDisabled?: boolean | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const AccessPoliciesUpdateResponseMfaConfig = /*@__PURE__*/ S.suspend( () => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( AccessPoliciesUpdateResponseMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), mfaDisabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("mfa_disabled"))), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "AccessPoliciesUpdateResponseMfaConfig", }) as any as S.Schema; export type AccessPoliciesUpdateResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export const AccessPoliciesUpdateResponseRequireItemGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule; export type AccessPoliciesUpdateResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export const AccessPoliciesUpdateResponseRequireItemAnyValidServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule; export type AccessPoliciesUpdateResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export const AccessPoliciesUpdateResponseRequireItemAccessAuthContextRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule; export type AccessPoliciesUpdateResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export const AccessPoliciesUpdateResponseRequireItemAuthenticationMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule; export type AccessPoliciesUpdateResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export const AccessPoliciesUpdateResponseRequireItemAzureGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule; export type AccessPoliciesUpdateResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export const AccessPoliciesUpdateResponseRequireItemCertificateRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule; export type AccessPoliciesUpdateResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export const AccessPoliciesUpdateResponseRequireItemAccessCommonNameRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule; export type AccessPoliciesUpdateResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export const AccessPoliciesUpdateResponseRequireItemCountryRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule; export type AccessPoliciesUpdateResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export const AccessPoliciesUpdateResponseRequireItemAccessDevicePostureRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule; export type AccessPoliciesUpdateResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export const AccessPoliciesUpdateResponseRequireItemDomainRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule; export type AccessPoliciesUpdateResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export const AccessPoliciesUpdateResponseRequireItemEmailListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule; export type AccessPoliciesUpdateResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export const AccessPoliciesUpdateResponseRequireItemEmailRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule; export type AccessPoliciesUpdateResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export const AccessPoliciesUpdateResponseRequireItemEveryoneRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule; export type AccessPoliciesUpdateResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export const AccessPoliciesUpdateResponseRequireItemExternalEvaluationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule; export type AccessPoliciesUpdateResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export const AccessPoliciesUpdateResponseRequireItemGitHubOrganizationRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule; export type AccessPoliciesUpdateResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export const AccessPoliciesUpdateResponseRequireItemGSuiteGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule; export type AccessPoliciesUpdateResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export const AccessPoliciesUpdateResponseRequireItemAccessLoginMethodRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule; export type AccessPoliciesUpdateResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export const AccessPoliciesUpdateResponseRequireItemIPListRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule; export type AccessPoliciesUpdateResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export const AccessPoliciesUpdateResponseRequireItemIPRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule; export type AccessPoliciesUpdateResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export const AccessPoliciesUpdateResponseRequireItemOktaGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule; export type AccessPoliciesUpdateResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export const AccessPoliciesUpdateResponseRequireItemSAMLGroupRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule; export type AccessPoliciesUpdateResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export const AccessPoliciesUpdateResponseRequireItemAccessOIDCClaimRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule; export type AccessPoliciesUpdateResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export const AccessPoliciesUpdateResponseRequireItemServiceTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule; export type AccessPoliciesUpdateResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export const AccessPoliciesUpdateResponseRequireItemAccessLinkedAppTokenRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule; export type AccessPoliciesUpdateResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export const AccessPoliciesUpdateResponseRequireItemAccessUserRiskScoreRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule; export type AccessPoliciesUpdateResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesUpdateResponseRequireItemAccessCloudflareAccountMemberRule = AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export type AccessPoliciesUpdateResponseRequireItem = | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAnyValidServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessAuthContextRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAuthenticationMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAzureGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCertificateRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCommonNameRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemCountryRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessDevicePostureRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemDomainRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEmailRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemEveryoneRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemExternalEvaluationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGitHubOrganizationRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemGSuiteGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLoginMethodRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPListRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemIPRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemOktaGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemSAMLGroupRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessOIDCClaimRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemServiceTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessLinkedAppTokenRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessUserRiskScoreRule | AccessApplicationsCreateResultSelfHostedApplicationPoliciesItemIncludeItemAccessCloudflareAccountMemberRule; export const AccessPoliciesUpdateResponseRequireItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["group"], ["anyValidServiceToken"], ["authContext"], ["authMethod"], ["azureAD"], ["certificate"], ["commonName"], ["geo"], ["devicePosture"], ["emailDomain"], ["emailList"], ["email"], ["everyone"], ["externalEvaluation"], ["github-organization"], ["gsuite"], ["loginMethod"], ["ipList"], ["ip"], ["okta"], ["saml"], ["oidc"], ["serviceToken"], ["linkedAppToken"], ["userRiskScore"], ["cloudflareAccountMember"], ]), ); export type AccessPoliciesUpdateResponseRequireList = Array; export const AccessPoliciesUpdateResponseRequireList = /*@__PURE__*/ S.Array( AccessPoliciesUpdateResponseRequireItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateAccessPolicyResponse { /** The UUID of the policy */ id?: string | null; /** Number of access applications currently using this policy. */ appCount?: number | null; /** Administrators who can approve a temporary authentication request. */ approvalGroups?: AccessPoliciesUpdateResponseApprovalGroupsList | null; /** Requires the user to request access from an administrator at the start of each session. */ approvalRequired?: boolean | null; /** The rules that define how users may connect to targets secured by your application. */ connectionRules?: AccessPoliciesUpdateResponseConnectionRules | null; createdAt?: string | null; /** The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. */ decision?: AccessPoliciesUpdateResponseDecision | null; /** Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules. */ exclude?: AccessPoliciesUpdateResponseExcludeList | null; /** Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules. */ include?: AccessPoliciesUpdateResponseIncludeList | null; /** Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature. */ isolationRequired?: boolean | null; /** Configures multi-factor authentication (MFA) settings. */ mfaConfig?: AccessPoliciesUpdateResponseMfaConfig | null; /** The name of the Access policy. */ name?: string | null; /** A custom message that will appear on the purpose justification screen. */ purposeJustificationPrompt?: string | null; /** Require users to enter a justification when they log in to the application. */ purposeJustificationRequired?: boolean | null; /** Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules. */ require?: AccessPoliciesUpdateResponseRequireList | null; reusable?: boolean | null; /** The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; updatedAt?: string | null; } export const UpdateAccessPolicyResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), appCount: S.optional(S.NullOr(S.Number).pipe(T.Body("app_count"))), approvalGroups: S.optional( S.NullOr(AccessPoliciesUpdateResponseApprovalGroupsList).pipe( T.Body("approval_groups"), ), ), approvalRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("approval_required")), ), connectionRules: S.optional( S.NullOr(AccessPoliciesUpdateResponseConnectionRules).pipe( T.Body("connection_rules"), ), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), decision: S.optional(S.NullOr(AccessPoliciesUpdateResponseDecision)), exclude: S.optional(S.NullOr(AccessPoliciesUpdateResponseExcludeList)), include: S.optional(S.NullOr(AccessPoliciesUpdateResponseIncludeList)), isolationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("isolation_required")), ), mfaConfig: S.optional( S.NullOr(AccessPoliciesUpdateResponseMfaConfig).pipe( T.Body("mfa_config"), ), ), name: S.optional(S.NullOr(S.String)), purposeJustificationPrompt: S.optional( S.NullOr(S.String).pipe(T.Body("purpose_justification_prompt")), ), purposeJustificationRequired: S.optional( S.NullOr(S.Boolean).pipe(T.Body("purpose_justification_required")), ), require: S.optional(S.NullOr(AccessPoliciesUpdateResponseRequireList)), reusable: S.optional(S.NullOr(S.Boolean)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessPolicyResponse", }) as any as S.Schema; export interface UpdateAccessServiceTokenForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ serviceTokenId: string; /** A version number identifying the current `client_secret` associated with the service token. Incrementing it triggers a rotation; the previous secret will still be accepted until the time indicated by `previous_client_secret_expires_at`. */ clientSecretVersion?: number; /** The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h). */ duration?: string; /** The name of the service token. */ name?: string; /** The expiration of the previous `client_secret`. This can be modified at any point after a rotation. For example, you may extend it further into the future if you need more time to update services with the new secret; or move it into the past to immediately invalidate the previous token in case of compromise. */ previousClientSecretExpiresAt?: string; } export const UpdateAccessServiceTokenForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), serviceTokenId: S.String.pipe(T.Label("service_token_id")), clientSecretVersion: S.optional( S.Number.pipe(T.Body("client_secret_version")), ), duration: S.optional(S.String), name: S.optional(S.String), previousClientSecretExpiresAt: S.optional( S.String.pipe(T.Body("previous_client_secret_expires_at")), ), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/service_tokens/{service_token_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessServiceTokenForAccountRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateAccessServiceTokenResponse { /** The ID of the service token. */ id?: string | null; /** The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header. */ clientId?: string | null; /** The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h). */ duration?: string | null; expiresAt?: string | null; /** The name of the service token. */ name?: string | null; } export const UpdateAccessServiceTokenResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), duration: S.optional(S.NullOr(S.String)), expiresAt: S.optional(S.NullOr(S.String).pipe(T.Body("expires_at"))), name: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessServiceTokenResponse", }) as any as S.Schema; export interface UpdateAccessServiceTokenForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ serviceTokenId: string; /** A version number identifying the current `client_secret` associated with the service token. Incrementing it triggers a rotation; the previous secret will still be accepted until the time indicated by `previous_client_secret_expires_at`. */ clientSecretVersion?: number; /** The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h). */ duration?: string; /** The name of the service token. */ name?: string; /** The expiration of the previous `client_secret`. This can be modified at any point after a rotation. For example, you may extend it further into the future if you need more time to update services with the new secret; or move it into the past to immediately invalidate the previous token in case of compromise. */ previousClientSecretExpiresAt?: string; } export const UpdateAccessServiceTokenForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), serviceTokenId: S.String.pipe(T.Label("service_token_id")), clientSecretVersion: S.optional( S.Number.pipe(T.Body("client_secret_version")), ), duration: S.optional(S.String), name: S.optional(S.String), previousClientSecretExpiresAt: S.optional( S.String.pipe(T.Body("previous_client_secret_expires_at")), ), }) .pipe( T.Http({ method: "PUT", uri: "/zones/{zone_id}/access/service_tokens/{service_token_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessServiceTokenForZoneRequest", }) as any as S.Schema; export interface UpdateAccessTagRequest { /** Identifier. */ accountId: string; /** The name of the tag */ tagName: string; /** The name of the tag */ name: string; } export const UpdateAccessTagRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), tagName: S.String.pipe(T.Label("tag_name")), name: S.String, }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/tags/{tag_name}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessTagRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateAccessTagResponse { /** The name of the tag */ name: string; } export const UpdateAccessTagResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ name: S.String, }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessTagResponse", }) as any as S.Schema; export interface UpdateAccessUserRequest { /** Identifier. */ accountId: string; /** UUID. */ userId: string; /** The email of the user. */ email: string; /** The name of the user. */ name: string; } export const UpdateAccessUserRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), userId: S.String.pipe(T.Label("user_id")), email: S.String, name: S.String, }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/users/{user_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessUserRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateAccessUserResponse { /** UUID. */ id?: string | null; /** True if the user has authenticated with Cloudflare Access. */ accessSeat?: boolean | null; /** The number of active devices registered to the user. */ activeDeviceCount?: number | null; createdAt?: string | null; /** The email of the user. */ email?: string | null; /** True if the user has logged into the WARP client. */ gatewaySeat?: boolean | null; /** The time at which the user last successfully logged in. */ lastSuccessfulLogin?: string | null; /** The name of the user. */ name?: string | null; /** The unique API identifier for the Zero Trust seat. */ seatUid?: string | null; /** The unique API identifier for the user. */ uid?: string | null; updatedAt?: string | null; } export const UpdateAccessUserResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), accessSeat: S.optional(S.NullOr(S.Boolean).pipe(T.Body("access_seat"))), activeDeviceCount: S.optional( S.NullOr(S.Number).pipe(T.Body("active_device_count")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), email: S.optional(S.NullOr(S.String)), gatewaySeat: S.optional(S.NullOr(S.Boolean).pipe(T.Body("gateway_seat"))), lastSuccessfulLogin: S.optional( S.NullOr(S.String).pipe(T.Body("last_successful_login")), ), name: S.optional(S.NullOr(S.String)), seatUid: S.optional(S.NullOr(S.String).pipe(T.Body("seat_uid"))), uid: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateAccessUserResponse", }) as any as S.Schema; export type UpdateCasbIntegrationRequestCredentialsMap = { [key: string]: unknown | undefined; }; export const UpdateCasbIntegrationRequestCredentialsMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type UpdateCasbIntegrationRequestDlpProfilesList = Array; export const UpdateCasbIntegrationRequestDlpProfilesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type UpdateCasbIntegrationRequestPermissionsList = Array; export const UpdateCasbIntegrationRequestPermissionsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type UpdateCasbIntegrationRequestUseCasesItem = | "casb" | "ces" | "auto_remediation"; export const UpdateCasbIntegrationRequestUseCasesItem = /*@__PURE__*/ S.String; export type UpdateCasbIntegrationRequestUseCasesList = Array< UpdateCasbIntegrationRequestUseCasesItem | (string & {}) >; export const UpdateCasbIntegrationRequestUseCasesList = /*@__PURE__*/ S.Array( UpdateCasbIntegrationRequestUseCasesItem, ) as any as S.Schema; export interface UpdateCasbIntegrationRequest { accountId: string; id: string; /** Partial credential fields to merge with existing. */ credentials?: UpdateCasbIntegrationRequestCredentialsMap; /** List of DLP profile IDs to associate with the integration. */ dlpProfiles?: UpdateCasbIntegrationRequestDlpProfilesList; /** Name of the integration. */ name?: string; /** List of permission scopes granted to the integration. */ permissions?: UpdateCasbIntegrationRequestPermissionsList; /** List of use case or feature slugs to enroll (e.g., ['casb', 'ces', 'auto_remediation']). */ useCases?: UpdateCasbIntegrationRequestUseCasesList; } export const UpdateCasbIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), id: S.String.pipe(T.Label()), credentials: S.optional(UpdateCasbIntegrationRequestCredentialsMap), dlpProfiles: S.optional( UpdateCasbIntegrationRequestDlpProfilesList.pipe(T.Body("dlp_profiles")), ), name: S.optional(S.String), permissions: S.optional(UpdateCasbIntegrationRequestPermissionsList), useCases: S.optional( UpdateCasbIntegrationRequestUseCasesList.pipe(T.Body("use_cases")), ), }) .pipe( T.Http({ method: "PATCH", uri: "/accounts/{account_id}/one/integrations/{id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateCasbIntegrationRequest", }) as any as S.Schema; export type UpdateCasbIntegrationResponseApplicationMap = { [key: string]: string | undefined; }; export const UpdateCasbIntegrationResponseApplicationMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export type UpdateCasbIntegrationResponseAuthMethodMap = { [key: string]: string | undefined; }; export const UpdateCasbIntegrationResponseAuthMethodMap = /*@__PURE__*/ S.Record( S.String, S.String, ) as any as S.Schema; export type UpdateCasbIntegrationResponseAuthorizationLinkComponentsMap = { [key: string]: unknown | undefined; }; export const UpdateCasbIntegrationResponseAuthorizationLinkComponentsMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export interface UpdateCasbIntegrationResponseAuthorizationLink { components: UpdateCasbIntegrationResponseAuthorizationLinkComponentsMap; link: string; } export const UpdateCasbIntegrationResponseAuthorizationLink = /*@__PURE__*/ S.suspend(() => S.Struct({ components: UpdateCasbIntegrationResponseAuthorizationLinkComponentsMap, link: S.String, }), ).annotate({ identifier: "UpdateCasbIntegrationResponseAuthorizationLink", }) as any as S.Schema; export type UpdateCasbIntegrationResponseDlpProfilesList = Array; export const UpdateCasbIntegrationResponseDlpProfilesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type UpdateCasbIntegrationResponseHealthDetailsItemMap = { [key: string]: unknown | undefined; }; export const UpdateCasbIntegrationResponseHealthDetailsItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type UpdateCasbIntegrationResponseHealthDetailsList = Array; export const UpdateCasbIntegrationResponseHealthDetailsList = /*@__PURE__*/ S.Array( UpdateCasbIntegrationResponseHealthDetailsItemMap, ) as any as S.Schema; export type UpdateCasbIntegrationResponseUseCasesItemMap = { [key: string]: unknown | undefined; }; export const UpdateCasbIntegrationResponseUseCasesItemMap = /*@__PURE__*/ S.Record( S.String, S.Unknown, ) as any as S.Schema; export type UpdateCasbIntegrationResponseUseCasesList = Array; export const UpdateCasbIntegrationResponseUseCasesList = /*@__PURE__*/ S.Array( UpdateCasbIntegrationResponseUseCasesItemMap, ) as any as S.Schema; /** Raw response payload (operation does not use the standard v4 result envelope). */ export interface UpdateCasbIntegrationResponse { /** Integration ID. */ id: string; application: UpdateCasbIntegrationResponseApplicationMap; /** The integration's authentication method. */ authMethod: UpdateCasbIntegrationResponseAuthMethodMap; /** Authorization link for the integration. */ authorizationLink: UpdateCasbIntegrationResponseAuthorizationLink; /** When the integration was created. */ created: string; /** Credentials expiry time. */ credentialsExpiry: string; /** DLP Profiles enabled for the integration. */ dlpProfiles: UpdateCasbIntegrationResponseDlpProfilesList; /** Health details with remediation hints. */ healthDetails: UpdateCasbIntegrationResponseHealthDetailsList; /** Whether the user paused the integration. */ isPaused: boolean; /** Last time the integration was hydrated. */ lastHydrated: string; /** Name of the integration. */ name: string; /** Organization ID. */ organizationId: number; /** Integration status. */ status: string; /** When the integration was last updated. */ updated: string; /** Use cases enabled for the integration. */ useCases: UpdateCasbIntegrationResponseUseCasesList; } export const UpdateCasbIntegrationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, application: UpdateCasbIntegrationResponseApplicationMap, authMethod: UpdateCasbIntegrationResponseAuthMethodMap.pipe( T.Body("auth_method"), ), authorizationLink: UpdateCasbIntegrationResponseAuthorizationLink.pipe( T.Body("authorization_link"), ), created: S.String, credentialsExpiry: S.String.pipe(T.Body("credentials_expiry")), dlpProfiles: UpdateCasbIntegrationResponseDlpProfilesList.pipe( T.Body("dlp_profiles"), ), healthDetails: UpdateCasbIntegrationResponseHealthDetailsList.pipe( T.Body("health_details"), ), isPaused: S.Boolean.pipe(T.Body("is_paused")), lastHydrated: S.String.pipe(T.Body("last_hydrated")), name: S.String, organizationId: S.Number.pipe(T.Body("organization_id")), status: S.String, updated: S.String, useCases: UpdateCasbIntegrationResponseUseCasesList.pipe( T.Body("use_cases"), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateCasbIntegrationResponse", }) as any as S.Schema; export type DevicesDexTestsUpdateRequestDataKind = "http" | "traceroute"; export const DevicesDexTestsUpdateRequestDataKind = /*@__PURE__*/ S.String; export type DevicesDexTestsUpdateRequestDataMethod = "GET"; export const DevicesDexTestsUpdateRequestDataMethod = /*@__PURE__*/ S.String; export interface DevicesDexTestsUpdateRequestData { /** The desired endpoint to test. */ host: string; /** The type of test. */ kind: DevicesDexTestsUpdateRequestDataKind | (string & {}); /** The HTTP request method type. */ method?: DevicesDexTestsUpdateRequestDataMethod | (string & {}); } export const DevicesDexTestsUpdateRequestData = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.String, kind: DevicesDexTestsUpdateRequestDataKind, method: S.optional(DevicesDexTestsUpdateRequestDataMethod), }), ).annotate({ identifier: "DevicesDexTestsUpdateRequestData", }) as any as S.Schema; export type DevicesDexTestsUpdateRequestTargetPoliciesItem = DevicesDexTestsCreateRequestTargetPoliciesItem; export const DevicesDexTestsUpdateRequestTargetPoliciesItem = DevicesDexTestsCreateRequestTargetPoliciesItem; export type DevicesDexTestsUpdateRequestTargetPoliciesList = Array; export const DevicesDexTestsUpdateRequestTargetPoliciesList = /*@__PURE__*/ S.Array( DevicesDexTestsCreateRequestTargetPoliciesItem, ) as any as S.Schema; export interface UpdateDeviceDexTestRequest { /** Unique identifier linked to an account. */ accountId: string; /** API Resource UUID tag. */ dexTestId: string; /** The configuration object which contains the details for the WARP client to conduct the test. */ data: DevicesDexTestsUpdateRequestData; /** Determines whether or not the test is active. */ enabled: boolean; /** How often the test will run. */ interval: string; /** The name of the DEX test. Must be unique. */ name: string; /** Additional details about the test. */ description?: string; /** DEX rules targeted by this test */ targetPolicies?: DevicesDexTestsUpdateRequestTargetPoliciesList; targeted?: boolean; } export const UpdateDeviceDexTestRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), dexTestId: S.String.pipe(T.Label("dex_test_id")), data: DevicesDexTestsUpdateRequestData, enabled: S.Boolean, interval: S.String, name: S.String, description: S.optional(S.String), targetPolicies: S.optional( DevicesDexTestsUpdateRequestTargetPoliciesList.pipe( T.Body("target_policies"), ), ), targeted: S.optional(S.Boolean), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dex/devices/dex_tests/{dex_test_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDeviceDexTestRequest", }) as any as S.Schema; export type DevicesDexTestsUpdateResponseDataKind = "http" | "traceroute"; export const DevicesDexTestsUpdateResponseDataKind = /*@__PURE__*/ S.String; export type DevicesDexTestsUpdateResponseDataMethod = "GET"; export const DevicesDexTestsUpdateResponseDataMethod = /*@__PURE__*/ S.String; export interface DevicesDexTestsUpdateResponseData { /** The desired endpoint to test. */ host: string; /** The type of test. */ kind: DevicesDexTestsUpdateResponseDataKind; /** The HTTP request method type. */ method?: DevicesDexTestsUpdateResponseDataMethod | null; } export const DevicesDexTestsUpdateResponseData = /*@__PURE__*/ S.suspend(() => S.Struct({ host: S.String, kind: DevicesDexTestsUpdateResponseDataKind, method: S.optional(S.NullOr(DevicesDexTestsUpdateResponseDataMethod)), }), ).annotate({ identifier: "DevicesDexTestsUpdateResponseData", }) as any as S.Schema; export type DevicesDexTestsUpdateResponseTargetPoliciesItem = DevicesDexTestsCreateResponseTargetPoliciesItem; export const DevicesDexTestsUpdateResponseTargetPoliciesItem = DevicesDexTestsCreateResponseTargetPoliciesItem; export type DevicesDexTestsUpdateResponseTargetPoliciesList = Array; export const DevicesDexTestsUpdateResponseTargetPoliciesList = /*@__PURE__*/ S.Array( DevicesDexTestsCreateResponseTargetPoliciesItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateDeviceDexTestResponse { /** The configuration object which contains the details for the WARP client to conduct the test. */ data: DevicesDexTestsUpdateResponseData; /** Determines whether or not the test is active. */ enabled: boolean; /** How often the test will run. */ interval: string; /** The name of the DEX test. Must be unique. */ name: string; /** Additional details about the test. */ description?: string | null; /** DEX rules targeted by this test */ targetPolicies?: DevicesDexTestsUpdateResponseTargetPoliciesList | null; targeted?: boolean | null; /** The unique identifier for the test. */ testId?: string | null; } export const UpdateDeviceDexTestResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ data: DevicesDexTestsUpdateResponseData, enabled: S.Boolean, interval: S.String, name: S.String, description: S.optional(S.NullOr(S.String)), targetPolicies: S.optional( S.NullOr(DevicesDexTestsUpdateResponseTargetPoliciesList).pipe( T.Body("target_policies"), ), ), targeted: S.optional(S.NullOr(S.Boolean)), testId: S.optional(S.NullOr(S.String).pipe(T.Body("test_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDeviceDexTestResponse", }) as any as S.Schema; export type DevicesNetworksUpdateRequestConfig = DevicesNetworksCreateRequestConfig; export const DevicesNetworksUpdateRequestConfig = DevicesNetworksCreateRequestConfig; export type DevicesNetworksUpdateRequestType = "tls"; export const DevicesNetworksUpdateRequestType = /*@__PURE__*/ S.String; export interface UpdateDeviceNetworkRequest { accountId: string; /** API UUID. */ networkId: string; /** The configuration object containing information for the WARP client to detect the managed network. */ config?: DevicesNetworksCreateRequestConfig; /** The name of the device managed network. This name must be unique. */ name?: string; /** The type of device managed network. */ type?: DevicesNetworksUpdateRequestType | (string & {}); } export const UpdateDeviceNetworkRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), networkId: S.String.pipe(T.Label("network_id")), config: S.optional(DevicesNetworksCreateRequestConfig), name: S.optional(S.String), type: S.optional(DevicesNetworksUpdateRequestType), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/devices/networks/{network_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDeviceNetworkRequest", }) as any as S.Schema; export type DevicesNetworksUpdateResponseConfig = DevicesNetworksCreateResponseConfig; export const DevicesNetworksUpdateResponseConfig = DevicesNetworksCreateResponseConfig; export type DevicesNetworksUpdateResponseType = "tls"; export const DevicesNetworksUpdateResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateDeviceNetworkResponse { /** The configuration object containing information for the WARP client to detect the managed network. */ config?: DevicesNetworksCreateResponseConfig | null; /** The name of the device managed network. This name must be unique. */ name?: string | null; /** API UUID. */ networkId?: string | null; /** The type of device managed network. */ type?: DevicesNetworksUpdateResponseType | null; } export const UpdateDeviceNetworkResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ config: S.optional(S.NullOr(DevicesNetworksCreateResponseConfig)), name: S.optional(S.NullOr(S.String)), networkId: S.optional(S.NullOr(S.String).pipe(T.Body("network_id"))), type: S.optional(S.NullOr(DevicesNetworksUpdateResponseType)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDeviceNetworkResponse", }) as any as S.Schema; export type DevicesPostureUpdateRequestType = | "file" | "application" | "tanium" | "gateway" | "warp" | "disk_encryption" | "serial_number" | "sentinelone" | "carbonblack" | "firewall" | "os_version" | "domain_joined" | "client_certificate" | "client_certificate_v2" | "antivirus" | "unique_client_id" | "kolide" | "tanium_s2s" | "crowdstrike_s2s" | "intune" | "workspace_one" | "sentinelone_s2s" | "custom_s2s"; export const DevicesPostureUpdateRequestType = /*@__PURE__*/ S.String; export type DevicesPostureUpdateRequestInputFileInputOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureUpdateRequestInputFileInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestInputFileInput { /** Operating system. */ operatingSystem: | DevicesPostureUpdateRequestInputFileInputOperatingSystem | (string & {}); /** File path. */ path: string; /** Whether or not file exists. */ exists?: boolean; /** SHA-256. */ sha256?: string; /** Signing certificate thumbprint. */ thumbprint?: string; } export const DevicesPostureUpdateRequestInputFileInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureUpdateRequestInputFileInputOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, exists: S.optional(S.Boolean), sha256: S.optional(S.String), thumbprint: S.optional(S.String), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputFileInput", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputUniqueClientIDInputOperatingSystem = | "android" | "ios" | "chromeos"; export const DevicesPostureUpdateRequestInputUniqueClientIDInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestInputUniqueClientIDInput { /** List ID. */ id: string; /** Operating System. */ operatingSystem: | DevicesPostureUpdateRequestInputUniqueClientIDInputOperatingSystem | (string & {}); } export const DevicesPostureUpdateRequestInputUniqueClientIDInput = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, operatingSystem: DevicesPostureUpdateRequestInputUniqueClientIDInputOperatingSystem.pipe( T.Body("operating_system"), ), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputUniqueClientIDInput", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputDomainJoinedInputOperatingSystem = "windows"; export const DevicesPostureUpdateRequestInputDomainJoinedInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestInputDomainJoinedInput { /** Operating System. */ operatingSystem: DevicesPostureUpdateRequestInputDomainJoinedInputOperatingSystem; /** Domain. */ domain?: string; } export const DevicesPostureUpdateRequestInputDomainJoinedInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureUpdateRequestInputDomainJoinedInputOperatingSystem.pipe( T.Body("operating_system"), ), domain: S.optional(S.String), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputDomainJoinedInput", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputOSVersionInputOperatingSystem = "windows"; export const DevicesPostureUpdateRequestInputOSVersionInputOperatingSystem = /*@__PURE__*/ S.String; export type DevicesPostureUpdateRequestInputOSVersionInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateRequestInputOSVersionInputOperator = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestInputOSVersionInput { /** Operating System. */ operatingSystem: DevicesPostureUpdateRequestInputOSVersionInputOperatingSystem; /** Operator. */ operator: | DevicesPostureUpdateRequestInputOSVersionInputOperator | (string & {}); /** Version of OS. */ version: string; /** Operating System Distribution Name (linux only). */ osDistroName?: string; /** Version of OS Distribution (linux only). */ osDistroRevision?: string; /** Additional operating system version details. For Windows, the UBR (Update Build Revision). For Mac or iOS, the Product Version Extra. For Linux, the distribution name and version. */ osVersionExtra?: string; } export const DevicesPostureUpdateRequestInputOSVersionInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureUpdateRequestInputOSVersionInputOperatingSystem.pipe( T.Body("operating_system"), ), operator: DevicesPostureUpdateRequestInputOSVersionInputOperator, version: S.String, osDistroName: S.optional(S.String.pipe(T.Body("os_distro_name"))), osDistroRevision: S.optional(S.String.pipe(T.Body("os_distro_revision"))), osVersionExtra: S.optional(S.String.pipe(T.Body("os_version_extra"))), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputOSVersionInput", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputFirewallInputOperatingSystem = | "windows" | "mac"; export const DevicesPostureUpdateRequestInputFirewallInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestInputFirewallInput { /** Enabled. */ enabled: boolean; /** Operating System. */ operatingSystem: | DevicesPostureUpdateRequestInputFirewallInputOperatingSystem | (string & {}); } export const DevicesPostureUpdateRequestInputFirewallInput = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, operatingSystem: DevicesPostureUpdateRequestInputFirewallInputOperatingSystem.pipe( T.Body("operating_system"), ), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputFirewallInput", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputSentineloneInputOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureUpdateRequestInputSentineloneInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestInputSentineloneInput { /** Operating system. */ operatingSystem: | DevicesPostureUpdateRequestInputSentineloneInputOperatingSystem | (string & {}); /** File path. */ path: string; /** SHA-256. */ sha256?: string; /** Signing certificate thumbprint. */ thumbprint?: string; } export const DevicesPostureUpdateRequestInputSentineloneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureUpdateRequestInputSentineloneInputOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.String), thumbprint: S.optional(S.String), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputSentineloneInput", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputTeamsDevicesCarbonblackInputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureUpdateRequestInputTeamsDevicesCarbonblackInputRequestOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestInputTeamsDevicesCarbonblackInputRequest { /** Operating system. */ operatingSystem: | DevicesPostureUpdateRequestInputTeamsDevicesCarbonblackInputRequestOperatingSystem | (string & {}); /** File path. */ path: string; /** SHA-256. */ sha256?: string; /** Signing certificate thumbprint. */ thumbprint?: string; } export const DevicesPostureUpdateRequestInputTeamsDevicesCarbonblackInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureUpdateRequestInputTeamsDevicesCarbonblackInputRequestOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.String), thumbprint: S.optional(S.String), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputTeamsDevicesCarbonblackInputRequest", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputTeamsDevicesAccessSerialNumberListInputRequest = DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest; export const DevicesPostureUpdateRequestInputTeamsDevicesAccessSerialNumberListInputRequest = DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest; export type DevicesPostureUpdateRequestInputDiskEncryptionInputCheckDisksList = Array; export const DevicesPostureUpdateRequestInputDiskEncryptionInputCheckDisksList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export interface DevicesPostureUpdateRequestInputDiskEncryptionInput { /** List of volume names to be checked for encryption. */ checkDisks?: DevicesPostureUpdateRequestInputDiskEncryptionInputCheckDisksList; /** Whether to check all disks for encryption. */ requireAll?: boolean; } export const DevicesPostureUpdateRequestInputDiskEncryptionInput = /*@__PURE__*/ S.suspend(() => S.Struct({ checkDisks: S.optional( DevicesPostureUpdateRequestInputDiskEncryptionInputCheckDisksList, ), requireAll: S.optional(S.Boolean), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputDiskEncryptionInput", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputTeamsDevicesApplicationInputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureUpdateRequestInputTeamsDevicesApplicationInputRequestOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestInputTeamsDevicesApplicationInputRequest { /** Operating system. */ operatingSystem: | DevicesPostureUpdateRequestInputTeamsDevicesApplicationInputRequestOperatingSystem | (string & {}); /** Path for the application. */ path: string; /** SHA-256. */ sha256?: string; /** Signing certificate thumbprint. */ thumbprint?: string; } export const DevicesPostureUpdateRequestInputTeamsDevicesApplicationInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureUpdateRequestInputTeamsDevicesApplicationInputRequestOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.String), thumbprint: S.optional(S.String), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputTeamsDevicesApplicationInputRequest", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputClientCertificateInput = DevicesPostureCreateRequestInputClientCertificateInput; export const DevicesPostureUpdateRequestInputClientCertificateInput = DevicesPostureCreateRequestInputClientCertificateInput; export type DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem = /*@__PURE__*/ S.String; export type DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem = | "clientAuth" | "emailProtection"; export const DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem = /*@__PURE__*/ S.String; export type DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList = Array< | DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem | (string & {}) >; export const DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList = /*@__PURE__*/ S.Array( DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem, ) as any as S.Schema; export type DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList = Array; export const DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem = | "system" | "user"; export const DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem = /*@__PURE__*/ S.String; export type DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList = Array< | DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem | (string & {}) >; export const DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList = /*@__PURE__*/ S.Array( DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem, ) as any as S.Schema; export interface DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocations { /** List of paths to check for client certificate on linux. */ paths?: DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList; /** List of trust stores to check for client certificate. */ trustStores?: DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList; } export const DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocations = /*@__PURE__*/ S.suspend(() => S.Struct({ paths: S.optional( DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList, ), trustStores: S.optional( DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList.pipe( T.Body("trust_stores"), ), ), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocations", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList = Array; export const DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequest { /** UUID of Cloudflare managed certificate. */ certificateId: string; /** Confirm the certificate was not imported from another device. We recommend keeping this enabled unless the certificate was deployed without a private key. */ checkPrivateKey: boolean; /** Operating system. */ operatingSystem: | DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem | (string & {}); /** Certificate Common Name. This may include one or more variables in the ${ } notation. Only ${serial_number} and ${hostname} are valid variables. */ cn?: string; /** List of values indicating purposes for which the certificate public key can be used. */ extendedKeyUsage?: DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList; locations?: DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocations; /** List of certificate Subject Alternative Names. */ subjectAlternativeNames?: DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList; } export const DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ certificateId: S.String.pipe(T.Body("certificate_id")), checkPrivateKey: S.Boolean.pipe(T.Body("check_private_key")), operatingSystem: DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem.pipe( T.Body("operating_system"), ), cn: S.optional(S.String), extendedKeyUsage: S.optional( DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList.pipe( T.Body("extended_key_usage"), ), ), locations: S.optional( DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestLocations, ), subjectAlternativeNames: S.optional( DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList.pipe( T.Body("subject_alternative_names"), ), ), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequest", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputTeamsDevicesAntivirusInputRequest = DevicesPostureCreateRequestInputTeamsDevicesAntivirusInputRequest; export const DevicesPostureUpdateRequestInputTeamsDevicesAntivirusInputRequest = DevicesPostureCreateRequestInputTeamsDevicesAntivirusInputRequest; export type DevicesPostureUpdateRequestInputWorkspaceOneInputComplianceStatus = | "compliant" | "noncompliant" | "unknown"; export const DevicesPostureUpdateRequestInputWorkspaceOneInputComplianceStatus = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestInputWorkspaceOneInput { /** Compliance Status. */ complianceStatus: | DevicesPostureUpdateRequestInputWorkspaceOneInputComplianceStatus | (string & {}); /** Posture Integration ID. */ connectionId: string; } export const DevicesPostureUpdateRequestInputWorkspaceOneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ complianceStatus: DevicesPostureUpdateRequestInputWorkspaceOneInputComplianceStatus.pipe( T.Body("compliance_status"), ), connectionId: S.String.pipe(T.Body("connection_id")), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputWorkspaceOneInput", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputCrowdstrikeInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateRequestInputCrowdstrikeInputOperator = /*@__PURE__*/ S.String; export type DevicesPostureUpdateRequestInputCrowdstrikeInputState = | "online" | "offline" | "unknown"; export const DevicesPostureUpdateRequestInputCrowdstrikeInputState = /*@__PURE__*/ S.String; export type DevicesPostureUpdateRequestInputCrowdstrikeInputVersionOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateRequestInputCrowdstrikeInputVersionOperator = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestInputCrowdstrikeInput { /** Posture Integration ID. */ connectionId: string; /** For more details on last seen, please refer to the Crowdstrike documentation. */ lastSeen?: string; /** Operator. */ operator?: | DevicesPostureUpdateRequestInputCrowdstrikeInputOperator | (string & {}); /** Os Version. */ os?: string; /** Overall. */ overall?: string; /** SensorConfig. */ sensorConfig?: string; /** For more details on state, please refer to the Crowdstrike documentation. */ state?: DevicesPostureUpdateRequestInputCrowdstrikeInputState | (string & {}); /** Version. */ version?: string; /** Version Operator. */ versionOperator?: | DevicesPostureUpdateRequestInputCrowdstrikeInputVersionOperator | (string & {}); } export const DevicesPostureUpdateRequestInputCrowdstrikeInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), lastSeen: S.optional(S.String.pipe(T.Body("last_seen"))), operator: S.optional( DevicesPostureUpdateRequestInputCrowdstrikeInputOperator, ), os: S.optional(S.String), overall: S.optional(S.String), sensorConfig: S.optional(S.String.pipe(T.Body("sensor_config"))), state: S.optional(DevicesPostureUpdateRequestInputCrowdstrikeInputState), version: S.optional(S.String), versionOperator: S.optional( DevicesPostureUpdateRequestInputCrowdstrikeInputVersionOperator, ), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputCrowdstrikeInput", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputIntuneInputComplianceStatus = | "compliant" | "noncompliant" | "unknown" | "notapplicable" | "ingraceperiod" | "error"; export const DevicesPostureUpdateRequestInputIntuneInputComplianceStatus = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestInputIntuneInput { /** Compliance Status. */ complianceStatus: | DevicesPostureUpdateRequestInputIntuneInputComplianceStatus | (string & {}); /** Posture Integration ID. */ connectionId: string; } export const DevicesPostureUpdateRequestInputIntuneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ complianceStatus: DevicesPostureUpdateRequestInputIntuneInputComplianceStatus.pipe( T.Body("compliance_status"), ), connectionId: S.String.pipe(T.Body("connection_id")), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputIntuneInput", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputKolideInputAuthStateItem = | "Good" | "Notified" | "Will Block" | "Blocked"; export const DevicesPostureUpdateRequestInputKolideInputAuthStateItem = /*@__PURE__*/ S.String; export type DevicesPostureUpdateRequestInputKolideInputAuthStateList = Array< DevicesPostureUpdateRequestInputKolideInputAuthStateItem | (string & {}) >; export const DevicesPostureUpdateRequestInputKolideInputAuthStateList = /*@__PURE__*/ S.Array( DevicesPostureUpdateRequestInputKolideInputAuthStateItem, ) as any as S.Schema; export type DevicesPostureUpdateRequestInputKolideInputCountOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateRequestInputKolideInputCountOperator = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestInputKolideInput { /** Posture Integration ID. */ connectionId: string; /** The set of Kolide device authentication states that pass the posture check. Device must match one of the specified states. */ authState?: DevicesPostureUpdateRequestInputKolideInputAuthStateList; /** Count Operator. */ countOperator?: | DevicesPostureUpdateRequestInputKolideInputCountOperator | (string & {}); /** The Number of Issues. */ issueCount?: string; } export const DevicesPostureUpdateRequestInputKolideInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), authState: S.optional( DevicesPostureUpdateRequestInputKolideInputAuthStateList.pipe( T.Body("auth_state"), ), ), countOperator: S.optional( DevicesPostureUpdateRequestInputKolideInputCountOperator, ), issueCount: S.optional(S.String.pipe(T.Body("issue_count"))), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputKolideInput", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputTaniumInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateRequestInputTaniumInputOperator = /*@__PURE__*/ S.String; export type DevicesPostureUpdateRequestInputTaniumInputRiskLevel = | "low" | "medium" | "high" | "critical"; export const DevicesPostureUpdateRequestInputTaniumInputRiskLevel = /*@__PURE__*/ S.String; export type DevicesPostureUpdateRequestInputTaniumInputScoreOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateRequestInputTaniumInputScoreOperator = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestInputTaniumInput { /** Posture Integration ID. */ connectionId: string; /** For more details on eid last seen, refer to the Tanium documentation. */ eidLastSeen?: string; /** Operator to evaluate risk_level or eid_last_seen. */ operator?: | DevicesPostureUpdateRequestInputTaniumInputOperator | (string & {}); /** For more details on risk level, refer to the Tanium documentation. */ riskLevel?: | DevicesPostureUpdateRequestInputTaniumInputRiskLevel | (string & {}); /** Score Operator. */ scoreOperator?: | DevicesPostureUpdateRequestInputTaniumInputScoreOperator | (string & {}); /** For more details on total score, refer to the Tanium documentation. */ totalScore?: number; } export const DevicesPostureUpdateRequestInputTaniumInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), eidLastSeen: S.optional(S.String.pipe(T.Body("eid_last_seen"))), operator: S.optional(DevicesPostureUpdateRequestInputTaniumInputOperator), riskLevel: S.optional( DevicesPostureUpdateRequestInputTaniumInputRiskLevel.pipe( T.Body("risk_level"), ), ), scoreOperator: S.optional( DevicesPostureUpdateRequestInputTaniumInputScoreOperator, ), totalScore: S.optional(S.Number.pipe(T.Body("total_score"))), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputTaniumInput", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputSentineloneS2sInputNetworkStatus = | "connected" | "disconnected" | "disconnecting" | "connecting"; export const DevicesPostureUpdateRequestInputSentineloneS2sInputNetworkStatus = /*@__PURE__*/ S.String; export type DevicesPostureUpdateRequestInputSentineloneS2sInputOperationalState = | "na" | "partially_disabled" | "auto_fully_disabled" | "fully_disabled" | "auto_partially_disabled" | "disabled_error" | "db_corruption"; export const DevicesPostureUpdateRequestInputSentineloneS2sInputOperationalState = /*@__PURE__*/ S.String; export type DevicesPostureUpdateRequestInputSentineloneS2sInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateRequestInputSentineloneS2sInputOperator = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestInputSentineloneS2sInput { /** Posture Integration ID. */ connectionId: string; /** The Number of active threats. */ activeThreats?: number; /** Whether device is infected. */ infected?: boolean; /** Whether device is active. */ isActive?: boolean; /** Network status of device. */ networkStatus?: | DevicesPostureUpdateRequestInputSentineloneS2sInputNetworkStatus | (string & {}); /** Agent operational state. */ operationalState?: | DevicesPostureUpdateRequestInputSentineloneS2sInputOperationalState | (string & {}); /** Operator. */ operator?: | DevicesPostureUpdateRequestInputSentineloneS2sInputOperator | (string & {}); } export const DevicesPostureUpdateRequestInputSentineloneS2sInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), activeThreats: S.optional(S.Number.pipe(T.Body("active_threats"))), infected: S.optional(S.Boolean), isActive: S.optional(S.Boolean.pipe(T.Body("is_active"))), networkStatus: S.optional( DevicesPostureUpdateRequestInputSentineloneS2sInputNetworkStatus.pipe( T.Body("network_status"), ), ), operationalState: S.optional( DevicesPostureUpdateRequestInputSentineloneS2sInputOperationalState.pipe( T.Body("operational_state"), ), ), operator: S.optional( DevicesPostureUpdateRequestInputSentineloneS2sInputOperator, ), }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputSentineloneS2sInput", }) as any as S.Schema; export type DevicesPostureUpdateRequestInputTeamsDevicesCustomS2sInputRequestOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateRequestInputTeamsDevicesCustomS2sInputRequestOperator = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestInputTeamsDevicesCustomS2sInputRequest { /** Posture Integration ID. */ connectionId: string; /** Operator. */ operator: | DevicesPostureUpdateRequestInputTeamsDevicesCustomS2sInputRequestOperator | (string & {}); /** A value between 0-100 assigned to devices set by the 3rd party posture provider. */ score: number; } export const DevicesPostureUpdateRequestInputTeamsDevicesCustomS2sInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), operator: DevicesPostureUpdateRequestInputTeamsDevicesCustomS2sInputRequestOperator, score: S.Number, }), ).annotate({ identifier: "DevicesPostureUpdateRequestInputTeamsDevicesCustomS2sInputRequest", }) as any as S.Schema; export type DevicesPostureUpdateRequestInput = | DevicesPostureUpdateRequestInputFileInput | DevicesPostureUpdateRequestInputUniqueClientIDInput | DevicesPostureUpdateRequestInputDomainJoinedInput | DevicesPostureUpdateRequestInputOSVersionInput | DevicesPostureUpdateRequestInputFirewallInput | DevicesPostureUpdateRequestInputSentineloneInput | DevicesPostureUpdateRequestInputTeamsDevicesCarbonblackInputRequest | DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest | DevicesPostureUpdateRequestInputDiskEncryptionInput | DevicesPostureUpdateRequestInputTeamsDevicesApplicationInputRequest | DevicesPostureCreateRequestInputClientCertificateInput | DevicesPostureUpdateRequestInputTeamsDevicesClientCertificateV2InputRequest | DevicesPostureCreateRequestInputTeamsDevicesAntivirusInputRequest | DevicesPostureUpdateRequestInputWorkspaceOneInput | DevicesPostureUpdateRequestInputCrowdstrikeInput | DevicesPostureUpdateRequestInputIntuneInput | DevicesPostureUpdateRequestInputKolideInput | DevicesPostureUpdateRequestInputTaniumInput | DevicesPostureUpdateRequestInputSentineloneS2sInput | DevicesPostureUpdateRequestInputTeamsDevicesCustomS2sInputRequest; export const DevicesPostureUpdateRequestInput = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["operatingSystem", "path", "exists", "sha256", "thumbprint"], ["id", "operatingSystem"], ["operatingSystem", "domain"], [ "operatingSystem", "operator", "version", "osDistroName", "osDistroRevision", "osVersionExtra", ], ["enabled", "operatingSystem"], ["operatingSystem", "path", "sha256", "thumbprint"], ["operatingSystem", "path", "sha256", "thumbprint"], ["id"], ["checkDisks", "requireAll"], ["operatingSystem", "path", "sha256", "thumbprint"], ["certificateId", "cn"], [ "certificateId", "checkPrivateKey", "operatingSystem", "cn", "extendedKeyUsage", "locations", "subjectAlternativeNames", ], ["updateWindowDays"], ["complianceStatus", "connectionId"], [ "connectionId", "lastSeen", "operator", "os", "overall", "sensorConfig", "state", "version", "versionOperator", ], ["complianceStatus", "connectionId"], ["connectionId", "authState", "countOperator", "issueCount"], [ "connectionId", "eidLastSeen", "operator", "riskLevel", "scoreOperator", "totalScore", ], [ "connectionId", "activeThreats", "infected", "isActive", "networkStatus", "operationalState", "operator", ], ["connectionId", "operator", "score"], ]), ); export type DevicesPostureUpdateRequestMatchItemPlatform = | "windows" | "mac" | "linux" | "android" | "ios" | "chromeos"; export const DevicesPostureUpdateRequestMatchItemPlatform = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateRequestMatchItem { platform?: DevicesPostureUpdateRequestMatchItemPlatform | (string & {}); } export const DevicesPostureUpdateRequestMatchItem = /*@__PURE__*/ S.suspend( () => S.Struct({ platform: S.optional(DevicesPostureUpdateRequestMatchItemPlatform), }), ).annotate({ identifier: "DevicesPostureUpdateRequestMatchItem", }) as any as S.Schema; export type DevicesPostureUpdateRequestMatchList = Array; export const DevicesPostureUpdateRequestMatchList = /*@__PURE__*/ S.Array( DevicesPostureUpdateRequestMatchItem, ) as any as S.Schema; export interface UpdateDevicePostureRequest { accountId: string; /** API UUID. */ ruleId: string; /** The name of the device posture rule. */ name: string; /** The type of device posture rule. */ type: DevicesPostureUpdateRequestType | (string & {}); /** The description of the device posture rule. */ description?: string; /** Sets the expiration time for a posture check result. If empty, the result remains valid until it is overwritten by new data from the WARP client. */ expiration?: string; /** The value to be checked against. */ input?: DevicesPostureUpdateRequestInput; /** The conditions that the client must match to run the rule. */ match?: DevicesPostureUpdateRequestMatchList; /** Polling frequency for the WARP client posture check. Default: `5m` (poll every five minutes). Minimum: `1m`. */ schedule?: string; } export const UpdateDevicePostureRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ruleId: S.String.pipe(T.Label("rule_id")), name: S.String, type: DevicesPostureUpdateRequestType, description: S.optional(S.String), expiration: S.optional(S.String), input: S.optional(DevicesPostureUpdateRequestInput), match: S.optional(DevicesPostureUpdateRequestMatchList), schedule: S.optional(S.String), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/devices/posture/{rule_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDevicePostureRequest", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputFileInputOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureUpdateResponseInputFileInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseInputFileInput { /** Operating system. */ operatingSystem: DevicesPostureUpdateResponseInputFileInputOperatingSystem; /** File path. */ path: string; /** Whether or not file exists. */ exists?: boolean | null; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureUpdateResponseInputFileInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureUpdateResponseInputFileInputOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, exists: S.optional(S.NullOr(S.Boolean)), sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputFileInput", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputUniqueClientIDInputOperatingSystem = | "android" | "ios" | "chromeos"; export const DevicesPostureUpdateResponseInputUniqueClientIDInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseInputUniqueClientIDInput { /** List ID. */ id: string; /** Operating System. */ operatingSystem: DevicesPostureUpdateResponseInputUniqueClientIDInputOperatingSystem; } export const DevicesPostureUpdateResponseInputUniqueClientIDInput = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, operatingSystem: DevicesPostureUpdateResponseInputUniqueClientIDInputOperatingSystem.pipe( T.Body("operating_system"), ), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputUniqueClientIDInput", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputDomainJoinedInputOperatingSystem = "windows"; export const DevicesPostureUpdateResponseInputDomainJoinedInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseInputDomainJoinedInput { /** Operating System. */ operatingSystem: DevicesPostureUpdateResponseInputDomainJoinedInputOperatingSystem; /** Domain. */ domain?: string | null; } export const DevicesPostureUpdateResponseInputDomainJoinedInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureUpdateResponseInputDomainJoinedInputOperatingSystem.pipe( T.Body("operating_system"), ), domain: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputDomainJoinedInput", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputOSVersionInputOperatingSystem = "windows"; export const DevicesPostureUpdateResponseInputOSVersionInputOperatingSystem = /*@__PURE__*/ S.String; export type DevicesPostureUpdateResponseInputOSVersionInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateResponseInputOSVersionInputOperator = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseInputOSVersionInput { /** Operating System. */ operatingSystem: DevicesPostureUpdateResponseInputOSVersionInputOperatingSystem; /** Operator. */ operator: DevicesPostureUpdateResponseInputOSVersionInputOperator; /** Version of OS. */ version: string; /** Operating System Distribution Name (linux only). */ osDistroName?: string | null; /** Version of OS Distribution (linux only). */ osDistroRevision?: string | null; /** Additional operating system version details. For Windows, the UBR (Update Build Revision). For Mac or iOS, the Product Version Extra. For Linux, the distribution name and version. */ osVersionExtra?: string | null; } export const DevicesPostureUpdateResponseInputOSVersionInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureUpdateResponseInputOSVersionInputOperatingSystem.pipe( T.Body("operating_system"), ), operator: DevicesPostureUpdateResponseInputOSVersionInputOperator, version: S.String, osDistroName: S.optional( S.NullOr(S.String).pipe(T.Body("os_distro_name")), ), osDistroRevision: S.optional( S.NullOr(S.String).pipe(T.Body("os_distro_revision")), ), osVersionExtra: S.optional( S.NullOr(S.String).pipe(T.Body("os_version_extra")), ), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputOSVersionInput", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputFirewallInputOperatingSystem = | "windows" | "mac"; export const DevicesPostureUpdateResponseInputFirewallInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseInputFirewallInput { /** Enabled. */ enabled: boolean; /** Operating System. */ operatingSystem: DevicesPostureUpdateResponseInputFirewallInputOperatingSystem; } export const DevicesPostureUpdateResponseInputFirewallInput = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, operatingSystem: DevicesPostureUpdateResponseInputFirewallInputOperatingSystem.pipe( T.Body("operating_system"), ), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputFirewallInput", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputSentineloneInputOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureUpdateResponseInputSentineloneInputOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseInputSentineloneInput { /** Operating system. */ operatingSystem: DevicesPostureUpdateResponseInputSentineloneInputOperatingSystem; /** File path. */ path: string; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureUpdateResponseInputSentineloneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureUpdateResponseInputSentineloneInputOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputSentineloneInput", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputTeamsDevicesCarbonblackInputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureUpdateResponseInputTeamsDevicesCarbonblackInputRequestOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseInputTeamsDevicesCarbonblackInputRequest { /** Operating system. */ operatingSystem: DevicesPostureUpdateResponseInputTeamsDevicesCarbonblackInputRequestOperatingSystem; /** File path. */ path: string; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureUpdateResponseInputTeamsDevicesCarbonblackInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureUpdateResponseInputTeamsDevicesCarbonblackInputRequestOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputTeamsDevicesCarbonblackInputRequest", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputTeamsDevicesAccessSerialNumberListInputRequest = DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest; export const DevicesPostureUpdateResponseInputTeamsDevicesAccessSerialNumberListInputRequest = DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest; export type DevicesPostureUpdateResponseInputDiskEncryptionInputCheckDisksList = Array; export const DevicesPostureUpdateResponseInputDiskEncryptionInputCheckDisksList = /*@__PURE__*/ S.Array( S.Unknown, ) as any as S.Schema; export interface DevicesPostureUpdateResponseInputDiskEncryptionInput { /** List of volume names to be checked for encryption. */ checkDisks?: DevicesPostureUpdateResponseInputDiskEncryptionInputCheckDisksList | null; /** Whether to check all disks for encryption. */ requireAll?: boolean | null; } export const DevicesPostureUpdateResponseInputDiskEncryptionInput = /*@__PURE__*/ S.suspend(() => S.Struct({ checkDisks: S.optional( S.NullOr( DevicesPostureUpdateResponseInputDiskEncryptionInputCheckDisksList, ), ), requireAll: S.optional(S.NullOr(S.Boolean)), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputDiskEncryptionInput", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputTeamsDevicesApplicationInputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureUpdateResponseInputTeamsDevicesApplicationInputRequestOperatingSystem = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseInputTeamsDevicesApplicationInputRequest { /** Operating system. */ operatingSystem: DevicesPostureUpdateResponseInputTeamsDevicesApplicationInputRequestOperatingSystem; /** Path for the application. */ path: string; /** SHA-256. */ sha256?: string | null; /** Signing certificate thumbprint. */ thumbprint?: string | null; } export const DevicesPostureUpdateResponseInputTeamsDevicesApplicationInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ operatingSystem: DevicesPostureUpdateResponseInputTeamsDevicesApplicationInputRequestOperatingSystem.pipe( T.Body("operating_system"), ), path: S.String, sha256: S.optional(S.NullOr(S.String)), thumbprint: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputTeamsDevicesApplicationInputRequest", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputClientCertificateInput = DevicesPostureCreateRequestInputClientCertificateInput; export const DevicesPostureUpdateResponseInputClientCertificateInput = DevicesPostureCreateRequestInputClientCertificateInput; export type DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem = | "windows" | "linux" | "mac"; export const DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem = /*@__PURE__*/ S.String; export type DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem = | "clientAuth" | "emailProtection"; export const DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem = /*@__PURE__*/ S.String; export type DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList = Array; export const DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList = /*@__PURE__*/ S.Array( DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageItem, ) as any as S.Schema; export type DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList = Array; export const DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem = | "system" | "user"; export const DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem = /*@__PURE__*/ S.String; export type DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList = Array; export const DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList = /*@__PURE__*/ S.Array( DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresItem, ) as any as S.Schema; export interface DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocations { /** List of paths to check for client certificate on linux. */ paths?: DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList | null; /** List of trust stores to check for client certificate. */ trustStores?: DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList | null; } export const DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocations = /*@__PURE__*/ S.suspend(() => S.Struct({ paths: S.optional( S.NullOr( DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsPathsList, ), ), trustStores: S.optional( S.NullOr( DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocationsTrustStoresList, ).pipe(T.Body("trust_stores")), ), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocations", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList = Array; export const DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequest { /** UUID of Cloudflare managed certificate. */ certificateId: string; /** Confirm the certificate was not imported from another device. We recommend keeping this enabled unless the certificate was deployed without a private key. */ checkPrivateKey: boolean; /** Operating system. */ operatingSystem: DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem; /** Certificate Common Name. This may include one or more variables in the ${ } notation. Only ${serial_number} and ${hostname} are valid variables. */ cn?: string | null; /** List of values indicating purposes for which the certificate public key can be used. */ extendedKeyUsage?: DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList | null; locations?: DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocations | null; /** List of certificate Subject Alternative Names. */ subjectAlternativeNames?: DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList | null; } export const DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ certificateId: S.String.pipe(T.Body("certificate_id")), checkPrivateKey: S.Boolean.pipe(T.Body("check_private_key")), operatingSystem: DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestOperatingSystem.pipe( T.Body("operating_system"), ), cn: S.optional(S.NullOr(S.String)), extendedKeyUsage: S.optional( S.NullOr( DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestExtendedKeyUsageList, ).pipe(T.Body("extended_key_usage")), ), locations: S.optional( S.NullOr( DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestLocations, ), ), subjectAlternativeNames: S.optional( S.NullOr( DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequestSubjectAlternativeNamesList, ).pipe(T.Body("subject_alternative_names")), ), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequest", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputTeamsDevicesAntivirusInputRequest = DevicesPostureCreateResponseInputTeamsDevicesAntivirusInputRequest; export const DevicesPostureUpdateResponseInputTeamsDevicesAntivirusInputRequest = DevicesPostureCreateResponseInputTeamsDevicesAntivirusInputRequest; export type DevicesPostureUpdateResponseInputWorkspaceOneInputComplianceStatus = | "compliant" | "noncompliant" | "unknown"; export const DevicesPostureUpdateResponseInputWorkspaceOneInputComplianceStatus = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseInputWorkspaceOneInput { /** Compliance Status. */ complianceStatus: DevicesPostureUpdateResponseInputWorkspaceOneInputComplianceStatus; /** Posture Integration ID. */ connectionId: string; } export const DevicesPostureUpdateResponseInputWorkspaceOneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ complianceStatus: DevicesPostureUpdateResponseInputWorkspaceOneInputComplianceStatus.pipe( T.Body("compliance_status"), ), connectionId: S.String.pipe(T.Body("connection_id")), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputWorkspaceOneInput", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputCrowdstrikeInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateResponseInputCrowdstrikeInputOperator = /*@__PURE__*/ S.String; export type DevicesPostureUpdateResponseInputCrowdstrikeInputState = | "online" | "offline" | "unknown"; export const DevicesPostureUpdateResponseInputCrowdstrikeInputState = /*@__PURE__*/ S.String; export type DevicesPostureUpdateResponseInputCrowdstrikeInputVersionOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateResponseInputCrowdstrikeInputVersionOperator = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseInputCrowdstrikeInput { /** Posture Integration ID. */ connectionId: string; /** For more details on last seen, please refer to the Crowdstrike documentation. */ lastSeen?: string | null; /** Operator. */ operator?: DevicesPostureUpdateResponseInputCrowdstrikeInputOperator | null; /** Os Version. */ os?: string | null; /** Overall. */ overall?: string | null; /** SensorConfig. */ sensorConfig?: string | null; /** For more details on state, please refer to the Crowdstrike documentation. */ state?: DevicesPostureUpdateResponseInputCrowdstrikeInputState | null; /** Version. */ version?: string | null; /** Version Operator. */ versionOperator?: DevicesPostureUpdateResponseInputCrowdstrikeInputVersionOperator | null; } export const DevicesPostureUpdateResponseInputCrowdstrikeInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), lastSeen: S.optional(S.NullOr(S.String).pipe(T.Body("last_seen"))), operator: S.optional( S.NullOr(DevicesPostureUpdateResponseInputCrowdstrikeInputOperator), ), os: S.optional(S.NullOr(S.String)), overall: S.optional(S.NullOr(S.String)), sensorConfig: S.optional( S.NullOr(S.String).pipe(T.Body("sensor_config")), ), state: S.optional( S.NullOr(DevicesPostureUpdateResponseInputCrowdstrikeInputState), ), version: S.optional(S.NullOr(S.String)), versionOperator: S.optional( S.NullOr( DevicesPostureUpdateResponseInputCrowdstrikeInputVersionOperator, ), ), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputCrowdstrikeInput", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputIntuneInputComplianceStatus = | "compliant" | "noncompliant" | "unknown" | "notapplicable" | "ingraceperiod" | "error"; export const DevicesPostureUpdateResponseInputIntuneInputComplianceStatus = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseInputIntuneInput { /** Compliance Status. */ complianceStatus: DevicesPostureUpdateResponseInputIntuneInputComplianceStatus; /** Posture Integration ID. */ connectionId: string; } export const DevicesPostureUpdateResponseInputIntuneInput = /*@__PURE__*/ S.suspend(() => S.Struct({ complianceStatus: DevicesPostureUpdateResponseInputIntuneInputComplianceStatus.pipe( T.Body("compliance_status"), ), connectionId: S.String.pipe(T.Body("connection_id")), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputIntuneInput", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputKolideInputAuthStateItem = | "Good" | "Notified" | "Will Block" | "Blocked"; export const DevicesPostureUpdateResponseInputKolideInputAuthStateItem = /*@__PURE__*/ S.String; export type DevicesPostureUpdateResponseInputKolideInputAuthStateList = Array; export const DevicesPostureUpdateResponseInputKolideInputAuthStateList = /*@__PURE__*/ S.Array( DevicesPostureUpdateResponseInputKolideInputAuthStateItem, ) as any as S.Schema; export type DevicesPostureUpdateResponseInputKolideInputCountOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateResponseInputKolideInputCountOperator = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseInputKolideInput { /** Posture Integration ID. */ connectionId: string; /** The set of Kolide device authentication states that pass the posture check. Device must match one of the specified states. */ authState?: DevicesPostureUpdateResponseInputKolideInputAuthStateList | null; /** Count Operator. */ countOperator?: DevicesPostureUpdateResponseInputKolideInputCountOperator | null; /** The Number of Issues. */ issueCount?: string | null; } export const DevicesPostureUpdateResponseInputKolideInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), authState: S.optional( S.NullOr( DevicesPostureUpdateResponseInputKolideInputAuthStateList, ).pipe(T.Body("auth_state")), ), countOperator: S.optional( S.NullOr(DevicesPostureUpdateResponseInputKolideInputCountOperator), ), issueCount: S.optional(S.NullOr(S.String).pipe(T.Body("issue_count"))), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputKolideInput", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputTaniumInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateResponseInputTaniumInputOperator = /*@__PURE__*/ S.String; export type DevicesPostureUpdateResponseInputTaniumInputRiskLevel = | "low" | "medium" | "high" | "critical"; export const DevicesPostureUpdateResponseInputTaniumInputRiskLevel = /*@__PURE__*/ S.String; export type DevicesPostureUpdateResponseInputTaniumInputScoreOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateResponseInputTaniumInputScoreOperator = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseInputTaniumInput { /** Posture Integration ID. */ connectionId: string; /** For more details on eid last seen, refer to the Tanium documentation. */ eidLastSeen?: string | null; /** Operator to evaluate risk_level or eid_last_seen. */ operator?: DevicesPostureUpdateResponseInputTaniumInputOperator | null; /** For more details on risk level, refer to the Tanium documentation. */ riskLevel?: DevicesPostureUpdateResponseInputTaniumInputRiskLevel | null; /** Score Operator. */ scoreOperator?: DevicesPostureUpdateResponseInputTaniumInputScoreOperator | null; /** For more details on total score, refer to the Tanium documentation. */ totalScore?: number | null; } export const DevicesPostureUpdateResponseInputTaniumInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), eidLastSeen: S.optional(S.NullOr(S.String).pipe(T.Body("eid_last_seen"))), operator: S.optional( S.NullOr(DevicesPostureUpdateResponseInputTaniumInputOperator), ), riskLevel: S.optional( S.NullOr(DevicesPostureUpdateResponseInputTaniumInputRiskLevel).pipe( T.Body("risk_level"), ), ), scoreOperator: S.optional( S.NullOr(DevicesPostureUpdateResponseInputTaniumInputScoreOperator), ), totalScore: S.optional(S.NullOr(S.Number).pipe(T.Body("total_score"))), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputTaniumInput", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputSentineloneS2sInputNetworkStatus = | "connected" | "disconnected" | "disconnecting" | "connecting"; export const DevicesPostureUpdateResponseInputSentineloneS2sInputNetworkStatus = /*@__PURE__*/ S.String; export type DevicesPostureUpdateResponseInputSentineloneS2sInputOperationalState = | "na" | "partially_disabled" | "auto_fully_disabled" | "fully_disabled" | "auto_partially_disabled" | "disabled_error" | "db_corruption"; export const DevicesPostureUpdateResponseInputSentineloneS2sInputOperationalState = /*@__PURE__*/ S.String; export type DevicesPostureUpdateResponseInputSentineloneS2sInputOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateResponseInputSentineloneS2sInputOperator = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseInputSentineloneS2sInput { /** Posture Integration ID. */ connectionId: string; /** The Number of active threats. */ activeThreats?: number | null; /** Whether device is infected. */ infected?: boolean | null; /** Whether device is active. */ isActive?: boolean | null; /** Network status of device. */ networkStatus?: DevicesPostureUpdateResponseInputSentineloneS2sInputNetworkStatus | null; /** Agent operational state. */ operationalState?: DevicesPostureUpdateResponseInputSentineloneS2sInputOperationalState | null; /** Operator. */ operator?: DevicesPostureUpdateResponseInputSentineloneS2sInputOperator | null; } export const DevicesPostureUpdateResponseInputSentineloneS2sInput = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), activeThreats: S.optional( S.NullOr(S.Number).pipe(T.Body("active_threats")), ), infected: S.optional(S.NullOr(S.Boolean)), isActive: S.optional(S.NullOr(S.Boolean).pipe(T.Body("is_active"))), networkStatus: S.optional( S.NullOr( DevicesPostureUpdateResponseInputSentineloneS2sInputNetworkStatus, ).pipe(T.Body("network_status")), ), operationalState: S.optional( S.NullOr( DevicesPostureUpdateResponseInputSentineloneS2sInputOperationalState, ).pipe(T.Body("operational_state")), ), operator: S.optional( S.NullOr(DevicesPostureUpdateResponseInputSentineloneS2sInputOperator), ), }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputSentineloneS2sInput", }) as any as S.Schema; export type DevicesPostureUpdateResponseInputTeamsDevicesCustomS2sInputRequestOperator = | "<" | "<=" | ">" | ">=" | "=="; export const DevicesPostureUpdateResponseInputTeamsDevicesCustomS2sInputRequestOperator = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseInputTeamsDevicesCustomS2sInputRequest { /** Posture Integration ID. */ connectionId: string; /** Operator. */ operator: DevicesPostureUpdateResponseInputTeamsDevicesCustomS2sInputRequestOperator; /** A value between 0-100 assigned to devices set by the 3rd party posture provider. */ score: number; } export const DevicesPostureUpdateResponseInputTeamsDevicesCustomS2sInputRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ connectionId: S.String.pipe(T.Body("connection_id")), operator: DevicesPostureUpdateResponseInputTeamsDevicesCustomS2sInputRequestOperator, score: S.Number, }), ).annotate({ identifier: "DevicesPostureUpdateResponseInputTeamsDevicesCustomS2sInputRequest", }) as any as S.Schema; export type DevicesPostureUpdateResponseInput = | DevicesPostureUpdateResponseInputFileInput | DevicesPostureUpdateResponseInputUniqueClientIDInput | DevicesPostureUpdateResponseInputDomainJoinedInput | DevicesPostureUpdateResponseInputOSVersionInput | DevicesPostureUpdateResponseInputFirewallInput | DevicesPostureUpdateResponseInputSentineloneInput | DevicesPostureUpdateResponseInputTeamsDevicesCarbonblackInputRequest | DevicesPostureCreateRequestInputTeamsDevicesAccessSerialNumberListInputRequest | DevicesPostureUpdateResponseInputDiskEncryptionInput | DevicesPostureUpdateResponseInputTeamsDevicesApplicationInputRequest | DevicesPostureCreateRequestInputClientCertificateInput | DevicesPostureUpdateResponseInputTeamsDevicesClientCertificateV2InputRequest | DevicesPostureCreateResponseInputTeamsDevicesAntivirusInputRequest | DevicesPostureUpdateResponseInputWorkspaceOneInput | DevicesPostureUpdateResponseInputCrowdstrikeInput | DevicesPostureUpdateResponseInputIntuneInput | DevicesPostureUpdateResponseInputKolideInput | DevicesPostureUpdateResponseInputTaniumInput | DevicesPostureUpdateResponseInputSentineloneS2sInput | DevicesPostureUpdateResponseInputTeamsDevicesCustomS2sInputRequest; export const DevicesPostureUpdateResponseInput = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["operatingSystem", "path", "exists", "sha256", "thumbprint"], ["id", "operatingSystem"], ["operatingSystem", "domain"], [ "operatingSystem", "operator", "version", "osDistroName", "osDistroRevision", "osVersionExtra", ], ["enabled", "operatingSystem"], ["operatingSystem", "path", "sha256", "thumbprint"], ["operatingSystem", "path", "sha256", "thumbprint"], ["id"], ["checkDisks", "requireAll"], ["operatingSystem", "path", "sha256", "thumbprint"], ["certificateId", "cn"], [ "certificateId", "checkPrivateKey", "operatingSystem", "cn", "extendedKeyUsage", "locations", "subjectAlternativeNames", ], ["updateWindowDays"], ["complianceStatus", "connectionId"], [ "connectionId", "lastSeen", "operator", "os", "overall", "sensorConfig", "state", "version", "versionOperator", ], ["complianceStatus", "connectionId"], ["connectionId", "authState", "countOperator", "issueCount"], [ "connectionId", "eidLastSeen", "operator", "riskLevel", "scoreOperator", "totalScore", ], [ "connectionId", "activeThreats", "infected", "isActive", "networkStatus", "operationalState", "operator", ], ["connectionId", "operator", "score"], ]), ); export type DevicesPostureUpdateResponseMatchItemPlatform = | "windows" | "mac" | "linux" | "android" | "ios" | "chromeos"; export const DevicesPostureUpdateResponseMatchItemPlatform = /*@__PURE__*/ S.String; export interface DevicesPostureUpdateResponseMatchItem { platform?: DevicesPostureUpdateResponseMatchItemPlatform | null; } export const DevicesPostureUpdateResponseMatchItem = /*@__PURE__*/ S.suspend( () => S.Struct({ platform: S.optional( S.NullOr(DevicesPostureUpdateResponseMatchItemPlatform), ), }), ).annotate({ identifier: "DevicesPostureUpdateResponseMatchItem", }) as any as S.Schema; export type DevicesPostureUpdateResponseMatchList = Array; export const DevicesPostureUpdateResponseMatchList = /*@__PURE__*/ S.Array( DevicesPostureUpdateResponseMatchItem, ) as any as S.Schema; export type DevicesPostureUpdateResponseType = | "file" | "application" | "tanium" | "gateway" | "warp" | "disk_encryption" | "serial_number" | "sentinelone" | "carbonblack" | "firewall" | "os_version" | "domain_joined" | "client_certificate" | "client_certificate_v2" | "antivirus" | "unique_client_id" | "kolide" | "tanium_s2s" | "crowdstrike_s2s" | "intune" | "workspace_one" | "sentinelone_s2s" | "custom_s2s"; export const DevicesPostureUpdateResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateDevicePostureResponse { /** API UUID. */ id?: string | null; /** The description of the device posture rule. */ description?: string | null; /** Sets the expiration time for a posture check result. If empty, the result remains valid until it is overwritten by new data from the WARP client. */ expiration?: string | null; /** The value to be checked against. */ input?: DevicesPostureUpdateResponseInput | null; /** The conditions that the client must match to run the rule. */ match?: DevicesPostureUpdateResponseMatchList | null; /** The name of the device posture rule. */ name?: string | null; /** Polling frequency for the WARP client posture check. Default: `5m` (poll every five minutes). Minimum: `1m`. */ schedule?: string | null; /** The type of device posture rule. */ type?: DevicesPostureUpdateResponseType | null; } export const UpdateDevicePostureResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), description: S.optional(S.NullOr(S.String)), expiration: S.optional(S.NullOr(S.String)), input: S.optional(S.NullOr(DevicesPostureUpdateResponseInput)), match: S.optional(S.NullOr(DevicesPostureUpdateResponseMatchList)), name: S.optional(S.NullOr(S.String)), schedule: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(DevicesPostureUpdateResponseType)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDevicePostureResponse", }) as any as S.Schema; export interface UpdateDlpCustomPromptTopicRequest { accountId: string; entryId: string; enabled: boolean; name: string; topic: string; description?: string; } export const UpdateDlpCustomPromptTopicRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), entryId: S.String.pipe(T.Label("entry_id")), enabled: S.Boolean, name: S.String, topic: S.String, description: S.optional(S.String), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/custom_prompt_topics/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpCustomPromptTopicRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateDlpCustomPromptTopicResponse { id: string; createdAt: string; enabled: boolean; name: string; topic: string; updatedAt: string; description?: string | null; profileId?: string | null; } export const UpdateDlpCustomPromptTopicResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, topic: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpCustomPromptTopicResponse", }) as any as S.Schema; export type DlpDataClassesUpdateRequestDataTagsList = Array; export const DlpDataClassesUpdateRequestDataTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpDataClassesUpdateRequestSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export const DlpDataClassesUpdateRequestSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export type DlpDataClassesUpdateRequestSensitivityLevelsList = Array; export const DlpDataClassesUpdateRequestSensitivityLevelsList = /*@__PURE__*/ S.Array( DlpDataClassesCreateRequestSensitivityLevelsItem, ) as any as S.Schema; export interface UpdateDlpDataClassRequest { accountId: string; dataClassId: string; dataTags?: DlpDataClassesUpdateRequestDataTagsList; description?: string; expression?: string; name?: string; sensitivityLevels?: DlpDataClassesUpdateRequestSensitivityLevelsList; } export const UpdateDlpDataClassRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), dataClassId: S.String.pipe(T.Label("data_class_id")), dataTags: S.optional( DlpDataClassesUpdateRequestDataTagsList.pipe(T.Body("data_tags")), ), description: S.optional(S.String), expression: S.optional(S.String), name: S.optional(S.String), sensitivityLevels: S.optional( DlpDataClassesUpdateRequestSensitivityLevelsList.pipe( T.Body("sensitivity_levels"), ), ), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/data_classes/{data_class_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpDataClassRequest", }) as any as S.Schema; export type DlpDataClassesUpdateResponseDataTagsList = Array; export const DlpDataClassesUpdateResponseDataTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpDataClassesUpdateResponseSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export const DlpDataClassesUpdateResponseSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export type DlpDataClassesUpdateResponseSensitivityLevelsList = Array; export const DlpDataClassesUpdateResponseSensitivityLevelsList = /*@__PURE__*/ S.Array( DlpDataClassesCreateRequestSensitivityLevelsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateDlpDataClassResponse { id: string; createdAt: string; dataTags: DlpDataClassesUpdateResponseDataTagsList; expression: string; name: string; sensitivityLevels: DlpDataClassesUpdateResponseSensitivityLevelsList; updatedAt: string; description?: string | null; } export const UpdateDlpDataClassResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), dataTags: DlpDataClassesUpdateResponseDataTagsList.pipe( T.Body("data_tags"), ), expression: S.String, name: S.String, sensitivityLevels: DlpDataClassesUpdateResponseSensitivityLevelsList.pipe( T.Body("sensitivity_levels"), ), updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpDataClassResponse", }) as any as S.Schema; export interface UpdateDlpDatasetRequest { accountId: string; datasetId: string; /** Determines if the words should be matched in a case-sensitive manner. */ caseSensitive?: boolean; /** The description of the dataset. */ description?: string; /** The name of the dataset, must be unique. */ name?: string; } export const UpdateDlpDatasetRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), datasetId: S.String.pipe(T.Label("dataset_id")), caseSensitive: S.optional(S.Boolean.pipe(T.Body("case_sensitive"))), description: S.optional(S.String), name: S.optional(S.String), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/datasets/{dataset_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpDatasetRequest", }) as any as S.Schema; export type DlpDatasetsUpdateResponseColumnsItemUploadStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsUpdateResponseColumnsItemUploadStatus = /*@__PURE__*/ S.String; export interface DlpDatasetsUpdateResponseColumnsItem { entryId: string; headerName: string; numCells: number; uploadStatus: DlpDatasetsUpdateResponseColumnsItemUploadStatus; } export const DlpDatasetsUpdateResponseColumnsItem = /*@__PURE__*/ S.suspend( () => S.Struct({ entryId: S.String.pipe(T.Body("entry_id")), headerName: S.String.pipe(T.Body("header_name")), numCells: S.Number.pipe(T.Body("num_cells")), uploadStatus: DlpDatasetsUpdateResponseColumnsItemUploadStatus.pipe( T.Body("upload_status"), ), }), ).annotate({ identifier: "DlpDatasetsUpdateResponseColumnsItem", }) as any as S.Schema; export type DlpDatasetsUpdateResponseColumnsList = Array; export const DlpDatasetsUpdateResponseColumnsList = /*@__PURE__*/ S.Array( DlpDatasetsUpdateResponseColumnsItem, ) as any as S.Schema; export type DlpDatasetsUpdateResponseStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsUpdateResponseStatus = /*@__PURE__*/ S.String; export type DlpDatasetsUpdateResponseUploadsItemStatus = | "empty" | "uploading" | "pending" | "processing" | "failed" | "complete"; export const DlpDatasetsUpdateResponseUploadsItemStatus = /*@__PURE__*/ S.String; export interface DlpDatasetsUpdateResponseUploadsItem { numCells: number; status: DlpDatasetsUpdateResponseUploadsItemStatus; version: number; } export const DlpDatasetsUpdateResponseUploadsItem = /*@__PURE__*/ S.suspend( () => S.Struct({ numCells: S.Number.pipe(T.Body("num_cells")), status: DlpDatasetsUpdateResponseUploadsItemStatus, version: S.Number, }), ).annotate({ identifier: "DlpDatasetsUpdateResponseUploadsItem", }) as any as S.Schema; export type DlpDatasetsUpdateResponseUploadsList = Array; export const DlpDatasetsUpdateResponseUploadsList = /*@__PURE__*/ S.Array( DlpDatasetsUpdateResponseUploadsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateDlpDatasetResponse { id: string; columns: DlpDatasetsUpdateResponseColumnsList; createdAt: string; encodingVersion: number; name: string; numCells: number; secret: boolean; status: DlpDatasetsUpdateResponseStatus; /** Stores when the dataset was last updated. */ updatedAt: string; uploads: DlpDatasetsUpdateResponseUploadsList; caseSensitive?: boolean | null; /** The description of the dataset. */ description?: string | null; } export const UpdateDlpDatasetResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, columns: DlpDatasetsUpdateResponseColumnsList, createdAt: S.String.pipe(T.Body("created_at")), encodingVersion: S.Number.pipe(T.Body("encoding_version")), name: S.String, numCells: S.Number.pipe(T.Body("num_cells")), secret: S.Boolean, status: DlpDatasetsUpdateResponseStatus, updatedAt: S.String.pipe(T.Body("updated_at")), uploads: DlpDatasetsUpdateResponseUploadsList, caseSensitive: S.optional( S.NullOr(S.Boolean).pipe(T.Body("case_sensitive")), ), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpDatasetResponse", }) as any as S.Schema; export interface DlpDataTagCategoriesUpdateRequestTagsItem { /** If `None` (omitted), a new tag will be created. Otherwise, an existing tag will be */ id?: string; description?: string; name?: string; } export const DlpDataTagCategoriesUpdateRequestTagsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.String), description: S.optional(S.String), name: S.optional(S.String), }), ).annotate({ identifier: "DlpDataTagCategoriesUpdateRequestTagsItem", }) as any as S.Schema; export type DlpDataTagCategoriesUpdateRequestTagsList = Array; export const DlpDataTagCategoriesUpdateRequestTagsList = /*@__PURE__*/ S.Array( DlpDataTagCategoriesUpdateRequestTagsItem, ) as any as S.Schema; export interface UpdateDlpDataTagCategoryRequest { accountId: string; categoryId: string; description?: string; name?: string; /** The desired final state of tags. */ tags?: DlpDataTagCategoriesUpdateRequestTagsList; } export const UpdateDlpDataTagCategoryRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), categoryId: S.String.pipe(T.Label("category_id")), description: S.optional(S.String), name: S.optional(S.String), tags: S.optional(DlpDataTagCategoriesUpdateRequestTagsList), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/data_tag_categories/{category_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpDataTagCategoryRequest", }) as any as S.Schema; export type DlpDataTagCategoriesUpdateResponseTagsItem = DlpDataTagCategoriesCreateResponseTagsItem; export const DlpDataTagCategoriesUpdateResponseTagsItem = DlpDataTagCategoriesCreateResponseTagsItem; export type DlpDataTagCategoriesUpdateResponseTagsList = Array; export const DlpDataTagCategoriesUpdateResponseTagsList = /*@__PURE__*/ S.Array( DlpDataTagCategoriesCreateResponseTagsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateDlpDataTagCategoryResponse { id: string; createdAt: string; name: string; tags: DlpDataTagCategoriesUpdateResponseTagsList; updatedAt: string; description?: string | null; templateId?: string | null; } export const UpdateDlpDataTagCategoryResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), name: S.String, tags: DlpDataTagCategoriesUpdateResponseTagsList, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), templateId: S.optional(S.NullOr(S.String).pipe(T.Body("template_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpDataTagCategoryResponse", }) as any as S.Schema; export interface UpdateDlpDataTagCategoryDataTagRequest { accountId: string; categoryId: string; tagId: string; description?: string; name?: string; } export const UpdateDlpDataTagCategoryDataTagRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), categoryId: S.String.pipe(T.Label("category_id")), tagId: S.String.pipe(T.Label("tag_id")), description: S.optional(S.String), name: S.optional(S.String), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/data_tag_categories/{category_id}/data_tags/{tag_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpDataTagCategoryDataTagRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateDlpDataTagCategoryDataTagResponse { id: string; createdAt: string; name: string; updatedAt: string; description?: string | null; } export const UpdateDlpDataTagCategoryDataTagResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpDataTagCategoryDataTagResponse", }) as any as S.Schema; export type DlpEmailRulesUpdateRequestActionAction = "Block"; export const DlpEmailRulesUpdateRequestActionAction = /*@__PURE__*/ S.String; export interface DlpEmailRulesUpdateRequestAction { action: DlpEmailRulesUpdateRequestActionAction | (string & {}); message?: string; } export const DlpEmailRulesUpdateRequestAction = /*@__PURE__*/ S.suspend(() => S.Struct({ action: DlpEmailRulesUpdateRequestActionAction, message: S.optional(S.String), }), ).annotate({ identifier: "DlpEmailRulesUpdateRequestAction", }) as any as S.Schema; export type DlpEmailRulesUpdateRequestConditionsItemOperator = | "InList" | "NotInList" | "MatchRegex" | "NotMatchRegex"; export const DlpEmailRulesUpdateRequestConditionsItemOperator = /*@__PURE__*/ S.String; export type DlpEmailRulesUpdateRequestConditionsItemSelector = | "Recipients" | "Sender" | "DLPProfiles"; export const DlpEmailRulesUpdateRequestConditionsItemSelector = /*@__PURE__*/ S.String; export type DlpEmailRulesUpdateRequestConditionsItemValueCase0List = Array; export const DlpEmailRulesUpdateRequestConditionsItemValueCase0List = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpEmailRulesUpdateRequestConditionsItemValue = | string | DlpEmailRulesUpdateRequestConditionsItemValueCase0List; export const DlpEmailRulesUpdateRequestConditionsItemValue = /*@__PURE__*/ S.Unknown.pipe(T.UnionCases([[], []])); export interface DlpEmailRulesUpdateRequestConditionsItem { operator: DlpEmailRulesUpdateRequestConditionsItemOperator | (string & {}); selector: DlpEmailRulesUpdateRequestConditionsItemSelector | (string & {}); value: DlpEmailRulesUpdateRequestConditionsItemValue; } export const DlpEmailRulesUpdateRequestConditionsItem = /*@__PURE__*/ S.suspend( () => S.Struct({ operator: DlpEmailRulesUpdateRequestConditionsItemOperator, selector: DlpEmailRulesUpdateRequestConditionsItemSelector, value: DlpEmailRulesUpdateRequestConditionsItemValue, }), ).annotate({ identifier: "DlpEmailRulesUpdateRequestConditionsItem", }) as any as S.Schema; export type DlpEmailRulesUpdateRequestConditionsList = Array; export const DlpEmailRulesUpdateRequestConditionsList = /*@__PURE__*/ S.Array( DlpEmailRulesUpdateRequestConditionsItem, ) as any as S.Schema; export interface UpdateDlpEmailRuleRequest { accountId: string; ruleId: string; action: DlpEmailRulesUpdateRequestAction; /** Triggered if all conditions match. */ conditions: DlpEmailRulesUpdateRequestConditionsList; enabled: boolean; name: string; description?: string; } export const UpdateDlpEmailRuleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ruleId: S.String.pipe(T.Label("rule_id")), action: DlpEmailRulesUpdateRequestAction, conditions: DlpEmailRulesUpdateRequestConditionsList, enabled: S.Boolean, name: S.String, description: S.optional(S.String), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/email/rules/{rule_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpEmailRuleRequest", }) as any as S.Schema; export type DlpEmailRulesUpdateResponseActionAction = "Block"; export const DlpEmailRulesUpdateResponseActionAction = /*@__PURE__*/ S.String; export interface DlpEmailRulesUpdateResponseAction { action: DlpEmailRulesUpdateResponseActionAction; message?: string | null; } export const DlpEmailRulesUpdateResponseAction = /*@__PURE__*/ S.suspend(() => S.Struct({ action: DlpEmailRulesUpdateResponseActionAction, message: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEmailRulesUpdateResponseAction", }) as any as S.Schema; export type DlpEmailRulesUpdateResponseConditionsItemOperator = | "InList" | "NotInList" | "MatchRegex" | "NotMatchRegex"; export const DlpEmailRulesUpdateResponseConditionsItemOperator = /*@__PURE__*/ S.String; export type DlpEmailRulesUpdateResponseConditionsItemSelector = | "Recipients" | "Sender" | "DLPProfiles"; export const DlpEmailRulesUpdateResponseConditionsItemSelector = /*@__PURE__*/ S.String; export type DlpEmailRulesUpdateResponseConditionsItemValueCase0List = Array; export const DlpEmailRulesUpdateResponseConditionsItemValueCase0List = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpEmailRulesUpdateResponseConditionsItemValue = | string | DlpEmailRulesUpdateResponseConditionsItemValueCase0List; export const DlpEmailRulesUpdateResponseConditionsItemValue = /*@__PURE__*/ S.Unknown.pipe(T.UnionCases([[], []])); export interface DlpEmailRulesUpdateResponseConditionsItem { operator: DlpEmailRulesUpdateResponseConditionsItemOperator; selector: DlpEmailRulesUpdateResponseConditionsItemSelector; value: DlpEmailRulesUpdateResponseConditionsItemValue; } export const DlpEmailRulesUpdateResponseConditionsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ operator: DlpEmailRulesUpdateResponseConditionsItemOperator, selector: DlpEmailRulesUpdateResponseConditionsItemSelector, value: DlpEmailRulesUpdateResponseConditionsItemValue, }), ).annotate({ identifier: "DlpEmailRulesUpdateResponseConditionsItem", }) as any as S.Schema; export type DlpEmailRulesUpdateResponseConditionsList = Array; export const DlpEmailRulesUpdateResponseConditionsList = /*@__PURE__*/ S.Array( DlpEmailRulesUpdateResponseConditionsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateDlpEmailRuleResponse { action: DlpEmailRulesUpdateResponseAction; /** Triggered if all conditions match. */ conditions: DlpEmailRulesUpdateResponseConditionsList; createdAt: string; enabled: boolean; name: string; priority: number; ruleId: string; updatedAt: string; description?: string | null; } export const UpdateDlpEmailRuleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ action: DlpEmailRulesUpdateResponseAction, conditions: DlpEmailRulesUpdateResponseConditionsList, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, priority: S.Number, ruleId: S.String.pipe(T.Body("rule_id")), updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpEmailRuleResponse", }) as any as S.Schema; export type DlpEntriesUpdateRequestPatternValidation = "luhn"; export const DlpEntriesUpdateRequestPatternValidation = /*@__PURE__*/ S.String; export interface DlpEntriesUpdateRequestPattern { regex: string; validation?: DlpEntriesUpdateRequestPatternValidation | (string & {}); } export const DlpEntriesUpdateRequestPattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional(DlpEntriesUpdateRequestPatternValidation), }), ).annotate({ identifier: "DlpEntriesUpdateRequestPattern", }) as any as S.Schema; export type DlpEntriesUpdateRequestType = | "custom" | "predefined" | "integration"; export const DlpEntriesUpdateRequestType = /*@__PURE__*/ S.String; export interface UpdateDlpEntryRequest { accountId: string; entryId: string; name?: string; pattern?: DlpEntriesUpdateRequestPattern; type: DlpEntriesUpdateRequestType | (string & {}); description?: string; enabled?: boolean; } export const UpdateDlpEntryRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), entryId: S.String.pipe(T.Label("entry_id")), name: S.optional(S.String), pattern: S.optional(DlpEntriesUpdateRequestPattern), type: DlpEntriesUpdateRequestType, description: S.optional(S.String), enabled: S.optional(S.Boolean), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/entries/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpEntryRequest", }) as any as S.Schema; export type DlpEntriesUpdateResultCustomEntryPatternValidation = "luhn"; export const DlpEntriesUpdateResultCustomEntryPatternValidation = /*@__PURE__*/ S.String; export interface DlpEntriesUpdateResultCustomEntryPattern { regex: string; validation?: DlpEntriesUpdateResultCustomEntryPatternValidation | null; } export const DlpEntriesUpdateResultCustomEntryPattern = /*@__PURE__*/ S.suspend( () => S.Struct({ regex: S.String, validation: S.optional( S.NullOr(DlpEntriesUpdateResultCustomEntryPatternValidation), ), }), ).annotate({ identifier: "DlpEntriesUpdateResultCustomEntryPattern", }) as any as S.Schema; export type DlpEntriesUpdateResultCustomEntryType = "custom"; export const DlpEntriesUpdateResultCustomEntryType = /*@__PURE__*/ S.String; export interface DlpEntriesUpdateResultCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpEntriesUpdateResultCustomEntryPattern; type: DlpEntriesUpdateResultCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpEntriesUpdateResultCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpEntriesUpdateResultCustomEntryPattern, type: DlpEntriesUpdateResultCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpEntriesUpdateResultCustomEntry", }) as any as S.Schema; export type DlpEntriesUpdateResultCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpEntriesUpdateResultCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpEntriesUpdateResultCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpEntriesUpdateResultCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpEntriesUpdateResultCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpEntriesUpdateResultCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEntriesUpdateResultCustomPromptTopicEntry", }) as any as S.Schema; export type DlpEntriesUpdateResultPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpEntriesUpdateResultPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpEntriesUpdateResultPredefinedEntryType = "predefined"; export const DlpEntriesUpdateResultPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpEntriesUpdateResultPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpEntriesUpdateResultPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpEntriesUpdateResultPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpEntriesUpdateResultPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpEntriesUpdateResultPredefinedEntryVariantCase0 { topicType: DlpEntriesUpdateResultPredefinedEntryVariantCase0TopicType; type: DlpEntriesUpdateResultPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpEntriesUpdateResultPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpEntriesUpdateResultPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpEntriesUpdateResultPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEntriesUpdateResultPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpEntriesUpdateResultPredefinedEntryVariantCase1Type = "General"; export const DlpEntriesUpdateResultPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpEntriesUpdateResultPredefinedEntryVariantCase1 { type: DlpEntriesUpdateResultPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpEntriesUpdateResultPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpEntriesUpdateResultPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEntriesUpdateResultPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpEntriesUpdateResultPredefinedEntryVariant = | DlpEntriesUpdateResultPredefinedEntryVariantCase0 | DlpEntriesUpdateResultPredefinedEntryVariantCase1; export const DlpEntriesUpdateResultPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpEntriesUpdateResultPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpEntriesUpdateResultPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpEntriesUpdateResultPredefinedEntryVariant | null; } export const DlpEntriesUpdateResultPredefinedEntry = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpEntriesUpdateResultPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr(DlpEntriesUpdateResultPredefinedEntryVariant), ), }), ).annotate({ identifier: "DlpEntriesUpdateResultPredefinedEntry", }) as any as S.Schema; export type DlpEntriesUpdateResultIntegrationEntryType = "integration"; export const DlpEntriesUpdateResultIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpEntriesUpdateResultIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpEntriesUpdateResultIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpEntriesUpdateResultIntegrationEntry = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpEntriesUpdateResultIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpEntriesUpdateResultIntegrationEntry", }) as any as S.Schema; export type DlpEntriesUpdateResultExactDataEntryType = "exact_data"; export const DlpEntriesUpdateResultExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpEntriesUpdateResultExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpEntriesUpdateResultExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpEntriesUpdateResultExactDataEntry = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpEntriesUpdateResultExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEntriesUpdateResultExactDataEntry", }) as any as S.Schema; export type DlpEntriesUpdateResultDocumentFingerprintEntryType = "document_fingerprint"; export const DlpEntriesUpdateResultDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpEntriesUpdateResultDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpEntriesUpdateResultDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpEntriesUpdateResultDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpEntriesUpdateResultDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEntriesUpdateResultDocumentFingerprintEntry", }) as any as S.Schema; export type DlpEntriesUpdateResultWordListEntryType = "word_list"; export const DlpEntriesUpdateResultWordListEntryType = /*@__PURE__*/ S.String; export interface DlpEntriesUpdateResultWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpEntriesUpdateResultWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpEntriesUpdateResultWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpEntriesUpdateResultWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpEntriesUpdateResultWordListEntry", }) as any as S.Schema; export type DlpEntriesUpdateResult = | DlpEntriesUpdateResultCustomEntry | DlpEntriesUpdateResultCustomPromptTopicEntry | DlpEntriesUpdateResultPredefinedEntry | DlpEntriesUpdateResultIntegrationEntry | DlpEntriesUpdateResultExactDataEntry | DlpEntriesUpdateResultDocumentFingerprintEntry | DlpEntriesUpdateResultWordListEntry; export const DlpEntriesUpdateResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "description"], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "description"], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type UpdateDlpEntryResponse = DlpEntriesUpdateResult; export const UpdateDlpEntryResponse = /*@__PURE__*/ S.suspend(() => DlpEntriesUpdateResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "UpdateDlpEntryResponse", }) as any as S.Schema; export type DlpEntriesCustomUpdateRequestPatternValidation = "luhn"; export const DlpEntriesCustomUpdateRequestPatternValidation = /*@__PURE__*/ S.String; export interface DlpEntriesCustomUpdateRequestPattern { regex: string; validation?: DlpEntriesCustomUpdateRequestPatternValidation | (string & {}); } export const DlpEntriesCustomUpdateRequestPattern = /*@__PURE__*/ S.suspend( () => S.Struct({ regex: S.String, validation: S.optional(DlpEntriesCustomUpdateRequestPatternValidation), }), ).annotate({ identifier: "DlpEntriesCustomUpdateRequestPattern", }) as any as S.Schema; export interface UpdateDlpEntryCustomRequest { accountId: string; entryId: string; enabled: boolean; name: string; pattern: DlpEntriesCustomUpdateRequestPattern; description?: string; } export const UpdateDlpEntryCustomRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), entryId: S.String.pipe(T.Label("entry_id")), enabled: S.Boolean, name: S.String, pattern: DlpEntriesCustomUpdateRequestPattern, description: S.optional(S.String), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/entries/custom/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpEntryCustomRequest", }) as any as S.Schema; export type DlpEntriesCustomUpdateResponsePatternValidation = "luhn"; export const DlpEntriesCustomUpdateResponsePatternValidation = /*@__PURE__*/ S.String; export interface DlpEntriesCustomUpdateResponsePattern { regex: string; validation?: DlpEntriesCustomUpdateResponsePatternValidation | null; } export const DlpEntriesCustomUpdateResponsePattern = /*@__PURE__*/ S.suspend( () => S.Struct({ regex: S.String, validation: S.optional( S.NullOr(DlpEntriesCustomUpdateResponsePatternValidation), ), }), ).annotate({ identifier: "DlpEntriesCustomUpdateResponsePattern", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateDlpEntryCustomResponse { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpEntriesCustomUpdateResponsePattern; updatedAt: string; description?: string | null; profileId?: string | null; } export const UpdateDlpEntryCustomResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpEntriesCustomUpdateResponsePattern, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpEntryCustomResponse", }) as any as S.Schema; export interface UpdateDlpEntryIntegrationRequest { accountId: string; entryId: string; enabled: boolean; } export const UpdateDlpEntryIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), entryId: S.String.pipe(T.Label("entry_id")), enabled: S.Boolean, }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/entries/integration/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpEntryIntegrationRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateDlpEntryIntegrationResponse { id: string; createdAt: string; enabled: boolean; name: string; updatedAt: string; profileId?: string | null; } export const UpdateDlpEntryIntegrationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpEntryIntegrationResponse", }) as any as S.Schema; export interface UpdateDlpEntryPredefinedRequest { accountId: string; entryId: string; enabled: boolean; } export const UpdateDlpEntryPredefinedRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), entryId: S.String.pipe(T.Label("entry_id")), enabled: S.Boolean, }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/entries/predefined/{entry_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpEntryPredefinedRequest", }) as any as S.Schema; export type DlpEntriesPredefinedUpdateResponseConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpEntriesPredefinedUpdateResponseConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpEntriesPredefinedUpdateResponseVariantCase0TopicType = | "Intent" | "Content"; export const DlpEntriesPredefinedUpdateResponseVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpEntriesPredefinedUpdateResponseVariantCase0Type = "PromptTopic"; export const DlpEntriesPredefinedUpdateResponseVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpEntriesPredefinedUpdateResponseVariantCase0 { topicType: DlpEntriesPredefinedUpdateResponseVariantCase0TopicType; type: DlpEntriesPredefinedUpdateResponseVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpEntriesPredefinedUpdateResponseVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpEntriesPredefinedUpdateResponseVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpEntriesPredefinedUpdateResponseVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEntriesPredefinedUpdateResponseVariantCase0", }) as any as S.Schema; export type DlpEntriesPredefinedUpdateResponseVariantCase1Type = "General"; export const DlpEntriesPredefinedUpdateResponseVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpEntriesPredefinedUpdateResponseVariantCase1 { type: DlpEntriesPredefinedUpdateResponseVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpEntriesPredefinedUpdateResponseVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpEntriesPredefinedUpdateResponseVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpEntriesPredefinedUpdateResponseVariantCase1", }) as any as S.Schema; export type DlpEntriesPredefinedUpdateResponseVariant = | DlpEntriesPredefinedUpdateResponseVariantCase0 | DlpEntriesPredefinedUpdateResponseVariantCase1; export const DlpEntriesPredefinedUpdateResponseVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateDlpEntryPredefinedResponse { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpEntriesPredefinedUpdateResponseVariant | null; } export const UpdateDlpEntryPredefinedResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional(S.NullOr(DlpEntriesPredefinedUpdateResponseVariant)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpEntryPredefinedResponse", }) as any as S.Schema; export type DlpProfilesCustomUpdateRequestContextAwarenessSkip = DlpProfilesCustomCreateRequestContextAwarenessSkip; export const DlpProfilesCustomUpdateRequestContextAwarenessSkip = DlpProfilesCustomCreateRequestContextAwarenessSkip; export type DlpProfilesCustomUpdateRequestContextAwareness = DlpProfilesCustomCreateRequestContextAwareness; export const DlpProfilesCustomUpdateRequestContextAwareness = DlpProfilesCustomCreateRequestContextAwareness; export type DlpProfilesCustomUpdateRequestDataClassesList = Array; export const DlpProfilesCustomUpdateRequestDataClassesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesCustomUpdateRequestDataTagsList = Array; export const DlpProfilesCustomUpdateRequestDataTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntryWithIDPatternValidation = "luhn"; export const DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntryWithIDPatternValidation = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntryWithIDPattern { regex: string; validation?: | DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntryWithIDPatternValidation | (string & {}); } export const DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntryWithIDPattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntryWithIDPatternValidation, ), }), ).annotate({ identifier: "DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntryWithIDPattern", }) as any as S.Schema; export interface DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntryWithID { enabled: boolean; entryId: string; name: string; pattern: DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntryWithIDPattern; description?: string | null; } export const DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntryWithID = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, entryId: S.String.pipe(T.Body("entry_id")), name: S.String, pattern: DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntryWithIDPattern, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntryWithID", }) as any as S.Schema; export interface DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntry { enabled: boolean; name: string; pattern: DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntryWithIDPattern; description?: string | null; } export const DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntryWithIDPattern, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateRequestEntriesItem = | DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntryWithID | DlpProfilesCustomUpdateRequestEntriesItemDLPNewCustomEntry; export const DlpProfilesCustomUpdateRequestEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["enabled", "entryId", "name", "pattern", "description"], ["enabled", "name", "pattern", "description"], ]), ); export type DlpProfilesCustomUpdateRequestEntriesList = Array; export const DlpProfilesCustomUpdateRequestEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomUpdateRequestEntriesItem, ) as any as S.Schema; export type DlpProfilesCustomUpdateRequestSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export const DlpProfilesCustomUpdateRequestSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export type DlpProfilesCustomUpdateRequestSensitivityLevelsList = Array; export const DlpProfilesCustomUpdateRequestSensitivityLevelsList = /*@__PURE__*/ S.Array( DlpDataClassesCreateRequestSensitivityLevelsItem, ) as any as S.Schema; export type DlpProfilesCustomUpdateRequestSharedEntriesItem = DlpProfilesCustomCreateRequestSharedEntriesItem; export const DlpProfilesCustomUpdateRequestSharedEntriesItem = DlpProfilesCustomCreateRequestSharedEntriesItem; export type DlpProfilesCustomUpdateRequestSharedEntriesList = Array; export const DlpProfilesCustomUpdateRequestSharedEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomCreateRequestSharedEntriesItem, ) as any as S.Schema; export interface UpdateDlpProfileCustomRequest { accountId: string; profileId: string; name: string; aiContextEnabled?: boolean; allowedMatchCount?: number; confidenceThreshold?: string; /** Scan the context of predefined entries to only return matches surrounded by keywords. */ contextAwareness?: DlpProfilesCustomCreateRequestContextAwareness; /** Data class IDs to associate with the profile. If omitted, existing associations are unchanged. */ dataClasses?: DlpProfilesCustomUpdateRequestDataClassesList; /** Data tag IDs to associate with the profile. If omitted, existing associations are unchanged. */ dataTags?: DlpProfilesCustomUpdateRequestDataTagsList; /** The description of the profile. */ description?: string | null; /** Custom entries from this profile. */ entries?: DlpProfilesCustomUpdateRequestEntriesList; ocrEnabled?: boolean; /** Sensitivity levels to associate with the profile. If omitted, existing associations are unchanged. */ sensitivityLevels?: DlpProfilesCustomUpdateRequestSensitivityLevelsList; /** Other entries, e.g. predefined or integration. */ sharedEntries?: DlpProfilesCustomUpdateRequestSharedEntriesList; } export const UpdateDlpProfileCustomRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), profileId: S.String.pipe(T.Label("profile_id")), name: S.String, aiContextEnabled: S.optional(S.Boolean.pipe(T.Body("ai_context_enabled"))), allowedMatchCount: S.optional(S.Number.pipe(T.Body("allowed_match_count"))), confidenceThreshold: S.optional( S.String.pipe(T.Body("confidence_threshold")), ), contextAwareness: S.optional( DlpProfilesCustomCreateRequestContextAwareness.pipe( T.Body("context_awareness"), ), ), dataClasses: S.optional( DlpProfilesCustomUpdateRequestDataClassesList.pipe( T.Body("data_classes"), ), ), dataTags: S.optional( DlpProfilesCustomUpdateRequestDataTagsList.pipe(T.Body("data_tags")), ), description: S.optional(S.NullOr(S.String)), entries: S.optional(DlpProfilesCustomUpdateRequestEntriesList), ocrEnabled: S.optional(S.Boolean.pipe(T.Body("ocr_enabled"))), sensitivityLevels: S.optional( DlpProfilesCustomUpdateRequestSensitivityLevelsList.pipe( T.Body("sensitivity_levels"), ), ), sharedEntries: S.optional( DlpProfilesCustomUpdateRequestSharedEntriesList.pipe( T.Body("shared_entries"), ), ), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/profiles/custom/{profile_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpProfileCustomRequest", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileType = "custom"; export const DlpProfilesCustomUpdateResultCustomProfileType = /*@__PURE__*/ S.String; export type DlpProfilesCustomUpdateResultCustomProfileConfidenceThreshold = | "low" | "medium" | "high" | "very_high"; export const DlpProfilesCustomUpdateResultCustomProfileConfidenceThreshold = /*@__PURE__*/ S.String; export type DlpProfilesCustomUpdateResultCustomProfileContextAwarenessSkip = DlpProfilesCustomCreateRequestContextAwarenessSkip; export const DlpProfilesCustomUpdateResultCustomProfileContextAwarenessSkip = DlpProfilesCustomCreateRequestContextAwarenessSkip; export type DlpProfilesCustomUpdateResultCustomProfileContextAwareness = DlpProfilesCustomCreateRequestContextAwareness; export const DlpProfilesCustomUpdateResultCustomProfileContextAwareness = DlpProfilesCustomCreateRequestContextAwareness; export type DlpProfilesCustomUpdateResultCustomProfileDataClassesList = Array; export const DlpProfilesCustomUpdateResultCustomProfileDataClassesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileDataTagsList = Array; export const DlpProfilesCustomUpdateResultCustomProfileDataTagsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPatternValidation = "luhn"; export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPatternValidation = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPattern { regex: string; validation?: DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPatternValidation | null; } export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPattern = /*@__PURE__*/ S.suspend(() => S.Struct({ regex: S.String, validation: S.optional( S.NullOr( DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPatternValidation, ), ), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPattern", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryType = "custom"; export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariant = | DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase0 | DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileEntriesItemWordListEntryType = "word_list"; export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultCustomProfileEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileEntriesItem = | DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntry | DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomPromptTopicEntry | DlpProfilesCustomUpdateResultCustomProfileEntriesItemPredefinedEntry | DlpProfilesCustomUpdateResultCustomProfileEntriesItemIntegrationEntry | DlpProfilesCustomUpdateResultCustomProfileEntriesItemExactDataEntry | DlpProfilesCustomUpdateResultCustomProfileEntriesItemDocumentFingerprintEntry | DlpProfilesCustomUpdateResultCustomProfileEntriesItemWordListEntry; export const DlpProfilesCustomUpdateResultCustomProfileEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesCustomUpdateResultCustomProfileEntriesList = Array; export const DlpProfilesCustomUpdateResultCustomProfileEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomUpdateResultCustomProfileEntriesItem, ) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export const DlpProfilesCustomUpdateResultCustomProfileSensitivityLevelsItem = DlpDataClassesCreateRequestSensitivityLevelsItem; export type DlpProfilesCustomUpdateResultCustomProfileSensitivityLevelsList = Array; export const DlpProfilesCustomUpdateResultCustomProfileSensitivityLevelsList = /*@__PURE__*/ S.Array( DlpDataClassesCreateRequestSensitivityLevelsItem, ) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomEntryType = "custom"; export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariant = | DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase0 | DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemWordListEntryType = "word_list"; export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItem = | DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomEntry | DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemCustomPromptTopicEntry | DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemPredefinedEntry | DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemIntegrationEntry | DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemExactDataEntry | DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemDocumentFingerprintEntry | DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItemWordListEntry; export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesCustomUpdateResultCustomProfileSharedEntriesList = Array; export const DlpProfilesCustomUpdateResultCustomProfileSharedEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomUpdateResultCustomProfileSharedEntriesItem, ) as any as S.Schema; export interface DlpProfilesCustomUpdateResultCustomProfile { /** The id of the profile (uuid). */ id: string; /** Related DLP policies will trigger when the match count exceeds the number set. */ allowedMatchCount: number; /** When the profile was created. */ createdAt: string; /** The name of the profile. */ name: string; ocrEnabled: boolean; type: DlpProfilesCustomUpdateResultCustomProfileType; /** When the profile was lasted updated. */ updatedAt: string; aiContextEnabled?: boolean | null; confidenceThreshold?: DlpProfilesCustomUpdateResultCustomProfileConfidenceThreshold | null; /** Scan the context of predefined entries to only return matches surrounded by keywords. */ contextAwareness?: DlpProfilesCustomCreateRequestContextAwareness | null; /** Data classes associated with this profile. */ dataClasses?: DlpProfilesCustomUpdateResultCustomProfileDataClassesList | null; /** Data tags associated with this profile. */ dataTags?: DlpProfilesCustomUpdateResultCustomProfileDataTagsList | null; /** The description of the profile. */ description?: string | null; entries?: DlpProfilesCustomUpdateResultCustomProfileEntriesList | null; /** Sensitivity levels associated with this profile. */ sensitivityLevels?: DlpProfilesCustomUpdateResultCustomProfileSensitivityLevelsList | null; sharedEntries?: DlpProfilesCustomUpdateResultCustomProfileSharedEntriesList | null; } export const DlpProfilesCustomUpdateResultCustomProfile = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, allowedMatchCount: S.Number.pipe(T.Body("allowed_match_count")), createdAt: S.String.pipe(T.Body("created_at")), name: S.String, ocrEnabled: S.Boolean.pipe(T.Body("ocr_enabled")), type: DlpProfilesCustomUpdateResultCustomProfileType, updatedAt: S.String.pipe(T.Body("updated_at")), aiContextEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ai_context_enabled")), ), confidenceThreshold: S.optional( S.NullOr( DlpProfilesCustomUpdateResultCustomProfileConfidenceThreshold, ).pipe(T.Body("confidence_threshold")), ), contextAwareness: S.optional( S.NullOr(DlpProfilesCustomCreateRequestContextAwareness).pipe( T.Body("context_awareness"), ), ), dataClasses: S.optional( S.NullOr( DlpProfilesCustomUpdateResultCustomProfileDataClassesList, ).pipe(T.Body("data_classes")), ), dataTags: S.optional( S.NullOr(DlpProfilesCustomUpdateResultCustomProfileDataTagsList).pipe( T.Body("data_tags"), ), ), description: S.optional(S.NullOr(S.String)), entries: S.optional( S.NullOr(DlpProfilesCustomUpdateResultCustomProfileEntriesList), ), sensitivityLevels: S.optional( S.NullOr( DlpProfilesCustomUpdateResultCustomProfileSensitivityLevelsList, ).pipe(T.Body("sensitivity_levels")), ), sharedEntries: S.optional( S.NullOr( DlpProfilesCustomUpdateResultCustomProfileSharedEntriesList, ).pipe(T.Body("shared_entries")), ), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultCustomProfile", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomEntryType = "custom"; export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariant = | DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase0 | DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemWordListEntryType = "word_list"; export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultPredefinedProfileEntriesItem = | DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomEntry | DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemCustomPromptTopicEntry | DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemPredefinedEntry | DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemIntegrationEntry | DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemExactDataEntry | DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemDocumentFingerprintEntry | DlpProfilesCustomUpdateResultPredefinedProfileEntriesItemWordListEntry; export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesCustomUpdateResultPredefinedProfileEntriesList = Array; export const DlpProfilesCustomUpdateResultPredefinedProfileEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomUpdateResultPredefinedProfileEntriesItem, ) as any as S.Schema; export type DlpProfilesCustomUpdateResultPredefinedProfileType = "predefined"; export const DlpProfilesCustomUpdateResultPredefinedProfileType = /*@__PURE__*/ S.String; export type DlpProfilesCustomUpdateResultPredefinedProfileConfidenceThreshold = | "low" | "medium" | "high" | "very_high"; export const DlpProfilesCustomUpdateResultPredefinedProfileConfidenceThreshold = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultPredefinedProfile { /** The id of the predefined profile (uuid). */ id: string; allowedMatchCount: number; entries: DlpProfilesCustomUpdateResultPredefinedProfileEntriesList; /** The name of the predefined profile. */ name: string; type: DlpProfilesCustomUpdateResultPredefinedProfileType; aiContextEnabled?: boolean | null; confidenceThreshold?: DlpProfilesCustomUpdateResultPredefinedProfileConfidenceThreshold | null; /** Scan the context of predefined entries to only return matches surrounded by keywords. */ contextAwareness?: DlpProfilesCustomCreateRequestContextAwareness | null; ocrEnabled?: boolean | null; /** Whether this profile can be accessed by anyone. */ openAccess?: boolean | null; } export const DlpProfilesCustomUpdateResultPredefinedProfile = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, allowedMatchCount: S.Number.pipe(T.Body("allowed_match_count")), entries: DlpProfilesCustomUpdateResultPredefinedProfileEntriesList, name: S.String, type: DlpProfilesCustomUpdateResultPredefinedProfileType, aiContextEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ai_context_enabled")), ), confidenceThreshold: S.optional( S.NullOr( DlpProfilesCustomUpdateResultPredefinedProfileConfidenceThreshold, ).pipe(T.Body("confidence_threshold")), ), contextAwareness: S.optional( S.NullOr(DlpProfilesCustomCreateRequestContextAwareness).pipe( T.Body("context_awareness"), ), ), ocrEnabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("ocr_enabled"))), openAccess: S.optional(S.NullOr(S.Boolean).pipe(T.Body("open_access"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultPredefinedProfile", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomEntryType = "custom"; export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariant = | DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase0 | DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemWordListEntryType = "word_list"; export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileEntriesItem = | DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomEntry | DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemCustomPromptTopicEntry | DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemPredefinedEntry | DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemIntegrationEntry | DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemExactDataEntry | DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemDocumentFingerprintEntry | DlpProfilesCustomUpdateResultIntegrationProfileEntriesItemWordListEntry; export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesCustomUpdateResultIntegrationProfileEntriesList = Array; export const DlpProfilesCustomUpdateResultIntegrationProfileEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomUpdateResultIntegrationProfileEntriesItem, ) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomEntryType = "custom"; export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomEntry { id: string; createdAt: string; enabled: boolean; name: string; pattern: DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPattern; type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomEntryType; updatedAt: string; description?: string | null; profileId?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, pattern: DlpProfilesCustomUpdateResultCustomProfileEntriesItemCustomEntryPattern, type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType = "custom_prompt_topic"; export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType; updatedAt: string; /** The optional description of the custom prompt topic entry. */ description?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryConfidence = DlpEntriesPredefinedCreateResponseConfidence; export type DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryType = "predefined"; export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryType = /*@__PURE__*/ S.String; export type DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = | "Intent" | "Content"; export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType = /*@__PURE__*/ S.String; export type DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type = "PromptTopic"; export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0 { topicType: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType; type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type; /** A customer-facing explanation of what this predefined AI prompt topic represents. */ description?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0 = /*@__PURE__*/ S.suspend(() => S.Struct({ topicType: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0TopicType.pipe( T.Body("topic_type"), ), type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type = "General"; export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1 { type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type; /** A customer-facing explanation of what this predefined entry represents. */ description?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1 = /*@__PURE__*/ S.suspend(() => S.Struct({ type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1Type, description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant = | DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase0 | DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariantCase1; export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ ["topicType", "type", "description"], ["type", "description"], ]), ); export interface DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntry { id: string; confidence: DlpEntriesPredefinedCreateResponseConfidence; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryType; profileId?: string | null; /** A Predefined AI prompt classification topic entry. */ variant?: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, confidence: DlpEntriesPredefinedCreateResponseConfidence, enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryType, profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), variant: S.optional( S.NullOr( DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntryVariant, ), ), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemIntegrationEntryType = "integration"; export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemIntegrationEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemIntegrationEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemIntegrationEntryType; updatedAt: string; profileId?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemIntegrationEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemIntegrationEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemIntegrationEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemExactDataEntryType = "exact_data"; export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemExactDataEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemExactDataEntry { id: string; /** Only applies to custom word lists. */ caseSensitive: boolean; createdAt: string; enabled: boolean; name: string; secret: boolean; type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemExactDataEntryType; updatedAt: string; /** The optional description of the exact data entry. */ description?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemExactDataEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, caseSensitive: S.Boolean.pipe(T.Body("case_sensitive")), createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, secret: S.Boolean, type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemExactDataEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemExactDataEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType = "document_fingerprint"; export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType; updatedAt: string; /** The optional description of the document fingerprint entry. */ description?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemWordListEntryType = "word_list"; export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemWordListEntryType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemWordListEntry { id: string; createdAt: string; enabled: boolean; name: string; type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemWordListEntryType; updatedAt: string; wordList: unknown; profileId?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemWordListEntry = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), enabled: S.Boolean, name: S.String, type: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemWordListEntryType, updatedAt: S.String.pipe(T.Body("updated_at")), wordList: S.Unknown.pipe(T.Body("word_list")), profileId: S.optional(S.NullOr(S.String).pipe(T.Body("profile_id"))), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemWordListEntry", }) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItem = | DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomEntry | DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemCustomPromptTopicEntry | DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemPredefinedEntry | DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemIntegrationEntry | DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemExactDataEntry | DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemDocumentFingerprintEntry | DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItemWordListEntry; export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItem = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "createdAt", "enabled", "name", "pattern", "type", "updatedAt", "description", "profileId", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], ["id", "confidence", "enabled", "name", "type", "profileId", "variant"], ["id", "createdAt", "enabled", "name", "type", "updatedAt", "profileId"], [ "id", "caseSensitive", "createdAt", "enabled", "name", "secret", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "description", ], [ "id", "createdAt", "enabled", "name", "type", "updatedAt", "wordList", "profileId", ], ]), ); export type DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesList = Array; export const DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesList = /*@__PURE__*/ S.Array( DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesItem, ) as any as S.Schema; export type DlpProfilesCustomUpdateResultIntegrationProfileType = "integration"; export const DlpProfilesCustomUpdateResultIntegrationProfileType = /*@__PURE__*/ S.String; export interface DlpProfilesCustomUpdateResultIntegrationProfile { id: string; createdAt: string; entries: DlpProfilesCustomUpdateResultIntegrationProfileEntriesList; name: string; sharedEntries: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesList; type: DlpProfilesCustomUpdateResultIntegrationProfileType; updatedAt: string; /** The description of the profile. */ description?: string | null; } export const DlpProfilesCustomUpdateResultIntegrationProfile = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), entries: DlpProfilesCustomUpdateResultIntegrationProfileEntriesList, name: S.String, sharedEntries: DlpProfilesCustomUpdateResultIntegrationProfileSharedEntriesList.pipe( T.Body("shared_entries"), ), type: DlpProfilesCustomUpdateResultIntegrationProfileType, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }), ).annotate({ identifier: "DlpProfilesCustomUpdateResultIntegrationProfile", }) as any as S.Schema; export type DlpProfilesCustomUpdateResult = | DlpProfilesCustomUpdateResultCustomProfile | DlpProfilesCustomUpdateResultPredefinedProfile | DlpProfilesCustomUpdateResultIntegrationProfile; export const DlpProfilesCustomUpdateResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "id", "allowedMatchCount", "createdAt", "name", "ocrEnabled", "type", "updatedAt", "aiContextEnabled", "confidenceThreshold", "contextAwareness", "dataClasses", "dataTags", "description", "entries", "sensitivityLevels", "sharedEntries", ], [ "id", "allowedMatchCount", "entries", "name", "type", "aiContextEnabled", "confidenceThreshold", "contextAwareness", "ocrEnabled", "openAccess", ], [ "id", "createdAt", "entries", "name", "sharedEntries", "type", "updatedAt", "description", ], ]), ); export type UpdateDlpProfileCustomResponse = DlpProfilesCustomUpdateResult; export const UpdateDlpProfileCustomResponse = /*@__PURE__*/ S.suspend(() => DlpProfilesCustomUpdateResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "UpdateDlpProfileCustomResponse", }) as any as S.Schema; export interface DlpSensitivityGroupsUpdateRequestLevelsItem { /** If `None` (omitted), a new level will be created. Otherwise, an existing level will */ id?: string; description?: string; name?: string; } export const DlpSensitivityGroupsUpdateRequestLevelsItem = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.String), description: S.optional(S.String), name: S.optional(S.String), }), ).annotate({ identifier: "DlpSensitivityGroupsUpdateRequestLevelsItem", }) as any as S.Schema; export type DlpSensitivityGroupsUpdateRequestLevelsList = Array; export const DlpSensitivityGroupsUpdateRequestLevelsList = /*@__PURE__*/ S.Array( DlpSensitivityGroupsUpdateRequestLevelsItem, ) as any as S.Schema; export interface UpdateDlpSensitivityGroupRequest { accountId: string; sensitivityGroupId: string; description?: string; /** The desired final state of levels. */ levels?: DlpSensitivityGroupsUpdateRequestLevelsList; name?: string; } export const UpdateDlpSensitivityGroupRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), sensitivityGroupId: S.String.pipe(T.Label("sensitivity_group_id")), description: S.optional(S.String), levels: S.optional(DlpSensitivityGroupsUpdateRequestLevelsList), name: S.optional(S.String), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpSensitivityGroupRequest", }) as any as S.Schema; export type DlpSensitivityGroupsUpdateResponseLevelsItem = DlpDataTagCategoriesCreateResponseTagsItem; export const DlpSensitivityGroupsUpdateResponseLevelsItem = DlpDataTagCategoriesCreateResponseTagsItem; export type DlpSensitivityGroupsUpdateResponseLevelsList = Array; export const DlpSensitivityGroupsUpdateResponseLevelsList = /*@__PURE__*/ S.Array( DlpDataTagCategoriesCreateResponseTagsItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateDlpSensitivityGroupResponse { id: string; createdAt: string; levels: DlpSensitivityGroupsUpdateResponseLevelsList; name: string; updatedAt: string; description?: string | null; templateId?: string | null; } export const UpdateDlpSensitivityGroupResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), levels: DlpSensitivityGroupsUpdateResponseLevelsList, name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), templateId: S.optional(S.NullOr(S.String).pipe(T.Body("template_id"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpSensitivityGroupResponse", }) as any as S.Schema; export interface UpdateDlpSensitivityGroupLevelRequest { accountId: string; sensitivityGroupId: string; sensitivityLevelId: string; description?: string; name?: string; } export const UpdateDlpSensitivityGroupLevelRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), sensitivityGroupId: S.String.pipe(T.Label("sensitivity_group_id")), sensitivityLevelId: S.String.pipe(T.Label("sensitivity_level_id")), description: S.optional(S.String), name: S.optional(S.String), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}/levels/{sensitivity_level_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpSensitivityGroupLevelRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateDlpSensitivityGroupLevelResponse { id: string; createdAt: string; name: string; updatedAt: string; description?: string | null; } export const UpdateDlpSensitivityGroupLevelResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, createdAt: S.String.pipe(T.Body("created_at")), name: S.String, updatedAt: S.String.pipe(T.Body("updated_at")), description: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateDlpSensitivityGroupLevelResponse", }) as any as S.Schema; export type GatewayListsUpdateRequestItemsItem = GatewayListsCreateRequestItemsItem; export const GatewayListsUpdateRequestItemsItem = GatewayListsCreateRequestItemsItem; export type GatewayListsUpdateRequestItemsList = Array; export const GatewayListsUpdateRequestItemsList = /*@__PURE__*/ S.Array( GatewayListsCreateRequestItemsItem, ) as any as S.Schema; export interface UpdateGatewayListRequest { accountId: string; /** Identify the API resource with a UUID. */ listId: string; /** Specify the list name. */ name: string; /** Provide the list description. */ description?: string; /** Add items to the list. */ items?: GatewayListsUpdateRequestItemsList; } export const UpdateGatewayListRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), listId: S.String.pipe(T.Label("list_id")), name: S.String, description: S.optional(S.String), items: S.optional(GatewayListsUpdateRequestItemsList), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/gateway/lists/{list_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateGatewayListRequest", }) as any as S.Schema; export type GatewayListsUpdateResponseItemsItem = GatewayListsCreateResponseItemsItem; export const GatewayListsUpdateResponseItemsItem = GatewayListsCreateResponseItemsItem; export type GatewayListsUpdateResponseItemsList = Array; export const GatewayListsUpdateResponseItemsList = /*@__PURE__*/ S.Array( GatewayListsCreateResponseItemsItem, ) as any as S.Schema; export type GatewayListsUpdateResponseType = | "SERIAL" | "URL" | "DOMAIN" | "EMAIL" | "IP" | "CATEGORY" | "LOCATION" | "DEVICE" | "AAGUID"; export const GatewayListsUpdateResponseType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateGatewayListResponse { /** Identify the API resource with a UUID. */ id?: string | null; /** Indicate the number of items in the list. */ count?: number | null; createdAt?: string | null; /** Provide the list description. */ description?: string | null; /** Provide the list items. */ items?: GatewayListsUpdateResponseItemsList | null; /** Specify the list name. */ name?: string | null; /** Specify the list type. */ type?: GatewayListsUpdateResponseType | null; updatedAt?: string | null; } export const UpdateGatewayListResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), count: S.optional(S.NullOr(S.Number)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), description: S.optional(S.NullOr(S.String)), items: S.optional(S.NullOr(GatewayListsUpdateResponseItemsList)), name: S.optional(S.NullOr(S.String)), type: S.optional(S.NullOr(GatewayListsUpdateResponseType)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateGatewayListResponse", }) as any as S.Schema; export type GatewayLocationsUpdateRequestEndpointsDohNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export const GatewayLocationsUpdateRequestEndpointsDohNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export type GatewayLocationsUpdateRequestEndpointsDohNetworksList = Array; export const GatewayLocationsUpdateRequestEndpointsDohNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsDohNetworksItem, ) as any as S.Schema; export interface GatewayLocationsUpdateRequestEndpointsDoh { /** Indicate whether the DOH endpoint is enabled for this location. */ enabled?: boolean; /** Specify the list of allowed source IP network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsUpdateRequestEndpointsDohNetworksList; /** Specify whether the DOH endpoint requires user identity authentication. */ requireToken?: boolean; } export const GatewayLocationsUpdateRequestEndpointsDoh = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), networks: S.optional( GatewayLocationsUpdateRequestEndpointsDohNetworksList, ), requireToken: S.optional(S.Boolean.pipe(T.Body("require_token"))), }), ).annotate({ identifier: "GatewayLocationsUpdateRequestEndpointsDoh", }) as any as S.Schema; export type GatewayLocationsUpdateRequestEndpointsDotNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export const GatewayLocationsUpdateRequestEndpointsDotNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export type GatewayLocationsUpdateRequestEndpointsDotNetworksList = Array; export const GatewayLocationsUpdateRequestEndpointsDotNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsDohNetworksItem, ) as any as S.Schema; export interface GatewayLocationsUpdateRequestEndpointsDot { /** Indicate whether the DOT endpoint is enabled for this location. */ enabled?: boolean; /** Specify the list of allowed source IP network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsUpdateRequestEndpointsDotNetworksList; } export const GatewayLocationsUpdateRequestEndpointsDot = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), networks: S.optional( GatewayLocationsUpdateRequestEndpointsDotNetworksList, ), }), ).annotate({ identifier: "GatewayLocationsUpdateRequestEndpointsDot", }) as any as S.Schema; export type GatewayLocationsUpdateRequestEndpointsIpv4 = GatewayLocationsCreateRequestEndpointsIpv4; export const GatewayLocationsUpdateRequestEndpointsIpv4 = GatewayLocationsCreateRequestEndpointsIpv4; export type GatewayLocationsUpdateRequestEndpointsIpv6NetworksItem = GatewayLocationsCreateRequestEndpointsIpv6NetworksItem; export const GatewayLocationsUpdateRequestEndpointsIpv6NetworksItem = GatewayLocationsCreateRequestEndpointsIpv6NetworksItem; export type GatewayLocationsUpdateRequestEndpointsIpv6NetworksList = Array; export const GatewayLocationsUpdateRequestEndpointsIpv6NetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsIpv6NetworksItem, ) as any as S.Schema; export interface GatewayLocationsUpdateRequestEndpointsIpv6 { /** Indicate whether the IPV6 endpoint is enabled for this location. */ enabled?: boolean; /** Specify the list of allowed source IPv6 network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsUpdateRequestEndpointsIpv6NetworksList; } export const GatewayLocationsUpdateRequestEndpointsIpv6 = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), networks: S.optional( GatewayLocationsUpdateRequestEndpointsIpv6NetworksList, ), }), ).annotate({ identifier: "GatewayLocationsUpdateRequestEndpointsIpv6", }) as any as S.Schema; export interface GatewayLocationsUpdateRequestEndpoints { doh: GatewayLocationsUpdateRequestEndpointsDoh; dot: GatewayLocationsUpdateRequestEndpointsDot; ipv4: GatewayLocationsCreateRequestEndpointsIpv4; ipv6: GatewayLocationsUpdateRequestEndpointsIpv6; } export const GatewayLocationsUpdateRequestEndpoints = /*@__PURE__*/ S.suspend( () => S.Struct({ doh: GatewayLocationsUpdateRequestEndpointsDoh, dot: GatewayLocationsUpdateRequestEndpointsDot, ipv4: GatewayLocationsCreateRequestEndpointsIpv4, ipv6: GatewayLocationsUpdateRequestEndpointsIpv6, }), ).annotate({ identifier: "GatewayLocationsUpdateRequestEndpoints", }) as any as S.Schema; export type GatewayLocationsUpdateRequestMaxTtlMode = | "inherit" | "override" | "disabled"; export const GatewayLocationsUpdateRequestMaxTtlMode = /*@__PURE__*/ S.String; export interface GatewayLocationsUpdateRequestMaxTtl { /** `inherit` uses the account `max_ttl_secs`. `override` uses this location's `ttl_secs`. `disabled` leaves returned TTLs unchanged. */ mode: GatewayLocationsUpdateRequestMaxTtlMode | (string & {}); /** Location-specific cap on DNS response TTLs, in seconds. Required when `mode` is `override`. Must be omitted when `mode` is `inherit` or `disabled`. */ ttlSecs?: number; } export const GatewayLocationsUpdateRequestMaxTtl = /*@__PURE__*/ S.suspend(() => S.Struct({ mode: GatewayLocationsUpdateRequestMaxTtlMode, ttlSecs: S.optional(S.Number.pipe(T.Body("ttl_secs"))), }), ).annotate({ identifier: "GatewayLocationsUpdateRequestMaxTtl", }) as any as S.Schema; export type GatewayLocationsUpdateRequestNetworksItem = GatewayLocationsCreateRequestNetworksItem; export const GatewayLocationsUpdateRequestNetworksItem = GatewayLocationsCreateRequestNetworksItem; export type GatewayLocationsUpdateRequestNetworksList = Array; export const GatewayLocationsUpdateRequestNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestNetworksItem, ) as any as S.Schema; export interface UpdateGatewayLocationRequest { accountId: string; locationId: string; /** Specify the location name. */ name: string; /** Indicate whether this location is the default location. */ clientDefault?: boolean; /** Specify the identifier of the pair of IPv4 addresses assigned to this location. When creating a location, if this field is absent or set to null, the pair of shared IPv4 addresses (0e4a32c6-6fb8-4858-9296-98f51631e8e6) is auto-assigned. When updating a location, if this field is absent or set to null, the pre-assigned pair remains unchanged. */ dnsDestinationIpsId?: string; /** Indicate whether the location must resolve EDNS queries. */ ecsSupport?: boolean; /** Configure the destination endpoints for this location. */ endpoints?: GatewayLocationsUpdateRequestEndpoints; /** Controls how DNS response TTLs are capped for this location relative to the account `max_ttl_secs` setting. Omitting `max_ttl` on update resets it to `inherit`. */ maxTtl?: GatewayLocationsUpdateRequestMaxTtl; /** Specify the list of network ranges from which requests at this location originate. The list takes effect only if it is non-empty and the IPv4 endpoint is enabled for this location. */ networks?: GatewayLocationsUpdateRequestNetworksList; } export const UpdateGatewayLocationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), locationId: S.String.pipe(T.Label("location_id")), name: S.String, clientDefault: S.optional(S.Boolean.pipe(T.Body("client_default"))), dnsDestinationIpsId: S.optional( S.String.pipe(T.Body("dns_destination_ips_id")), ), ecsSupport: S.optional(S.Boolean.pipe(T.Body("ecs_support"))), endpoints: S.optional(GatewayLocationsUpdateRequestEndpoints), maxTtl: S.optional( GatewayLocationsUpdateRequestMaxTtl.pipe(T.Body("max_ttl")), ), networks: S.optional(GatewayLocationsUpdateRequestNetworksList), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/gateway/locations/{location_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateGatewayLocationRequest", }) as any as S.Schema; export type GatewayLocationsUpdateResponseEndpointsDohNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export const GatewayLocationsUpdateResponseEndpointsDohNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export type GatewayLocationsUpdateResponseEndpointsDohNetworksList = Array; export const GatewayLocationsUpdateResponseEndpointsDohNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsDohNetworksItem, ) as any as S.Schema; export interface GatewayLocationsUpdateResponseEndpointsDoh { /** Indicate whether the DOH endpoint is enabled for this location. */ enabled?: boolean | null; /** Specify the list of allowed source IP network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsUpdateResponseEndpointsDohNetworksList | null; /** Specify whether the DOH endpoint requires user identity authentication. */ requireToken?: boolean | null; } export const GatewayLocationsUpdateResponseEndpointsDoh = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), networks: S.optional( S.NullOr(GatewayLocationsUpdateResponseEndpointsDohNetworksList), ), requireToken: S.optional( S.NullOr(S.Boolean).pipe(T.Body("require_token")), ), }), ).annotate({ identifier: "GatewayLocationsUpdateResponseEndpointsDoh", }) as any as S.Schema; export type GatewayLocationsUpdateResponseEndpointsDotNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export const GatewayLocationsUpdateResponseEndpointsDotNetworksItem = GatewayLocationsCreateRequestEndpointsDohNetworksItem; export type GatewayLocationsUpdateResponseEndpointsDotNetworksList = Array; export const GatewayLocationsUpdateResponseEndpointsDotNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsDohNetworksItem, ) as any as S.Schema; export interface GatewayLocationsUpdateResponseEndpointsDot { /** Indicate whether the DOT endpoint is enabled for this location. */ enabled?: boolean | null; /** Specify the list of allowed source IP network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsUpdateResponseEndpointsDotNetworksList | null; } export const GatewayLocationsUpdateResponseEndpointsDot = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), networks: S.optional( S.NullOr(GatewayLocationsUpdateResponseEndpointsDotNetworksList), ), }), ).annotate({ identifier: "GatewayLocationsUpdateResponseEndpointsDot", }) as any as S.Schema; export type GatewayLocationsUpdateResponseEndpointsIpv4 = GatewayLocationsCreateResponseEndpointsIpv4; export const GatewayLocationsUpdateResponseEndpointsIpv4 = GatewayLocationsCreateResponseEndpointsIpv4; export type GatewayLocationsUpdateResponseEndpointsIpv6NetworksItem = GatewayLocationsCreateRequestEndpointsIpv6NetworksItem; export const GatewayLocationsUpdateResponseEndpointsIpv6NetworksItem = GatewayLocationsCreateRequestEndpointsIpv6NetworksItem; export type GatewayLocationsUpdateResponseEndpointsIpv6NetworksList = Array; export const GatewayLocationsUpdateResponseEndpointsIpv6NetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestEndpointsIpv6NetworksItem, ) as any as S.Schema; export interface GatewayLocationsUpdateResponseEndpointsIpv6 { /** Indicate whether the IPV6 endpoint is enabled for this location. */ enabled?: boolean | null; /** Specify the list of allowed source IPv6 network ranges for this endpoint. When the list is empty, the endpoint allows all source IPs. The list takes effect only if the endpoint is enabled for this location. */ networks?: GatewayLocationsUpdateResponseEndpointsIpv6NetworksList | null; } export const GatewayLocationsUpdateResponseEndpointsIpv6 = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), networks: S.optional( S.NullOr(GatewayLocationsUpdateResponseEndpointsIpv6NetworksList), ), }), ).annotate({ identifier: "GatewayLocationsUpdateResponseEndpointsIpv6", }) as any as S.Schema; export interface GatewayLocationsUpdateResponseEndpoints { doh: GatewayLocationsUpdateResponseEndpointsDoh; dot: GatewayLocationsUpdateResponseEndpointsDot; ipv4: GatewayLocationsCreateResponseEndpointsIpv4; ipv6: GatewayLocationsUpdateResponseEndpointsIpv6; } export const GatewayLocationsUpdateResponseEndpoints = /*@__PURE__*/ S.suspend( () => S.Struct({ doh: GatewayLocationsUpdateResponseEndpointsDoh, dot: GatewayLocationsUpdateResponseEndpointsDot, ipv4: GatewayLocationsCreateResponseEndpointsIpv4, ipv6: GatewayLocationsUpdateResponseEndpointsIpv6, }), ).annotate({ identifier: "GatewayLocationsUpdateResponseEndpoints", }) as any as S.Schema; export type GatewayLocationsUpdateResponseMaxTtlMode = | "inherit" | "override" | "disabled"; export const GatewayLocationsUpdateResponseMaxTtlMode = /*@__PURE__*/ S.String; export interface GatewayLocationsUpdateResponseMaxTtl { /** `inherit` uses the account `max_ttl_secs`. `override` uses this location's `ttl_secs`. `disabled` leaves returned TTLs unchanged. */ mode: GatewayLocationsUpdateResponseMaxTtlMode; /** Location-specific cap on DNS response TTLs, in seconds. Required when `mode` is `override`. Must be omitted when `mode` is `inherit` or `disabled`. */ ttlSecs?: number | null; } export const GatewayLocationsUpdateResponseMaxTtl = /*@__PURE__*/ S.suspend( () => S.Struct({ mode: GatewayLocationsUpdateResponseMaxTtlMode, ttlSecs: S.optional(S.NullOr(S.Number).pipe(T.Body("ttl_secs"))), }), ).annotate({ identifier: "GatewayLocationsUpdateResponseMaxTtl", }) as any as S.Schema; export type GatewayLocationsUpdateResponseNetworksItem = GatewayLocationsCreateRequestNetworksItem; export const GatewayLocationsUpdateResponseNetworksItem = GatewayLocationsCreateRequestNetworksItem; export type GatewayLocationsUpdateResponseNetworksList = Array; export const GatewayLocationsUpdateResponseNetworksList = /*@__PURE__*/ S.Array( GatewayLocationsCreateRequestNetworksItem, ) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateGatewayLocationResponse { id?: string | null; /** Indicate whether this location is the default location. */ clientDefault?: boolean | null; createdAt?: string | null; /** Indicate the identifier of the pair of IPv4 addresses assigned to this location. */ dnsDestinationIpsId?: string | null; /** Specify the UUID of the IPv6 block brought to the gateway so that this location's IPv6 address is allocated from the Bring Your Own IPv6 (BYOIPv6) block rather than the standard Cloudflare IPv6 block. */ dnsDestinationIpv6BlockId?: string | null; /** Specify the DNS over HTTPS domain that receives DNS requests. Gateway automatically generates this value. */ dohSubdomain?: string | null; /** Indicate whether the location must resolve EDNS queries. */ ecsSupport?: boolean | null; /** Configure the destination endpoints for this location. */ endpoints?: GatewayLocationsUpdateResponseEndpoints | null; /** Defines the automatically generated IPv6 destination IP assigned to this location. Gateway counts all DNS requests sent to this IP as requests under this location. */ ip?: string | null; /** Show the primary destination IPv4 address from the pair identified dns_destination_ips_id. This field read-only. */ ipv4Destination?: string | null; /** Show the backup destination IPv4 address from the pair identified dns_destination_ips_id. This field read-only. */ ipv4DestinationBackup?: string | null; /** Controls how DNS response TTLs are capped for this location relative to the account `max_ttl_secs` setting. Omitting `max_ttl` on update resets it to `inherit`. */ maxTtl?: GatewayLocationsUpdateResponseMaxTtl | null; /** Specify the location name. */ name?: string | null; /** Specify the list of network ranges from which requests at this location originate. The list takes effect only if it is non-empty and the IPv4 endpoint is enabled for this location. */ networks?: GatewayLocationsUpdateResponseNetworksList | null; updatedAt?: string | null; } export const UpdateGatewayLocationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), clientDefault: S.optional( S.NullOr(S.Boolean).pipe(T.Body("client_default")), ), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), dnsDestinationIpsId: S.optional( S.NullOr(S.String).pipe(T.Body("dns_destination_ips_id")), ), dnsDestinationIpv6BlockId: S.optional( S.NullOr(S.String).pipe(T.Body("dns_destination_ipv6_block_id")), ), dohSubdomain: S.optional(S.NullOr(S.String).pipe(T.Body("doh_subdomain"))), ecsSupport: S.optional(S.NullOr(S.Boolean).pipe(T.Body("ecs_support"))), endpoints: S.optional(S.NullOr(GatewayLocationsUpdateResponseEndpoints)), ip: S.optional(S.NullOr(S.String)), ipv4Destination: S.optional( S.NullOr(S.String).pipe(T.Body("ipv4_destination")), ), ipv4DestinationBackup: S.optional( S.NullOr(S.String).pipe(T.Body("ipv4_destination_backup")), ), maxTtl: S.optional( S.NullOr(GatewayLocationsUpdateResponseMaxTtl).pipe(T.Body("max_ttl")), ), name: S.optional(S.NullOr(S.String)), networks: S.optional(S.NullOr(GatewayLocationsUpdateResponseNetworksList)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateGatewayLocationResponse", }) as any as S.Schema; export interface UpdateGatewayPacfileRequest { accountId: string; pacfileId: string; /** Actual contents of the PAC file */ contents: string; /** Detailed description of the PAC file. */ description: string; /** Name of the PAC file. */ name: string; } export const UpdateGatewayPacfileRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), pacfileId: S.String.pipe(T.Label("pacfile_id")), contents: S.String, description: S.String, name: S.String, }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/gateway/pacfiles/{pacfile_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateGatewayPacfileRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateGatewayPacfileResponse { id?: string | null; /** Actual contents of the PAC file */ contents?: string | null; createdAt?: string | null; /** Detailed description of the PAC file. */ description?: string | null; /** Name of the PAC file. */ name?: string | null; /** URL-friendly version of the PAC file name. */ slug?: string | null; updatedAt?: string | null; /** Unique URL to download the PAC file. */ url?: string | null; } export const UpdateGatewayPacfileResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ id: S.optional(S.NullOr(S.String)), contents: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), description: S.optional(S.NullOr(S.String)), name: S.optional(S.NullOr(S.String)), slug: S.optional(S.NullOr(S.String)), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), url: S.optional(S.NullOr(S.String)), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateGatewayPacfileResponse", }) as any as S.Schema; export type GatewayRulesUpdateRequestAction = | "on" | "off" | "allow" | "block" | "scan" | "noscan" | "safesearch" | "ytrestricted" | "isolate" | "noisolate" | "override" | "l4_override" | "egress" | "resolve" | "quarantine" | "redirect"; export const GatewayRulesUpdateRequestAction = /*@__PURE__*/ S.String; export type GatewayRulesUpdateRequestExpiration = GatewayRulesCreateRequestExpiration; export const GatewayRulesUpdateRequestExpiration = GatewayRulesCreateRequestExpiration; export type GatewayRulesUpdateRequestFiltersItem = | "http" | "dns" | "l4" | "egress" | "dns_resolver"; export const GatewayRulesUpdateRequestFiltersItem = /*@__PURE__*/ S.String; export type GatewayRulesUpdateRequestFiltersList = Array< GatewayRulesUpdateRequestFiltersItem | (string & {}) >; export const GatewayRulesUpdateRequestFiltersList = /*@__PURE__*/ S.Array( GatewayRulesUpdateRequestFiltersItem, ) as any as S.Schema; export type GatewayRulesUpdateRequestRuleSettingsAddHeadersValueList = Array; export const GatewayRulesUpdateRequestRuleSettingsAddHeadersValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayRulesUpdateRequestRuleSettingsAddHeadersMap = { [key: string]: | GatewayRulesUpdateRequestRuleSettingsAddHeadersValueList | undefined; }; export const GatewayRulesUpdateRequestRuleSettingsAddHeadersMap = /*@__PURE__*/ S.Record( S.String, GatewayRulesUpdateRequestRuleSettingsAddHeadersValueList, ) as any as S.Schema; export type GatewayRulesUpdateRequestRuleSettingsAuditSsh = GatewayRulesCreateRequestRuleSettingsAuditSsh; export const GatewayRulesUpdateRequestRuleSettingsAuditSsh = GatewayRulesCreateRequestRuleSettingsAuditSsh; export type GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsCopy = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsCopy = /*@__PURE__*/ S.String; export type GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsDownload = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsDownload = /*@__PURE__*/ S.String; export type GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsKeyboard = | "enabled" | "disabled"; export const GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsKeyboard = /*@__PURE__*/ S.String; export type GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsPaste = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsPaste = /*@__PURE__*/ S.String; export type GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsPrinting = | "enabled" | "disabled"; export const GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsPrinting = /*@__PURE__*/ S.String; export type GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsUpload = | "enabled" | "disabled"; export const GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsUpload = /*@__PURE__*/ S.String; export type GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsVersion = | "v1" | "v2"; export const GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsVersion = /*@__PURE__*/ S.String; export interface GatewayRulesUpdateRequestRuleSettingsBisoAdminControls { /** Configure copy behavior. If set to remote_only, users cannot copy isolated content from the remote browser to the local clipboard. If this field is absent, copying remains enabled. Applies only when version == "v2". */ copy?: | GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsCopy | (string & {}); /** Set to false to enable copy-pasting. Only applies when `version == "v1"`. */ dcp?: boolean; /** Set to false to enable downloading. Only applies when `version == "v1"`. */ dd?: boolean; /** Set to false to enable keyboard usage. Only applies when `version == "v1"`. */ dk?: boolean; /** Configure download behavior. When set to remote_only, users can view downloads but cannot save them. If this field is absent, downloading remains enabled. Applies only when version == "v2". */ download?: | GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsDownload | (string & {}); /** Set to false to enable printing. Only applies when `version == "v1"`. */ dp?: boolean; /** Set to false to enable uploading. Only applies when `version == "v1"`. */ du?: boolean; /** Configure keyboard usage behavior. If this field is absent, keyboard usage remains enabled. Applies only when version == "v2". */ keyboard?: | GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsKeyboard | (string & {}); /** Configure paste behavior. If set to remote_only, users cannot paste content from the local clipboard into isolated pages. If this field is absent, pasting remains enabled. Applies only when version == "v2". */ paste?: | GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsPaste | (string & {}); /** Configure print behavior. Default, Printing is enabled. Applies only when version == "v2". */ printing?: | GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsPrinting | (string & {}); /** Configure upload behavior. If this field is absent, uploading remains enabled. Applies only when version == "v2". */ upload?: | GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsUpload | (string & {}); /** Indicate which version of the browser isolation controls should apply. */ version?: | GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsVersion | (string & {}); /** Specify the watermark ID (UUID) to apply to the isolated browser session. When present, enables watermark rendering in the isolated browser. */ wmId?: string; } export const GatewayRulesUpdateRequestRuleSettingsBisoAdminControls = /*@__PURE__*/ S.suspend(() => S.Struct({ copy: S.optional( GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsCopy, ), dcp: S.optional(S.Boolean), dd: S.optional(S.Boolean), dk: S.optional(S.Boolean), download: S.optional( GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsDownload, ), dp: S.optional(S.Boolean), du: S.optional(S.Boolean), keyboard: S.optional( GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsKeyboard, ), paste: S.optional( GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsPaste, ), printing: S.optional( GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsPrinting, ), upload: S.optional( GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsUpload, ), version: S.optional( GatewayRulesUpdateRequestRuleSettingsBisoAdminControlsVersion, ), wmId: S.optional(S.String.pipe(T.Body("wm_id"))), }), ).annotate({ identifier: "GatewayRulesUpdateRequestRuleSettingsBisoAdminControls", }) as any as S.Schema; export type GatewayRulesUpdateRequestRuleSettingsBlockPage = GatewayRulesCreateRequestRuleSettingsBlockPage; export const GatewayRulesUpdateRequestRuleSettingsBlockPage = GatewayRulesCreateRequestRuleSettingsBlockPage; export type GatewayRulesUpdateRequestRuleSettingsCheckSession = GatewayRulesCreateRequestRuleSettingsCheckSession; export const GatewayRulesUpdateRequestRuleSettingsCheckSession = GatewayRulesCreateRequestRuleSettingsCheckSession; export type GatewayRulesUpdateRequestRuleSettingsDnsResolversIpv4Item = GatewayRulesCreateRequestRuleSettingsDnsResolversIpv4Item; export const GatewayRulesUpdateRequestRuleSettingsDnsResolversIpv4Item = GatewayRulesCreateRequestRuleSettingsDnsResolversIpv4Item; export type GatewayRulesUpdateRequestRuleSettingsDnsResolversIpv4List = Array; export const GatewayRulesUpdateRequestRuleSettingsDnsResolversIpv4List = /*@__PURE__*/ S.Array( GatewayRulesCreateRequestRuleSettingsDnsResolversIpv4Item, ) as any as S.Schema; export type GatewayRulesUpdateRequestRuleSettingsDnsResolversIpv6Item = GatewayRulesCreateRequestRuleSettingsDnsResolversIpv6Item; export const GatewayRulesUpdateRequestRuleSettingsDnsResolversIpv6Item = GatewayRulesCreateRequestRuleSettingsDnsResolversIpv6Item; export type GatewayRulesUpdateRequestRuleSettingsDnsResolversIpv6List = Array; export const GatewayRulesUpdateRequestRuleSettingsDnsResolversIpv6List = /*@__PURE__*/ S.Array( GatewayRulesCreateRequestRuleSettingsDnsResolversIpv6Item, ) as any as S.Schema; export interface GatewayRulesUpdateRequestRuleSettingsDnsResolvers { ipv4?: GatewayRulesUpdateRequestRuleSettingsDnsResolversIpv4List; ipv6?: GatewayRulesUpdateRequestRuleSettingsDnsResolversIpv6List; } export const GatewayRulesUpdateRequestRuleSettingsDnsResolvers = /*@__PURE__*/ S.suspend(() => S.Struct({ ipv4: S.optional( GatewayRulesUpdateRequestRuleSettingsDnsResolversIpv4List, ), ipv6: S.optional( GatewayRulesUpdateRequestRuleSettingsDnsResolversIpv6List, ), }), ).annotate({ identifier: "GatewayRulesUpdateRequestRuleSettingsDnsResolvers", }) as any as S.Schema; export type GatewayRulesUpdateRequestRuleSettingsEgress = GatewayRulesCreateRequestRuleSettingsEgress; export const GatewayRulesUpdateRequestRuleSettingsEgress = GatewayRulesCreateRequestRuleSettingsEgress; export type GatewayRulesUpdateRequestRuleSettingsForensicCopy = GatewayRulesCreateRequestRuleSettingsForensicCopy; export const GatewayRulesUpdateRequestRuleSettingsForensicCopy = GatewayRulesCreateRequestRuleSettingsForensicCopy; export type GatewayRulesUpdateRequestRuleSettingsL4override = GatewayRulesCreateRequestRuleSettingsL4override; export const GatewayRulesUpdateRequestRuleSettingsL4override = GatewayRulesCreateRequestRuleSettingsL4override; export type GatewayRulesUpdateRequestRuleSettingsNotificationSettings = GatewayRulesCreateRequestRuleSettingsNotificationSettings; export const GatewayRulesUpdateRequestRuleSettingsNotificationSettings = GatewayRulesCreateRequestRuleSettingsNotificationSettings; export type GatewayRulesUpdateRequestRuleSettingsOverrideIpsList = Array; export const GatewayRulesUpdateRequestRuleSettingsOverrideIpsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayRulesUpdateRequestRuleSettingsPayloadLog = GatewayRulesCreateRequestRuleSettingsPayloadLog; export const GatewayRulesUpdateRequestRuleSettingsPayloadLog = GatewayRulesCreateRequestRuleSettingsPayloadLog; export type GatewayRulesUpdateRequestRuleSettingsQuarantineFileTypesItem = | "exe" | "pdf" | "doc" | "docm" | "docx" | "rtf" | "ppt" | "pptx" | "xls" | "xlsm" | "xlsx" | "zip" | "rar"; export const GatewayRulesUpdateRequestRuleSettingsQuarantineFileTypesItem = /*@__PURE__*/ S.String; export type GatewayRulesUpdateRequestRuleSettingsQuarantineFileTypesList = Array< GatewayRulesUpdateRequestRuleSettingsQuarantineFileTypesItem | (string & {}) >; export const GatewayRulesUpdateRequestRuleSettingsQuarantineFileTypesList = /*@__PURE__*/ S.Array( GatewayRulesUpdateRequestRuleSettingsQuarantineFileTypesItem, ) as any as S.Schema; export interface GatewayRulesUpdateRequestRuleSettingsQuarantine { /** Specify the types of files to sandbox. */ fileTypes?: GatewayRulesUpdateRequestRuleSettingsQuarantineFileTypesList; } export const GatewayRulesUpdateRequestRuleSettingsQuarantine = /*@__PURE__*/ S.suspend(() => S.Struct({ fileTypes: S.optional( GatewayRulesUpdateRequestRuleSettingsQuarantineFileTypesList.pipe( T.Body("file_types"), ), ), }), ).annotate({ identifier: "GatewayRulesUpdateRequestRuleSettingsQuarantine", }) as any as S.Schema; export type GatewayRulesUpdateRequestRuleSettingsRedirect = GatewayRulesCreateRequestRuleSettingsRedirect; export const GatewayRulesUpdateRequestRuleSettingsRedirect = GatewayRulesCreateRequestRuleSettingsRedirect; export type GatewayRulesUpdateRequestRuleSettingsResolveDnsInternallyFallback = | "none" | "public_dns"; export const GatewayRulesUpdateRequestRuleSettingsResolveDnsInternallyFallback = /*@__PURE__*/ S.String; export interface GatewayRulesUpdateRequestRuleSettingsResolveDnsInternally { /** Specify the fallback behavior to apply when the internal DNS response code differs from 'NOERROR' or when the response data contains only CNAME records for 'A' or 'AAAA' queries. */ fallback?: | GatewayRulesUpdateRequestRuleSettingsResolveDnsInternallyFallback | (string & {}); /** Specify the internal DNS view identifier to pass to the internal DNS service. */ viewId?: string; } export const GatewayRulesUpdateRequestRuleSettingsResolveDnsInternally = /*@__PURE__*/ S.suspend(() => S.Struct({ fallback: S.optional( GatewayRulesUpdateRequestRuleSettingsResolveDnsInternallyFallback, ), viewId: S.optional(S.String.pipe(T.Body("view_id"))), }), ).annotate({ identifier: "GatewayRulesUpdateRequestRuleSettingsResolveDnsInternally", }) as any as S.Schema; export type GatewayRulesUpdateRequestRuleSettingsUntrustedCertAction = | "pass_through" | "block" | "error"; export const GatewayRulesUpdateRequestRuleSettingsUntrustedCertAction = /*@__PURE__*/ S.String; export interface GatewayRulesUpdateRequestRuleSettingsUntrustedCert { /** Defines the action performed when an untrusted certificate seen. The default action an error with HTTP code 526. */ action?: | GatewayRulesUpdateRequestRuleSettingsUntrustedCertAction | (string & {}); } export const GatewayRulesUpdateRequestRuleSettingsUntrustedCert = /*@__PURE__*/ S.suspend(() => S.Struct({ action: S.optional( GatewayRulesUpdateRequestRuleSettingsUntrustedCertAction, ), }), ).annotate({ identifier: "GatewayRulesUpdateRequestRuleSettingsUntrustedCert", }) as any as S.Schema; export interface GatewayRulesUpdateRequestRuleSettings { /** Add custom headers to allowed requests as key-value pairs. Use header names as keys that map to arrays of header values. Settable only for `http` rules with the action set to `allow`. */ addHeaders?: GatewayRulesUpdateRequestRuleSettingsAddHeadersMap; /** Set to enable MSP children to bypass this rule. Only parent MSP accounts can set this. this rule. Settable for all types of rules. */ allowChildBypass?: boolean; /** Define the settings for the Audit SSH action. Settable only for `l4` rules with `audit_ssh` action. */ auditSsh?: GatewayRulesCreateRequestRuleSettingsAuditSsh; /** Configure browser isolation behavior. Settable only for `http` rules with the action set to `isolate`. */ bisoAdminControls?: GatewayRulesUpdateRequestRuleSettingsBisoAdminControls; /** Configure custom block page settings. If missing or null, use the account settings. Settable only for `http` rules with the action set to `block`. */ blockPage?: GatewayRulesCreateRequestRuleSettingsBlockPage; /** Enable the custom block page. Settable only for `dns` rules with action `block`. */ blockPageEnabled?: boolean; /** Explain why the rule blocks the request. The custom block page shows this text (if enabled). Settable only for `dns`, `l4`, and `http` rules when the action set to `block`. */ blockReason?: string; /** Set to enable MSP accounts to bypass their parent's rules. Only MSP child accounts can set this. Settable for all types of rules. */ bypassParentRule?: boolean; /** Configure session check behavior. Settable only for `l4` and `http` rules with the action set to `allow`. */ checkSession?: GatewayRulesCreateRequestRuleSettingsCheckSession; /** Configure custom resolvers to route queries that match the resolver policy. Unused with 'resolve_dns_through_cloudflare' or 'resolve_dns_internally' settings. DNS queries get routed to the address closest to their origin. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ dnsResolvers?: GatewayRulesUpdateRequestRuleSettingsDnsResolvers; /** Configure how Gateway Proxy traffic egresses. You can enable this setting for rules with Egress actions and filters, or omit it to indicate local egress via WARP IPs. Settable only for `egress` rules. */ egress?: GatewayRulesCreateRequestRuleSettingsEgress; /** Configure whether a copy of the HTTP request will be sent to storage when the rule matches. */ forensicCopy?: GatewayRulesCreateRequestRuleSettingsForensicCopy; /** Ignore category matches at CNAME domains in a response. When off, evaluate categories in this rule against all CNAME domain categories in the response. Settable only for `dns` and `dns_resolver` rules. */ ignoreCnameCategoryMatches?: boolean; /** Specify whether to disable DNSSEC validation (for Allow actions) [INSECURE]. Settable only for `dns` rules. */ insecureDisableDnssecValidation?: boolean; /** Enable IPs in DNS resolver category blocks. The system blocks only domain name categories unless you enable this setting. Settable only for `dns` and `dns_resolver` rules. */ ipCategories?: boolean; /** Indicates whether to include IPs in DNS resolver indicator feed blocks. Default, indicator feeds block only domain names. Settable only for `dns` and `dns_resolver` rules. */ ipIndicatorFeeds?: boolean; /** Send matching traffic to the supplied destination IP address and port. Settable only for `l4` rules with the action set to `l4_override`. */ l4override?: GatewayRulesCreateRequestRuleSettingsL4override; /** Configure a notification to display on the user's device when this rule matched. Settable for all types of rules with the action set to `block`. */ notificationSettings?: GatewayRulesCreateRequestRuleSettingsNotificationSettings; /** Defines a hostname for override, for the matching DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideHost?: string; /** Defines a an IP or set of IPs for overriding matched DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideIps?: GatewayRulesUpdateRequestRuleSettingsOverrideIpsList; /** Configure DLP payload logging. Settable only for `http` rules. */ payloadLog?: GatewayRulesCreateRequestRuleSettingsPayloadLog; /** Configure settings that apply to quarantine rules. Settable only for `http` rules. */ quarantine?: GatewayRulesUpdateRequestRuleSettingsQuarantine; /** Apply settings to redirect rules. Settable only for `http` rules with the action set to `redirect`. */ redirect?: GatewayRulesCreateRequestRuleSettingsRedirect; /** Configure to forward the query to the internal DNS service, passing the specified 'view_id' as input. Not used when 'dns_resolvers' is specified or 'resolve_dns_through_cloudflare' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsInternally?: GatewayRulesUpdateRequestRuleSettingsResolveDnsInternally; /** Enable to send queries that match the policy to Cloudflare's default 1.1.1.1 DNS resolver. Cannot set when 'dns_resolvers' specified or 'resolve_dns_internally' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsThroughCloudflare?: boolean; /** Configure behavior when an upstream certificate is invalid or an SSL error occurs. Settable only for `http` rules with the action set to `allow`. */ untrustedCert?: GatewayRulesUpdateRequestRuleSettingsUntrustedCert; } export const GatewayRulesUpdateRequestRuleSettings = /*@__PURE__*/ S.suspend( () => S.Struct({ addHeaders: S.optional( GatewayRulesUpdateRequestRuleSettingsAddHeadersMap.pipe( T.Body("add_headers"), ), ), allowChildBypass: S.optional( S.Boolean.pipe(T.Body("allow_child_bypass")), ), auditSsh: S.optional( GatewayRulesCreateRequestRuleSettingsAuditSsh.pipe(T.Body("audit_ssh")), ), bisoAdminControls: S.optional( GatewayRulesUpdateRequestRuleSettingsBisoAdminControls.pipe( T.Body("biso_admin_controls"), ), ), blockPage: S.optional( GatewayRulesCreateRequestRuleSettingsBlockPage.pipe( T.Body("block_page"), ), ), blockPageEnabled: S.optional( S.Boolean.pipe(T.Body("block_page_enabled")), ), blockReason: S.optional(S.String.pipe(T.Body("block_reason"))), bypassParentRule: S.optional( S.Boolean.pipe(T.Body("bypass_parent_rule")), ), checkSession: S.optional( GatewayRulesCreateRequestRuleSettingsCheckSession.pipe( T.Body("check_session"), ), ), dnsResolvers: S.optional( GatewayRulesUpdateRequestRuleSettingsDnsResolvers.pipe( T.Body("dns_resolvers"), ), ), egress: S.optional(GatewayRulesCreateRequestRuleSettingsEgress), forensicCopy: S.optional( GatewayRulesCreateRequestRuleSettingsForensicCopy.pipe( T.Body("forensic_copy"), ), ), ignoreCnameCategoryMatches: S.optional( S.Boolean.pipe(T.Body("ignore_cname_category_matches")), ), insecureDisableDnssecValidation: S.optional( S.Boolean.pipe(T.Body("insecure_disable_dnssec_validation")), ), ipCategories: S.optional(S.Boolean.pipe(T.Body("ip_categories"))), ipIndicatorFeeds: S.optional( S.Boolean.pipe(T.Body("ip_indicator_feeds")), ), l4override: S.optional(GatewayRulesCreateRequestRuleSettingsL4override), notificationSettings: S.optional( GatewayRulesCreateRequestRuleSettingsNotificationSettings.pipe( T.Body("notification_settings"), ), ), overrideHost: S.optional(S.String.pipe(T.Body("override_host"))), overrideIps: S.optional( GatewayRulesUpdateRequestRuleSettingsOverrideIpsList.pipe( T.Body("override_ips"), ), ), payloadLog: S.optional( GatewayRulesCreateRequestRuleSettingsPayloadLog.pipe( T.Body("payload_log"), ), ), quarantine: S.optional(GatewayRulesUpdateRequestRuleSettingsQuarantine), redirect: S.optional(GatewayRulesCreateRequestRuleSettingsRedirect), resolveDnsInternally: S.optional( GatewayRulesUpdateRequestRuleSettingsResolveDnsInternally.pipe( T.Body("resolve_dns_internally"), ), ), resolveDnsThroughCloudflare: S.optional( S.Boolean.pipe(T.Body("resolve_dns_through_cloudflare")), ), untrustedCert: S.optional( GatewayRulesUpdateRequestRuleSettingsUntrustedCert.pipe( T.Body("untrusted_cert"), ), ), }), ).annotate({ identifier: "GatewayRulesUpdateRequestRuleSettings", }) as any as S.Schema; export type GatewayRulesUpdateRequestSchedule = GatewayRulesCreateRequestSchedule; export const GatewayRulesUpdateRequestSchedule = GatewayRulesCreateRequestSchedule; export interface UpdateGatewayRuleRequest { accountId: string; /** Identify the API resource with a UUID. */ ruleId: string; /** Specify the action to perform when the associated traffic, identity, and device posture expressions either absent or evaluate to `true`. */ action: GatewayRulesUpdateRequestAction | (string & {}); /** Specify the rule name. */ name: string; /** Specify the rule description. */ description?: string; /** Specify the wirefilter expression used for device posture check. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ devicePosture?: string; /** Specify whether the rule is enabled. */ enabled?: boolean; /** Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This does not apply to HTTP or network policies. Settable only for `dns` rules. */ expiration?: GatewayRulesCreateRequestExpiration; /** Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value. */ filters?: GatewayRulesUpdateRequestFiltersList; /** Specify the wirefilter expression used for identity matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ identity?: string; /** Set the order of your rules. Lower values indicate higher precedence. At each processing phase, evaluate applicable rules in ascending order of this value. Refer to [Order of enforcement](http://developers.cloudflare.com/learning-paths/secure-internet-traffic/understand-policies/order-of-enforcement/#manage-precedence-with-terraform) to manage precedence via Terraform. */ precedence?: number; /** Defines settings for this rule. Settings apply only to specific rule types and must use compatible selectors. If Terraform detects drift, confirm the setting supports your rule type and check whether the API modifies the value. Use API-returned values in your configuration to prevent drift. */ ruleSettings?: GatewayRulesUpdateRequestRuleSettings; /** Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules. */ schedule?: GatewayRulesCreateRequestSchedule; /** Specify the wirefilter expression used for traffic matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ traffic?: string; } export const UpdateGatewayRuleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), ruleId: S.String.pipe(T.Label("rule_id")), action: GatewayRulesUpdateRequestAction, name: S.String, description: S.optional(S.String), devicePosture: S.optional(S.String.pipe(T.Body("device_posture"))), enabled: S.optional(S.Boolean), expiration: S.optional(GatewayRulesCreateRequestExpiration), filters: S.optional(GatewayRulesUpdateRequestFiltersList), identity: S.optional(S.String), precedence: S.optional(S.Number), ruleSettings: S.optional( GatewayRulesUpdateRequestRuleSettings.pipe(T.Body("rule_settings")), ), schedule: S.optional(GatewayRulesCreateRequestSchedule), traffic: S.optional(S.String), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/gateway/rules/{rule_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateGatewayRuleRequest", }) as any as S.Schema; export type GatewayRulesUpdateResponseAction = | "on" | "off" | "allow" | "block" | "scan" | "noscan" | "safesearch" | "ytrestricted" | "isolate" | "noisolate" | "override" | "l4_override" | "egress" | "resolve" | "quarantine" | "redirect"; export const GatewayRulesUpdateResponseAction = /*@__PURE__*/ S.String; export type GatewayRulesUpdateResponseFiltersItem = | "http" | "dns" | "l4" | "egress" | "dns_resolver"; export const GatewayRulesUpdateResponseFiltersItem = /*@__PURE__*/ S.String; export type GatewayRulesUpdateResponseFiltersList = Array; export const GatewayRulesUpdateResponseFiltersList = /*@__PURE__*/ S.Array( GatewayRulesUpdateResponseFiltersItem, ) as any as S.Schema; export type GatewayRulesUpdateResponseExpiration = GatewayRulesCreateResponseExpiration; export const GatewayRulesUpdateResponseExpiration = GatewayRulesCreateResponseExpiration; export type GatewayRulesUpdateResponseRuleSettingsAddHeadersValueList = Array; export const GatewayRulesUpdateResponseRuleSettingsAddHeadersValueList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayRulesUpdateResponseRuleSettingsAddHeadersMap = { [key: string]: | GatewayRulesUpdateResponseRuleSettingsAddHeadersValueList | undefined; }; export const GatewayRulesUpdateResponseRuleSettingsAddHeadersMap = /*@__PURE__*/ S.Record( S.String, GatewayRulesUpdateResponseRuleSettingsAddHeadersValueList, ) as any as S.Schema; export type GatewayRulesUpdateResponseRuleSettingsAuditSsh = GatewayRulesCreateResponseRuleSettingsAuditSsh; export const GatewayRulesUpdateResponseRuleSettingsAuditSsh = GatewayRulesCreateResponseRuleSettingsAuditSsh; export type GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsCopy = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsCopy = /*@__PURE__*/ S.String; export type GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsDownload = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsDownload = /*@__PURE__*/ S.String; export type GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsKeyboard = | "enabled" | "disabled"; export const GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsKeyboard = /*@__PURE__*/ S.String; export type GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsPaste = | "enabled" | "disabled" | "remote_only"; export const GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsPaste = /*@__PURE__*/ S.String; export type GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsPrinting = | "enabled" | "disabled"; export const GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsPrinting = /*@__PURE__*/ S.String; export type GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsUpload = | "enabled" | "disabled"; export const GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsUpload = /*@__PURE__*/ S.String; export type GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsVersion = | "v1" | "v2"; export const GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsVersion = /*@__PURE__*/ S.String; export interface GatewayRulesUpdateResponseRuleSettingsBisoAdminControls { /** Configure copy behavior. If set to remote_only, users cannot copy isolated content from the remote browser to the local clipboard. If this field is absent, copying remains enabled. Applies only when version == "v2". */ copy?: GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsCopy | null; /** Set to false to enable copy-pasting. Only applies when `version == "v1"`. */ dcp?: boolean | null; /** Set to false to enable downloading. Only applies when `version == "v1"`. */ dd?: boolean | null; /** Set to false to enable keyboard usage. Only applies when `version == "v1"`. */ dk?: boolean | null; /** Configure download behavior. When set to remote_only, users can view downloads but cannot save them. If this field is absent, downloading remains enabled. Applies only when version == "v2". */ download?: GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsDownload | null; /** Set to false to enable printing. Only applies when `version == "v1"`. */ dp?: boolean | null; /** Set to false to enable uploading. Only applies when `version == "v1"`. */ du?: boolean | null; /** Configure keyboard usage behavior. If this field is absent, keyboard usage remains enabled. Applies only when version == "v2". */ keyboard?: GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsKeyboard | null; /** Configure paste behavior. If set to remote_only, users cannot paste content from the local clipboard into isolated pages. If this field is absent, pasting remains enabled. Applies only when version == "v2". */ paste?: GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsPaste | null; /** Configure print behavior. Default, Printing is enabled. Applies only when version == "v2". */ printing?: GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsPrinting | null; /** Configure upload behavior. If this field is absent, uploading remains enabled. Applies only when version == "v2". */ upload?: GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsUpload | null; /** Indicate which version of the browser isolation controls should apply. */ version?: GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsVersion | null; /** Specify the watermark ID (UUID) to apply to the isolated browser session. When present, enables watermark rendering in the isolated browser. */ wmId?: string | null; } export const GatewayRulesUpdateResponseRuleSettingsBisoAdminControls = /*@__PURE__*/ S.suspend(() => S.Struct({ copy: S.optional( S.NullOr(GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsCopy), ), dcp: S.optional(S.NullOr(S.Boolean)), dd: S.optional(S.NullOr(S.Boolean)), dk: S.optional(S.NullOr(S.Boolean)), download: S.optional( S.NullOr( GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsDownload, ), ), dp: S.optional(S.NullOr(S.Boolean)), du: S.optional(S.NullOr(S.Boolean)), keyboard: S.optional( S.NullOr( GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsKeyboard, ), ), paste: S.optional( S.NullOr(GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsPaste), ), printing: S.optional( S.NullOr( GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsPrinting, ), ), upload: S.optional( S.NullOr(GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsUpload), ), version: S.optional( S.NullOr( GatewayRulesUpdateResponseRuleSettingsBisoAdminControlsVersion, ), ), wmId: S.optional(S.NullOr(S.String).pipe(T.Body("wm_id"))), }), ).annotate({ identifier: "GatewayRulesUpdateResponseRuleSettingsBisoAdminControls", }) as any as S.Schema; export type GatewayRulesUpdateResponseRuleSettingsBlockPage = GatewayRulesCreateResponseRuleSettingsBlockPage; export const GatewayRulesUpdateResponseRuleSettingsBlockPage = GatewayRulesCreateResponseRuleSettingsBlockPage; export type GatewayRulesUpdateResponseRuleSettingsCheckSession = GatewayRulesCreateResponseRuleSettingsCheckSession; export const GatewayRulesUpdateResponseRuleSettingsCheckSession = GatewayRulesCreateResponseRuleSettingsCheckSession; export type GatewayRulesUpdateResponseRuleSettingsDnsResolversIpv4Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item; export const GatewayRulesUpdateResponseRuleSettingsDnsResolversIpv4Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item; export type GatewayRulesUpdateResponseRuleSettingsDnsResolversIpv4List = Array; export const GatewayRulesUpdateResponseRuleSettingsDnsResolversIpv4List = /*@__PURE__*/ S.Array( GatewayRulesCreateResponseRuleSettingsDnsResolversIpv4Item, ) as any as S.Schema; export type GatewayRulesUpdateResponseRuleSettingsDnsResolversIpv6Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item; export const GatewayRulesUpdateResponseRuleSettingsDnsResolversIpv6Item = GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item; export type GatewayRulesUpdateResponseRuleSettingsDnsResolversIpv6List = Array; export const GatewayRulesUpdateResponseRuleSettingsDnsResolversIpv6List = /*@__PURE__*/ S.Array( GatewayRulesCreateResponseRuleSettingsDnsResolversIpv6Item, ) as any as S.Schema; export interface GatewayRulesUpdateResponseRuleSettingsDnsResolvers { ipv4?: GatewayRulesUpdateResponseRuleSettingsDnsResolversIpv4List | null; ipv6?: GatewayRulesUpdateResponseRuleSettingsDnsResolversIpv6List | null; } export const GatewayRulesUpdateResponseRuleSettingsDnsResolvers = /*@__PURE__*/ S.suspend(() => S.Struct({ ipv4: S.optional( S.NullOr(GatewayRulesUpdateResponseRuleSettingsDnsResolversIpv4List), ), ipv6: S.optional( S.NullOr(GatewayRulesUpdateResponseRuleSettingsDnsResolversIpv6List), ), }), ).annotate({ identifier: "GatewayRulesUpdateResponseRuleSettingsDnsResolvers", }) as any as S.Schema; export type GatewayRulesUpdateResponseRuleSettingsEgress = GatewayRulesCreateResponseRuleSettingsEgress; export const GatewayRulesUpdateResponseRuleSettingsEgress = GatewayRulesCreateResponseRuleSettingsEgress; export type GatewayRulesUpdateResponseRuleSettingsForensicCopy = GatewayRulesCreateResponseRuleSettingsForensicCopy; export const GatewayRulesUpdateResponseRuleSettingsForensicCopy = GatewayRulesCreateResponseRuleSettingsForensicCopy; export type GatewayRulesUpdateResponseRuleSettingsL4override = GatewayRulesCreateResponseRuleSettingsL4override; export const GatewayRulesUpdateResponseRuleSettingsL4override = GatewayRulesCreateResponseRuleSettingsL4override; export type GatewayRulesUpdateResponseRuleSettingsNotificationSettings = GatewayRulesCreateResponseRuleSettingsNotificationSettings; export const GatewayRulesUpdateResponseRuleSettingsNotificationSettings = GatewayRulesCreateResponseRuleSettingsNotificationSettings; export type GatewayRulesUpdateResponseRuleSettingsOverrideIpsList = Array; export const GatewayRulesUpdateResponseRuleSettingsOverrideIpsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type GatewayRulesUpdateResponseRuleSettingsPayloadLog = GatewayRulesCreateResponseRuleSettingsPayloadLog; export const GatewayRulesUpdateResponseRuleSettingsPayloadLog = GatewayRulesCreateResponseRuleSettingsPayloadLog; export type GatewayRulesUpdateResponseRuleSettingsQuarantineFileTypesItem = | "exe" | "pdf" | "doc" | "docm" | "docx" | "rtf" | "ppt" | "pptx" | "xls" | "xlsm" | "xlsx" | "zip" | "rar"; export const GatewayRulesUpdateResponseRuleSettingsQuarantineFileTypesItem = /*@__PURE__*/ S.String; export type GatewayRulesUpdateResponseRuleSettingsQuarantineFileTypesList = Array; export const GatewayRulesUpdateResponseRuleSettingsQuarantineFileTypesList = /*@__PURE__*/ S.Array( GatewayRulesUpdateResponseRuleSettingsQuarantineFileTypesItem, ) as any as S.Schema; export interface GatewayRulesUpdateResponseRuleSettingsQuarantine { /** Specify the types of files to sandbox. */ fileTypes?: GatewayRulesUpdateResponseRuleSettingsQuarantineFileTypesList | null; } export const GatewayRulesUpdateResponseRuleSettingsQuarantine = /*@__PURE__*/ S.suspend(() => S.Struct({ fileTypes: S.optional( S.NullOr( GatewayRulesUpdateResponseRuleSettingsQuarantineFileTypesList, ).pipe(T.Body("file_types")), ), }), ).annotate({ identifier: "GatewayRulesUpdateResponseRuleSettingsQuarantine", }) as any as S.Schema; export type GatewayRulesUpdateResponseRuleSettingsRedirect = GatewayRulesCreateResponseRuleSettingsRedirect; export const GatewayRulesUpdateResponseRuleSettingsRedirect = GatewayRulesCreateResponseRuleSettingsRedirect; export type GatewayRulesUpdateResponseRuleSettingsResolveDnsInternallyFallback = | "none" | "public_dns"; export const GatewayRulesUpdateResponseRuleSettingsResolveDnsInternallyFallback = /*@__PURE__*/ S.String; export interface GatewayRulesUpdateResponseRuleSettingsResolveDnsInternally { /** Specify the fallback behavior to apply when the internal DNS response code differs from 'NOERROR' or when the response data contains only CNAME records for 'A' or 'AAAA' queries. */ fallback?: GatewayRulesUpdateResponseRuleSettingsResolveDnsInternallyFallback | null; /** Specify the internal DNS view identifier to pass to the internal DNS service. */ viewId?: string | null; } export const GatewayRulesUpdateResponseRuleSettingsResolveDnsInternally = /*@__PURE__*/ S.suspend(() => S.Struct({ fallback: S.optional( S.NullOr( GatewayRulesUpdateResponseRuleSettingsResolveDnsInternallyFallback, ), ), viewId: S.optional(S.NullOr(S.String).pipe(T.Body("view_id"))), }), ).annotate({ identifier: "GatewayRulesUpdateResponseRuleSettingsResolveDnsInternally", }) as any as S.Schema; export type GatewayRulesUpdateResponseRuleSettingsUntrustedCertAction = | "pass_through" | "block" | "error"; export const GatewayRulesUpdateResponseRuleSettingsUntrustedCertAction = /*@__PURE__*/ S.String; export interface GatewayRulesUpdateResponseRuleSettingsUntrustedCert { /** Defines the action performed when an untrusted certificate seen. The default action an error with HTTP code 526. */ action?: GatewayRulesUpdateResponseRuleSettingsUntrustedCertAction | null; } export const GatewayRulesUpdateResponseRuleSettingsUntrustedCert = /*@__PURE__*/ S.suspend(() => S.Struct({ action: S.optional( S.NullOr(GatewayRulesUpdateResponseRuleSettingsUntrustedCertAction), ), }), ).annotate({ identifier: "GatewayRulesUpdateResponseRuleSettingsUntrustedCert", }) as any as S.Schema; export interface GatewayRulesUpdateResponseRuleSettings { /** Add custom headers to allowed requests as key-value pairs. Use header names as keys that map to arrays of header values. Settable only for `http` rules with the action set to `allow`. */ addHeaders?: GatewayRulesUpdateResponseRuleSettingsAddHeadersMap | null; /** Set to enable MSP children to bypass this rule. Only parent MSP accounts can set this. this rule. Settable for all types of rules. */ allowChildBypass?: boolean | null; /** Define the settings for the Audit SSH action. Settable only for `l4` rules with `audit_ssh` action. */ auditSsh?: GatewayRulesCreateResponseRuleSettingsAuditSsh | null; /** Configure browser isolation behavior. Settable only for `http` rules with the action set to `isolate`. */ bisoAdminControls?: GatewayRulesUpdateResponseRuleSettingsBisoAdminControls | null; /** Configure custom block page settings. If missing or null, use the account settings. Settable only for `http` rules with the action set to `block`. */ blockPage?: GatewayRulesCreateResponseRuleSettingsBlockPage | null; /** Enable the custom block page. Settable only for `dns` rules with action `block`. */ blockPageEnabled?: boolean | null; /** Explain why the rule blocks the request. The custom block page shows this text (if enabled). Settable only for `dns`, `l4`, and `http` rules when the action set to `block`. */ blockReason?: string | null; /** Set to enable MSP accounts to bypass their parent's rules. Only MSP child accounts can set this. Settable for all types of rules. */ bypassParentRule?: boolean | null; /** Configure session check behavior. Settable only for `l4` and `http` rules with the action set to `allow`. */ checkSession?: GatewayRulesCreateResponseRuleSettingsCheckSession | null; /** Configure custom resolvers to route queries that match the resolver policy. Unused with 'resolve_dns_through_cloudflare' or 'resolve_dns_internally' settings. DNS queries get routed to the address closest to their origin. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ dnsResolvers?: GatewayRulesUpdateResponseRuleSettingsDnsResolvers | null; /** Configure how Gateway Proxy traffic egresses. You can enable this setting for rules with Egress actions and filters, or omit it to indicate local egress via WARP IPs. Settable only for `egress` rules. */ egress?: GatewayRulesCreateResponseRuleSettingsEgress | null; /** Configure whether a copy of the HTTP request will be sent to storage when the rule matches. */ forensicCopy?: GatewayRulesCreateResponseRuleSettingsForensicCopy | null; /** Ignore category matches at CNAME domains in a response. When off, evaluate categories in this rule against all CNAME domain categories in the response. Settable only for `dns` and `dns_resolver` rules. */ ignoreCnameCategoryMatches?: boolean | null; /** Specify whether to disable DNSSEC validation (for Allow actions) [INSECURE]. Settable only for `dns` rules. */ insecureDisableDnssecValidation?: boolean | null; /** Enable IPs in DNS resolver category blocks. The system blocks only domain name categories unless you enable this setting. Settable only for `dns` and `dns_resolver` rules. */ ipCategories?: boolean | null; /** Indicates whether to include IPs in DNS resolver indicator feed blocks. Default, indicator feeds block only domain names. Settable only for `dns` and `dns_resolver` rules. */ ipIndicatorFeeds?: boolean | null; /** Send matching traffic to the supplied destination IP address and port. Settable only for `l4` rules with the action set to `l4_override`. */ l4override?: GatewayRulesCreateResponseRuleSettingsL4override | null; /** Configure a notification to display on the user's device when this rule matched. Settable for all types of rules with the action set to `block`. */ notificationSettings?: GatewayRulesCreateResponseRuleSettingsNotificationSettings | null; /** Defines a hostname for override, for the matching DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideHost?: string | null; /** Defines a an IP or set of IPs for overriding matched DNS queries. Settable only for `dns` rules with the action set to `override`. */ overrideIps?: GatewayRulesUpdateResponseRuleSettingsOverrideIpsList | null; /** Configure DLP payload logging. Settable only for `http` rules. */ payloadLog?: GatewayRulesCreateResponseRuleSettingsPayloadLog | null; /** Configure settings that apply to quarantine rules. Settable only for `http` rules. */ quarantine?: GatewayRulesUpdateResponseRuleSettingsQuarantine | null; /** Apply settings to redirect rules. Settable only for `http` rules with the action set to `redirect`. */ redirect?: GatewayRulesCreateResponseRuleSettingsRedirect | null; /** Configure to forward the query to the internal DNS service, passing the specified 'view_id' as input. Not used when 'dns_resolvers' is specified or 'resolve_dns_through_cloudflare' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsInternally?: GatewayRulesUpdateResponseRuleSettingsResolveDnsInternally | null; /** Enable to send queries that match the policy to Cloudflare's default 1.1.1.1 DNS resolver. Cannot set when 'dns_resolvers' specified or 'resolve_dns_internally' is set. Only valid when a rule's action set to 'resolve'. Settable only for `dns_resolver` rules. */ resolveDnsThroughCloudflare?: boolean | null; /** Configure behavior when an upstream certificate is invalid or an SSL error occurs. Settable only for `http` rules with the action set to `allow`. */ untrustedCert?: GatewayRulesUpdateResponseRuleSettingsUntrustedCert | null; } export const GatewayRulesUpdateResponseRuleSettings = /*@__PURE__*/ S.suspend( () => S.Struct({ addHeaders: S.optional( S.NullOr(GatewayRulesUpdateResponseRuleSettingsAddHeadersMap).pipe( T.Body("add_headers"), ), ), allowChildBypass: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_child_bypass")), ), auditSsh: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsAuditSsh).pipe( T.Body("audit_ssh"), ), ), bisoAdminControls: S.optional( S.NullOr(GatewayRulesUpdateResponseRuleSettingsBisoAdminControls).pipe( T.Body("biso_admin_controls"), ), ), blockPage: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsBlockPage).pipe( T.Body("block_page"), ), ), blockPageEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("block_page_enabled")), ), blockReason: S.optional(S.NullOr(S.String).pipe(T.Body("block_reason"))), bypassParentRule: S.optional( S.NullOr(S.Boolean).pipe(T.Body("bypass_parent_rule")), ), checkSession: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsCheckSession).pipe( T.Body("check_session"), ), ), dnsResolvers: S.optional( S.NullOr(GatewayRulesUpdateResponseRuleSettingsDnsResolvers).pipe( T.Body("dns_resolvers"), ), ), egress: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsEgress), ), forensicCopy: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsForensicCopy).pipe( T.Body("forensic_copy"), ), ), ignoreCnameCategoryMatches: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ignore_cname_category_matches")), ), insecureDisableDnssecValidation: S.optional( S.NullOr(S.Boolean).pipe(T.Body("insecure_disable_dnssec_validation")), ), ipCategories: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ip_categories")), ), ipIndicatorFeeds: S.optional( S.NullOr(S.Boolean).pipe(T.Body("ip_indicator_feeds")), ), l4override: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsL4override), ), notificationSettings: S.optional( S.NullOr( GatewayRulesCreateResponseRuleSettingsNotificationSettings, ).pipe(T.Body("notification_settings")), ), overrideHost: S.optional( S.NullOr(S.String).pipe(T.Body("override_host")), ), overrideIps: S.optional( S.NullOr(GatewayRulesUpdateResponseRuleSettingsOverrideIpsList).pipe( T.Body("override_ips"), ), ), payloadLog: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsPayloadLog).pipe( T.Body("payload_log"), ), ), quarantine: S.optional( S.NullOr(GatewayRulesUpdateResponseRuleSettingsQuarantine), ), redirect: S.optional( S.NullOr(GatewayRulesCreateResponseRuleSettingsRedirect), ), resolveDnsInternally: S.optional( S.NullOr( GatewayRulesUpdateResponseRuleSettingsResolveDnsInternally, ).pipe(T.Body("resolve_dns_internally")), ), resolveDnsThroughCloudflare: S.optional( S.NullOr(S.Boolean).pipe(T.Body("resolve_dns_through_cloudflare")), ), untrustedCert: S.optional( S.NullOr(GatewayRulesUpdateResponseRuleSettingsUntrustedCert).pipe( T.Body("untrusted_cert"), ), ), }), ).annotate({ identifier: "GatewayRulesUpdateResponseRuleSettings", }) as any as S.Schema; export type GatewayRulesUpdateResponseSchedule = GatewayRulesCreateResponseSchedule; export const GatewayRulesUpdateResponseSchedule = GatewayRulesCreateResponseSchedule; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateGatewayRuleResponse { /** Specify the action to perform when the associated traffic, identity, and device posture expressions either absent or evaluate to `true`. */ action: GatewayRulesUpdateResponseAction; /** Specify whether the rule is enabled. */ enabled: boolean; /** Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value. */ filters: GatewayRulesUpdateResponseFiltersList; /** Specify the rule name. */ name: string; /** Set the order of your rules. Lower values indicate higher precedence. At each processing phase, evaluate applicable rules in ascending order of this value. Refer to [Order of enforcement](http://developers.cloudflare.com/learning-paths/secure-internet-traffic/understand-policies/order-of-enforcement/#manage-precedence-with-terraform) to manage precedence via Terraform. */ precedence: number; /** Specify the wirefilter expression used for traffic matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ traffic: string; /** Identify the API resource with a UUID. */ id?: string | null; createdAt?: string | null; /** Indicate the date of deletion, if any. */ deletedAt?: string | null; /** Specify the rule description. */ description?: string | null; /** Specify the wirefilter expression used for device posture check. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ devicePosture?: string | null; /** Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This does not apply to HTTP or network policies. Settable only for `dns` rules. */ expiration?: GatewayRulesCreateResponseExpiration | null; /** Specify the wirefilter expression used for identity matching. The API automatically formats and sanitizes expressions before storing them. To prevent Terraform state drift, use the formatted expression returned in the API response. */ identity?: string | null; /** Indicate that this rule is shared via the Orgs API and read only. */ readOnly?: boolean | null; /** Defines settings for this rule. Settings apply only to specific rule types and must use compatible selectors. If Terraform detects drift, confirm the setting supports your rule type and check whether the API modifies the value. Use API-returned values in your configuration to prevent drift. */ ruleSettings?: GatewayRulesUpdateResponseRuleSettings | null; /** Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules. */ schedule?: GatewayRulesCreateResponseSchedule | null; /** Indicate that this rule is sharable via the Orgs API. */ sharable?: boolean | null; /** Provide the account tag of the account that created the rule. */ sourceAccount?: string | null; updatedAt?: string | null; /** Indicate the version number of the rule(read-only). */ version?: number | null; /** Indicate a warning for a misconfigured rule, if any. */ warningStatus?: string | null; } export const UpdateGatewayRuleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ action: GatewayRulesUpdateResponseAction, enabled: S.Boolean, filters: GatewayRulesUpdateResponseFiltersList, name: S.String, precedence: S.Number, traffic: S.String, id: S.optional(S.NullOr(S.String)), createdAt: S.optional(S.NullOr(S.String).pipe(T.Body("created_at"))), deletedAt: S.optional(S.NullOr(S.String).pipe(T.Body("deleted_at"))), description: S.optional(S.NullOr(S.String)), devicePosture: S.optional( S.NullOr(S.String).pipe(T.Body("device_posture")), ), expiration: S.optional(S.NullOr(GatewayRulesCreateResponseExpiration)), identity: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), ruleSettings: S.optional( S.NullOr(GatewayRulesUpdateResponseRuleSettings).pipe( T.Body("rule_settings"), ), ), schedule: S.optional(S.NullOr(GatewayRulesCreateResponseSchedule)), sharable: S.optional(S.NullOr(S.Boolean)), sourceAccount: S.optional( S.NullOr(S.String).pipe(T.Body("source_account")), ), updatedAt: S.optional(S.NullOr(S.String).pipe(T.Body("updated_at"))), version: S.optional(S.NullOr(S.Number)), warningStatus: S.optional( S.NullOr(S.String).pipe(T.Body("warning_status")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateGatewayRuleResponse", }) as any as S.Schema; export type IdentityProvidersUpdateRequestConfigAzureADClaimsList = Array; export const IdentityProvidersUpdateRequestConfigAzureADClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersUpdateRequestConfigAzureADPrompt = | "login" | "select_account" | "none"; export const IdentityProvidersUpdateRequestConfigAzureADPrompt = /*@__PURE__*/ S.String; export interface IdentityProvidersUpdateRequestConfigAzureAD { /** Custom claims */ claims?: IdentityProvidersUpdateRequestConfigAzureADClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** Should Cloudflare try to load authentication contexts from your account */ conditionalAccessEnabled?: boolean; /** Your Azure directory uuid */ directoryId?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; /** Indicates the type of user interaction that is required. prompt=login forces the user to enter their credentials on that request, negating single-sign on. prompt=none is the opposite. It ensures that the user isn't presented with any interactive prompt. If the request can't be completed silently by using single-sign on, the Microsoft identity platform returns an interaction_required error. prompt=select_account interrupts single sign-on providing account selection experience listing all the accounts either in session or any remembered account or an option to choose to use a different account altogether. */ prompt?: IdentityProvidersUpdateRequestConfigAzureADPrompt | (string & {}); /** Should Cloudflare try to load groups from your account */ supportGroups?: boolean; } export const IdentityProvidersUpdateRequestConfigAzureAD = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional(IdentityProvidersUpdateRequestConfigAzureADClaimsList), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), conditionalAccessEnabled: S.optional( S.Boolean.pipe(T.Body("conditional_access_enabled")), ), directoryId: S.optional(S.String.pipe(T.Body("directory_id"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), prompt: S.optional(IdentityProvidersUpdateRequestConfigAzureADPrompt), supportGroups: S.optional(S.Boolean.pipe(T.Body("support_groups"))), }), ).annotate({ identifier: "IdentityProvidersUpdateRequestConfigAzureAD", }) as any as S.Schema; export type IdentityProvidersUpdateRequestConfigAccessCentrifyClaimsList = Array; export const IdentityProvidersUpdateRequestConfigAccessCentrifyClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateRequestConfigAccessCentrify { /** Your centrify account url */ centrifyAccount?: string; /** Your centrify app id */ centrifyAppId?: string; /** Custom claims */ claims?: IdentityProvidersUpdateRequestConfigAccessCentrifyClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; } export const IdentityProvidersUpdateRequestConfigAccessCentrify = /*@__PURE__*/ S.suspend(() => S.Struct({ centrifyAccount: S.optional(S.String.pipe(T.Body("centrify_account"))), centrifyAppId: S.optional(S.String.pipe(T.Body("centrify_app_id"))), claims: S.optional( IdentityProvidersUpdateRequestConfigAccessCentrifyClaimsList, ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), }), ).annotate({ identifier: "IdentityProvidersUpdateRequestConfigAccessCentrify", }) as any as S.Schema; export type IdentityProvidersUpdateRequestConfigAccessFacebook = IdentityProvidersCreateRequestConfigAccessFacebook; export const IdentityProvidersUpdateRequestConfigAccessFacebook = IdentityProvidersCreateRequestConfigAccessFacebook; export type IdentityProvidersUpdateRequestConfigAccessGoogleClaimsList = Array; export const IdentityProvidersUpdateRequestConfigAccessGoogleClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateRequestConfigAccessGoogle { /** Custom claims */ claims?: IdentityProvidersUpdateRequestConfigAccessGoogleClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; } export const IdentityProvidersUpdateRequestConfigAccessGoogle = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( IdentityProvidersUpdateRequestConfigAccessGoogleClaimsList, ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), }), ).annotate({ identifier: "IdentityProvidersUpdateRequestConfigAccessGoogle", }) as any as S.Schema; export type IdentityProvidersUpdateRequestConfigAccessGoogleAppsClaimsList = Array; export const IdentityProvidersUpdateRequestConfigAccessGoogleAppsClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateRequestConfigAccessGoogleApps { /** Your companies TLD */ appsDomain?: string; /** Custom claims */ claims?: IdentityProvidersUpdateRequestConfigAccessGoogleAppsClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; } export const IdentityProvidersUpdateRequestConfigAccessGoogleApps = /*@__PURE__*/ S.suspend(() => S.Struct({ appsDomain: S.optional(S.String.pipe(T.Body("apps_domain"))), claims: S.optional( IdentityProvidersUpdateRequestConfigAccessGoogleAppsClaimsList, ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), }), ).annotate({ identifier: "IdentityProvidersUpdateRequestConfigAccessGoogleApps", }) as any as S.Schema; export type IdentityProvidersUpdateRequestConfigAccessOIDCClaimsList = Array; export const IdentityProvidersUpdateRequestConfigAccessOIDCClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersUpdateRequestConfigAccessOIDCScopesList = Array; export const IdentityProvidersUpdateRequestConfigAccessOIDCScopesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateRequestConfigAccessOIDC { /** The authorization_endpoint URL of your IdP */ authUrl?: string; /** The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens */ certsUrl?: string; /** Custom claims */ claims?: IdentityProvidersUpdateRequestConfigAccessOIDCClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; /** Enable Proof Key for Code Exchange (PKCE) */ pkceEnabled?: boolean; /** OAuth scopes */ scopes?: IdentityProvidersUpdateRequestConfigAccessOIDCScopesList; /** The token_endpoint URL of your IdP */ tokenUrl?: string; } export const IdentityProvidersUpdateRequestConfigAccessOIDC = /*@__PURE__*/ S.suspend(() => S.Struct({ authUrl: S.optional(S.String.pipe(T.Body("auth_url"))), certsUrl: S.optional(S.String.pipe(T.Body("certs_url"))), claims: S.optional( IdentityProvidersUpdateRequestConfigAccessOIDCClaimsList, ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), pkceEnabled: S.optional(S.Boolean.pipe(T.Body("pkce_enabled"))), scopes: S.optional( IdentityProvidersUpdateRequestConfigAccessOIDCScopesList, ), tokenUrl: S.optional(S.String.pipe(T.Body("token_url"))), }), ).annotate({ identifier: "IdentityProvidersUpdateRequestConfigAccessOIDC", }) as any as S.Schema; export type IdentityProvidersUpdateRequestConfigAccessOktaClaimsList = Array; export const IdentityProvidersUpdateRequestConfigAccessOktaClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateRequestConfigAccessOkta { /** Your okta authorization server id */ authorizationServerId?: string; /** Custom claims */ claims?: IdentityProvidersUpdateRequestConfigAccessOktaClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; /** Your okta account url */ oktaAccount?: string; } export const IdentityProvidersUpdateRequestConfigAccessOkta = /*@__PURE__*/ S.suspend(() => S.Struct({ authorizationServerId: S.optional( S.String.pipe(T.Body("authorization_server_id")), ), claims: S.optional( IdentityProvidersUpdateRequestConfigAccessOktaClaimsList, ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), oktaAccount: S.optional(S.String.pipe(T.Body("okta_account"))), }), ).annotate({ identifier: "IdentityProvidersUpdateRequestConfigAccessOkta", }) as any as S.Schema; export type IdentityProvidersUpdateRequestConfigAccessOneloginClaimsList = Array; export const IdentityProvidersUpdateRequestConfigAccessOneloginClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateRequestConfigAccessOnelogin { /** Custom claims */ claims?: IdentityProvidersUpdateRequestConfigAccessOneloginClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; /** Your OneLogin account url */ oneloginAccount?: string; } export const IdentityProvidersUpdateRequestConfigAccessOnelogin = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( IdentityProvidersUpdateRequestConfigAccessOneloginClaimsList, ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), oneloginAccount: S.optional(S.String.pipe(T.Body("onelogin_account"))), }), ).annotate({ identifier: "IdentityProvidersUpdateRequestConfigAccessOnelogin", }) as any as S.Schema; export type IdentityProvidersUpdateRequestConfigAccessPingoneClaimsList = Array; export const IdentityProvidersUpdateRequestConfigAccessPingoneClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateRequestConfigAccessPingone { /** Custom claims */ claims?: IdentityProvidersUpdateRequestConfigAccessPingoneClaimsList; /** Your OAuth Client ID */ clientId?: string; /** Your OAuth Client Secret */ clientSecret?: string; /** The claim name for email in the id_token response. */ emailClaimName?: string; /** Your PingOne environment identifier */ pingEnvId?: string; } export const IdentityProvidersUpdateRequestConfigAccessPingone = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( IdentityProvidersUpdateRequestConfigAccessPingoneClaimsList, ), clientId: S.optional(S.String.pipe(T.Body("client_id"))), clientSecret: S.optional(S.String.pipe(T.Body("client_secret"))), emailClaimName: S.optional(S.String.pipe(T.Body("email_claim_name"))), pingEnvId: S.optional(S.String.pipe(T.Body("ping_env_id"))), }), ).annotate({ identifier: "IdentityProvidersUpdateRequestConfigAccessPingone", }) as any as S.Schema; export type IdentityProvidersUpdateRequestConfigAccessSAMLAttributesList = Array; export const IdentityProvidersUpdateRequestConfigAccessSAMLAttributesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersUpdateRequestConfigAccessSAMLHeaderAttributesItem = IdentityProvidersCreateRequestConfigAccessSAMLHeaderAttributesItem; export const IdentityProvidersUpdateRequestConfigAccessSAMLHeaderAttributesItem = IdentityProvidersCreateRequestConfigAccessSAMLHeaderAttributesItem; export type IdentityProvidersUpdateRequestConfigAccessSAMLHeaderAttributesList = Array; export const IdentityProvidersUpdateRequestConfigAccessSAMLHeaderAttributesList = /*@__PURE__*/ S.Array( IdentityProvidersCreateRequestConfigAccessSAMLHeaderAttributesItem, ) as any as S.Schema; export type IdentityProvidersUpdateRequestConfigAccessSAMLIdpPublicCertsList = Array; export const IdentityProvidersUpdateRequestConfigAccessSAMLIdpPublicCertsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateRequestConfigAccessSAML { /** A list of SAML attribute names that will be added to your signed JWT token and can be used in SAML policy rules. */ attributes?: IdentityProvidersUpdateRequestConfigAccessSAMLAttributesList; /** The attribute name for email in the SAML response. */ emailAttributeName?: string; /** Enable SAML assertion encryption. When enabled, the Identity Provider will encrypt */ enableEncryption?: boolean; /** Add a list of attribute names that will be returned in the response header from the Access callback. */ headerAttributes?: IdentityProvidersUpdateRequestConfigAccessSAMLHeaderAttributesList; /** X509 certificate to verify the signature in the SAML authentication response */ idpPublicCerts?: IdentityProvidersUpdateRequestConfigAccessSAMLIdpPublicCertsList; /** IdP Entity ID or Issuer URL */ issuerUrl?: string; /** Sign the SAML authentication request with Access credentials. To verify the signature, use the public key from the Access certs endpoints. */ signRequest?: boolean; /** URL to send the SAML authentication requests to */ ssoTargetUrl?: string; } export const IdentityProvidersUpdateRequestConfigAccessSAML = /*@__PURE__*/ S.suspend(() => S.Struct({ attributes: S.optional( IdentityProvidersUpdateRequestConfigAccessSAMLAttributesList, ), emailAttributeName: S.optional( S.String.pipe(T.Body("email_attribute_name")), ), enableEncryption: S.optional(S.Boolean.pipe(T.Body("enable_encryption"))), headerAttributes: S.optional( IdentityProvidersUpdateRequestConfigAccessSAMLHeaderAttributesList.pipe( T.Body("header_attributes"), ), ), idpPublicCerts: S.optional( IdentityProvidersUpdateRequestConfigAccessSAMLIdpPublicCertsList.pipe( T.Body("idp_public_certs"), ), ), issuerUrl: S.optional(S.String.pipe(T.Body("issuer_url"))), signRequest: S.optional(S.Boolean.pipe(T.Body("sign_request"))), ssoTargetUrl: S.optional(S.String.pipe(T.Body("sso_target_url"))), }), ).annotate({ identifier: "IdentityProvidersUpdateRequestConfigAccessSAML", }) as any as S.Schema; export type IdentityProvidersUpdateRequestConfigAccessOnetimepin = IdentityProvidersCreateRequestConfigAccessOnetimepin; export const IdentityProvidersUpdateRequestConfigAccessOnetimepin = IdentityProvidersCreateRequestConfigAccessOnetimepin; export type IdentityProvidersUpdateRequestConfigAccessCloudflare = IdentityProvidersCreateRequestConfigAccessCloudflare; export const IdentityProvidersUpdateRequestConfigAccessCloudflare = IdentityProvidersCreateRequestConfigAccessCloudflare; export type IdentityProvidersUpdateRequestConfig = | IdentityProvidersUpdateRequestConfigAzureAD | IdentityProvidersUpdateRequestConfigAccessCentrify | IdentityProvidersCreateRequestConfigAccessFacebook | IdentityProvidersUpdateRequestConfigAccessGoogle | IdentityProvidersUpdateRequestConfigAccessGoogleApps | IdentityProvidersUpdateRequestConfigAccessOIDC | IdentityProvidersUpdateRequestConfigAccessOkta | IdentityProvidersUpdateRequestConfigAccessOnelogin | IdentityProvidersUpdateRequestConfigAccessPingone | IdentityProvidersUpdateRequestConfigAccessSAML | IdentityProvidersCreateRequestConfigAccessOnetimepin | IdentityProvidersCreateRequestConfigAccessCloudflare; export const IdentityProvidersUpdateRequestConfig = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "claims", "clientId", "clientSecret", "conditionalAccessEnabled", "directoryId", "emailClaimName", "prompt", "supportGroups", ], [ "centrifyAccount", "centrifyAppId", "claims", "clientId", "clientSecret", "emailClaimName", ], ["clientId", "clientSecret"], ["claims", "clientId", "clientSecret", "emailClaimName"], ["appsDomain", "claims", "clientId", "clientSecret", "emailClaimName"], [ "authUrl", "certsUrl", "claims", "clientId", "clientSecret", "emailClaimName", "pkceEnabled", "scopes", "tokenUrl", ], [ "authorizationServerId", "claims", "clientId", "clientSecret", "emailClaimName", "oktaAccount", ], [ "claims", "clientId", "clientSecret", "emailClaimName", "oneloginAccount", ], ["claims", "clientId", "clientSecret", "emailClaimName", "pingEnvId"], [ "attributes", "emailAttributeName", "enableEncryption", "headerAttributes", "idpPublicCerts", "issuerUrl", "signRequest", "ssoTargetUrl", ], ["redirectUrl"], ["redirectUrl", "restrictToAccountMembers"], ]), ); export type IdentityProvidersUpdateRequestTypeAzureAD = | "onetimepin" | "azureAD" | "saml" | "centrify" | "facebook" | "github" | "google-apps" | "google" | "linkedin" | "oidc" | "okta" | "onelogin" | "pingone" | "yandex" | "cloudflare"; export const IdentityProvidersUpdateRequestTypeAzureAD = /*@__PURE__*/ S.String; export type IdentityProvidersUpdateRequestSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateRequestSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateRequestSamlCertificateSet = IdentityProvidersCreateRequestSamlCertificateSet; export const IdentityProvidersUpdateRequestSamlCertificateSet = IdentityProvidersCreateRequestSamlCertificateSet; export type IdentityProvidersUpdateRequestScimConfigAzureADIdentityUpdateBehavior = | "automatic" | "reauth" | "no_action"; export const IdentityProvidersUpdateRequestScimConfigAzureADIdentityUpdateBehavior = /*@__PURE__*/ S.String; export interface IdentityProvidersUpdateRequestScimConfigAzureAD { /** A flag to enable or disable SCIM for the identity provider. */ enabled?: boolean; /** Indicates how a SCIM event updates a user identity used for policy evaluation. Use "automatic" to automatically update a user's identity and augment it with fields from the SCIM user resource. Use "reauth" to force re-authentication on group membership updates, user identity update will only occur after successful re-authentication. With "reauth" identities will not contain fields from the SCIM user resource. With "no_action" identities will not be changed by SCIM updates in any way and users will not be prompted to reauthenticate. */ identityUpdateBehavior?: | IdentityProvidersUpdateRequestScimConfigAzureADIdentityUpdateBehavior | (string & {}); /** The base URL of Cloudflare's SCIM V2.0 API endpoint. */ scimBaseUrl?: string; /** A flag to remove a user's seat in Zero Trust when they have been deprovisioned in the Identity Provider. This cannot be enabled unless user_deprovision is also enabled. */ seatDeprovision?: boolean; /** A read-only token generated when the SCIM integration is enabled for the first time. It is redacted on subsequent requests. If you lose this you will need to refresh it at /access/identity_providers/:idpID/refresh_scim_secret. */ secret?: string; /** A flag to enable revoking a user's session in Access and Gateway when they have been deprovisioned in the Identity Provider. */ userDeprovision?: boolean; } export const IdentityProvidersUpdateRequestScimConfigAzureAD = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.Boolean), identityUpdateBehavior: S.optional( IdentityProvidersUpdateRequestScimConfigAzureADIdentityUpdateBehavior.pipe( T.Body("identity_update_behavior"), ), ), scimBaseUrl: S.optional(S.String.pipe(T.Body("scim_base_url"))), seatDeprovision: S.optional(S.Boolean.pipe(T.Body("seat_deprovision"))), secret: S.optional(S.String), userDeprovision: S.optional(S.Boolean.pipe(T.Body("user_deprovision"))), }), ).annotate({ identifier: "IdentityProvidersUpdateRequestScimConfigAzureAD", }) as any as S.Schema; export interface UpdateIdentityProviderForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** UUID. */ identityProviderId: string; /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersUpdateRequestConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersUpdateRequestTypeAzureAD | (string & {}); /** UUID. */ id?: string; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateRequestSamlCertificateSet; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersUpdateRequestScimConfigAzureAD; } export const UpdateIdentityProviderForAccountRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), identityProviderId: S.String.pipe(T.Label("identity_provider_id")), config: IdentityProvidersUpdateRequestConfig, name: S.String, type: IdentityProvidersUpdateRequestTypeAzureAD, id: S.optional(S.String), readOnly: S.optional(S.Boolean.pipe(T.Body("read_only"))), samlCertificateSet: S.optional( IdentityProvidersCreateRequestSamlCertificateSet.pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.String.pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( IdentityProvidersUpdateRequestScimConfigAzureAD.pipe( T.Body("scim_config"), ), ), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/identity_providers/{identity_provider_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateIdentityProviderForAccountRequest", }) as any as S.Schema; export type IdentityProvidersUpdateResultAzureADConfigClaimsList = Array; export const IdentityProvidersUpdateResultAzureADConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersUpdateResultAzureADConfigPrompt = | "login" | "select_account" | "none"; export const IdentityProvidersUpdateResultAzureADConfigPrompt = /*@__PURE__*/ S.String; export interface IdentityProvidersUpdateResultAzureADConfig { /** Custom claims */ claims?: IdentityProvidersUpdateResultAzureADConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** Should Cloudflare try to load authentication contexts from your account */ conditionalAccessEnabled?: boolean | null; /** Your Azure directory uuid */ directoryId?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Indicates the type of user interaction that is required. prompt=login forces the user to enter their credentials on that request, negating single-sign on. prompt=none is the opposite. It ensures that the user isn't presented with any interactive prompt. If the request can't be completed silently by using single-sign on, the Microsoft identity platform returns an interaction_required error. prompt=select_account interrupts single sign-on providing account selection experience listing all the accounts either in session or any remembered account or an option to choose to use a different account altogether. */ prompt?: IdentityProvidersUpdateResultAzureADConfigPrompt | null; /** Should Cloudflare try to load groups from your account */ supportGroups?: boolean | null; } export const IdentityProvidersUpdateResultAzureADConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersUpdateResultAzureADConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), conditionalAccessEnabled: S.optional( S.NullOr(S.Boolean).pipe(T.Body("conditional_access_enabled")), ), directoryId: S.optional(S.NullOr(S.String).pipe(T.Body("directory_id"))), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), prompt: S.optional( S.NullOr(IdentityProvidersUpdateResultAzureADConfigPrompt), ), supportGroups: S.optional( S.NullOr(S.Boolean).pipe(T.Body("support_groups")), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAzureADConfig", }) as any as S.Schema; export type IdentityProvidersUpdateResultAzureADType = | "onetimepin" | "azureAD" | "saml" | "centrify" | "facebook" | "github" | "google-apps" | "google" | "linkedin" | "oidc" | "okta" | "onelogin" | "pingone" | "yandex" | "cloudflare"; export const IdentityProvidersUpdateResultAzureADType = /*@__PURE__*/ S.String; export type IdentityProvidersUpdateResultAzureADSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateResultAzureADSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateResultAzureADSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersUpdateResultAzureADSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export type IdentityProvidersUpdateResultAzureADScimConfigIdentityUpdateBehavior = | "automatic" | "reauth" | "no_action"; export const IdentityProvidersUpdateResultAzureADScimConfigIdentityUpdateBehavior = /*@__PURE__*/ S.String; export interface IdentityProvidersUpdateResultAzureADScimConfig { /** A flag to enable or disable SCIM for the identity provider. */ enabled?: boolean | null; /** Indicates how a SCIM event updates a user identity used for policy evaluation. Use "automatic" to automatically update a user's identity and augment it with fields from the SCIM user resource. Use "reauth" to force re-authentication on group membership updates, user identity update will only occur after successful re-authentication. With "reauth" identities will not contain fields from the SCIM user resource. With "no_action" identities will not be changed by SCIM updates in any way and users will not be prompted to reauthenticate. */ identityUpdateBehavior?: IdentityProvidersUpdateResultAzureADScimConfigIdentityUpdateBehavior | null; /** The base URL of Cloudflare's SCIM V2.0 API endpoint. */ scimBaseUrl?: string | null; /** A flag to remove a user's seat in Zero Trust when they have been deprovisioned in the Identity Provider. This cannot be enabled unless user_deprovision is also enabled. */ seatDeprovision?: boolean | null; /** A read-only token generated when the SCIM integration is enabled for the first time. It is redacted on subsequent requests. If you lose this you will need to refresh it at /access/identity_providers/:idpID/refresh_scim_secret. */ secret?: string | null; /** A flag to enable revoking a user's session in Access and Gateway when they have been deprovisioned in the Identity Provider. */ userDeprovision?: boolean | null; } export const IdentityProvidersUpdateResultAzureADScimConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ enabled: S.optional(S.NullOr(S.Boolean)), identityUpdateBehavior: S.optional( S.NullOr( IdentityProvidersUpdateResultAzureADScimConfigIdentityUpdateBehavior, ).pipe(T.Body("identity_update_behavior")), ), scimBaseUrl: S.optional(S.NullOr(S.String).pipe(T.Body("scim_base_url"))), seatDeprovision: S.optional( S.NullOr(S.Boolean).pipe(T.Body("seat_deprovision")), ), secret: S.optional(S.NullOr(S.String)), userDeprovision: S.optional( S.NullOr(S.Boolean).pipe(T.Body("user_deprovision")), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAzureADScimConfig", }) as any as S.Schema; export interface IdentityProvidersUpdateResultAzureAD { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersUpdateResultAzureADConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersUpdateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersUpdateResultAzureADScimConfig | null; } export const IdentityProvidersUpdateResultAzureAD = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersUpdateResultAzureADConfig, name: S.String, type: IdentityProvidersUpdateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersUpdateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAzureAD", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessCentrifyConfigClaimsList = Array; export const IdentityProvidersUpdateResultAccessCentrifyConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateResultAccessCentrifyConfig { /** Your centrify account url */ centrifyAccount?: string | null; /** Your centrify app id */ centrifyAppId?: string | null; /** Custom claims */ claims?: IdentityProvidersUpdateResultAccessCentrifyConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; } export const IdentityProvidersUpdateResultAccessCentrifyConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ centrifyAccount: S.optional( S.NullOr(S.String).pipe(T.Body("centrify_account")), ), centrifyAppId: S.optional( S.NullOr(S.String).pipe(T.Body("centrify_app_id")), ), claims: S.optional( S.NullOr(IdentityProvidersUpdateResultAccessCentrifyConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessCentrifyConfig", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessCentrifySamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateResultAccessCentrifySamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateResultAccessCentrifySamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersUpdateResultAccessCentrifySamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersUpdateResultAccessCentrify { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersUpdateResultAccessCentrifyConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersUpdateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersUpdateResultAzureADScimConfig | null; } export const IdentityProvidersUpdateResultAccessCentrify = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersUpdateResultAccessCentrifyConfig, name: S.String, type: IdentityProvidersUpdateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersUpdateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessCentrify", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessFacebookConfig = IdentityProvidersCreateResultAccessFacebookConfig; export const IdentityProvidersUpdateResultAccessFacebookConfig = IdentityProvidersCreateResultAccessFacebookConfig; export type IdentityProvidersUpdateResultAccessFacebookSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateResultAccessFacebookSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateResultAccessFacebookSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersUpdateResultAccessFacebookSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersUpdateResultAccessFacebook { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessFacebookConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersUpdateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersUpdateResultAzureADScimConfig | null; } export const IdentityProvidersUpdateResultAccessFacebook = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessFacebookConfig, name: S.String, type: IdentityProvidersUpdateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersUpdateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessFacebook", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessGitHubSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateResultAccessGitHubSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateResultAccessGitHubSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersUpdateResultAccessGitHubSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export type IdentityProvidersUpdateResultAccessGitHub = IdentityProvidersUpdateResultAccessFacebook; export const IdentityProvidersUpdateResultAccessGitHub = IdentityProvidersUpdateResultAccessFacebook; export type IdentityProvidersUpdateResultAccessGoogleConfigClaimsList = Array; export const IdentityProvidersUpdateResultAccessGoogleConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateResultAccessGoogleConfig { /** Custom claims */ claims?: IdentityProvidersUpdateResultAccessGoogleConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; } export const IdentityProvidersUpdateResultAccessGoogleConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersUpdateResultAccessGoogleConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessGoogleConfig", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessGoogleSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateResultAccessGoogleSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateResultAccessGoogleSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersUpdateResultAccessGoogleSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersUpdateResultAccessGoogle { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersUpdateResultAccessGoogleConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersUpdateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersUpdateResultAzureADScimConfig | null; } export const IdentityProvidersUpdateResultAccessGoogle = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersUpdateResultAccessGoogleConfig, name: S.String, type: IdentityProvidersUpdateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersUpdateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessGoogle", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessGoogleAppsConfigClaimsList = Array; export const IdentityProvidersUpdateResultAccessGoogleAppsConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateResultAccessGoogleAppsConfig { /** Your companies TLD */ appsDomain?: string | null; /** Custom claims */ claims?: IdentityProvidersUpdateResultAccessGoogleAppsConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; } export const IdentityProvidersUpdateResultAccessGoogleAppsConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ appsDomain: S.optional(S.NullOr(S.String).pipe(T.Body("apps_domain"))), claims: S.optional( S.NullOr(IdentityProvidersUpdateResultAccessGoogleAppsConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessGoogleAppsConfig", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessGoogleAppsSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateResultAccessGoogleAppsSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateResultAccessGoogleAppsSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersUpdateResultAccessGoogleAppsSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersUpdateResultAccessGoogleApps { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersUpdateResultAccessGoogleAppsConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersUpdateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersUpdateResultAzureADScimConfig | null; } export const IdentityProvidersUpdateResultAccessGoogleApps = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersUpdateResultAccessGoogleAppsConfig, name: S.String, type: IdentityProvidersUpdateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersUpdateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessGoogleApps", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessLinkedinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateResultAccessLinkedinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateResultAccessLinkedinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersUpdateResultAccessLinkedinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export type IdentityProvidersUpdateResultAccessLinkedin = IdentityProvidersUpdateResultAccessFacebook; export const IdentityProvidersUpdateResultAccessLinkedin = IdentityProvidersUpdateResultAccessFacebook; export type IdentityProvidersUpdateResultAccessOIDCConfigClaimsList = Array; export const IdentityProvidersUpdateResultAccessOIDCConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersUpdateResultAccessOIDCConfigScopesList = Array; export const IdentityProvidersUpdateResultAccessOIDCConfigScopesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateResultAccessOIDCConfig { /** The authorization_endpoint URL of your IdP */ authUrl?: string | null; /** The jwks_uri endpoint of your IdP to allow the IdP keys to sign the tokens */ certsUrl?: string | null; /** Custom claims */ claims?: IdentityProvidersUpdateResultAccessOIDCConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Enable Proof Key for Code Exchange (PKCE) */ pkceEnabled?: boolean | null; /** OAuth scopes */ scopes?: IdentityProvidersUpdateResultAccessOIDCConfigScopesList | null; /** The token_endpoint URL of your IdP */ tokenUrl?: string | null; } export const IdentityProvidersUpdateResultAccessOIDCConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ authUrl: S.optional(S.NullOr(S.String).pipe(T.Body("auth_url"))), certsUrl: S.optional(S.NullOr(S.String).pipe(T.Body("certs_url"))), claims: S.optional( S.NullOr(IdentityProvidersUpdateResultAccessOIDCConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), pkceEnabled: S.optional(S.NullOr(S.Boolean).pipe(T.Body("pkce_enabled"))), scopes: S.optional( S.NullOr(IdentityProvidersUpdateResultAccessOIDCConfigScopesList), ), tokenUrl: S.optional(S.NullOr(S.String).pipe(T.Body("token_url"))), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessOIDCConfig", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessOIDCSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateResultAccessOIDCSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateResultAccessOIDCSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersUpdateResultAccessOIDCSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersUpdateResultAccessOIDC { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersUpdateResultAccessOIDCConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersUpdateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersUpdateResultAzureADScimConfig | null; } export const IdentityProvidersUpdateResultAccessOIDC = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersUpdateResultAccessOIDCConfig, name: S.String, type: IdentityProvidersUpdateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersUpdateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessOIDC", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessOktaConfigClaimsList = Array; export const IdentityProvidersUpdateResultAccessOktaConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateResultAccessOktaConfig { /** Your okta authorization server id */ authorizationServerId?: string | null; /** Custom claims */ claims?: IdentityProvidersUpdateResultAccessOktaConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Your okta account url */ oktaAccount?: string | null; } export const IdentityProvidersUpdateResultAccessOktaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ authorizationServerId: S.optional( S.NullOr(S.String).pipe(T.Body("authorization_server_id")), ), claims: S.optional( S.NullOr(IdentityProvidersUpdateResultAccessOktaConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), oktaAccount: S.optional(S.NullOr(S.String).pipe(T.Body("okta_account"))), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessOktaConfig", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessOktaSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateResultAccessOktaSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateResultAccessOktaSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersUpdateResultAccessOktaSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersUpdateResultAccessOkta { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersUpdateResultAccessOktaConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersUpdateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersUpdateResultAzureADScimConfig | null; } export const IdentityProvidersUpdateResultAccessOkta = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersUpdateResultAccessOktaConfig, name: S.String, type: IdentityProvidersUpdateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersUpdateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessOkta", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessOneloginConfigClaimsList = Array; export const IdentityProvidersUpdateResultAccessOneloginConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateResultAccessOneloginConfig { /** Custom claims */ claims?: IdentityProvidersUpdateResultAccessOneloginConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Your OneLogin account url */ oneloginAccount?: string | null; } export const IdentityProvidersUpdateResultAccessOneloginConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersUpdateResultAccessOneloginConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), oneloginAccount: S.optional( S.NullOr(S.String).pipe(T.Body("onelogin_account")), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessOneloginConfig", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessOneloginSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateResultAccessOneloginSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateResultAccessOneloginSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersUpdateResultAccessOneloginSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersUpdateResultAccessOnelogin { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersUpdateResultAccessOneloginConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersUpdateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersUpdateResultAzureADScimConfig | null; } export const IdentityProvidersUpdateResultAccessOnelogin = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersUpdateResultAccessOneloginConfig, name: S.String, type: IdentityProvidersUpdateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersUpdateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessOnelogin", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessPingoneConfigClaimsList = Array; export const IdentityProvidersUpdateResultAccessPingoneConfigClaimsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateResultAccessPingoneConfig { /** Custom claims */ claims?: IdentityProvidersUpdateResultAccessPingoneConfigClaimsList | null; /** Your OAuth Client ID */ clientId?: string | null; /** Your OAuth Client Secret */ clientSecret?: string | null; /** The claim name for email in the id_token response. */ emailClaimName?: string | null; /** Your PingOne environment identifier */ pingEnvId?: string | null; } export const IdentityProvidersUpdateResultAccessPingoneConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ claims: S.optional( S.NullOr(IdentityProvidersUpdateResultAccessPingoneConfigClaimsList), ), clientId: S.optional(S.NullOr(S.String).pipe(T.Body("client_id"))), clientSecret: S.optional( S.NullOr(S.String).pipe(T.Body("client_secret")), ), emailClaimName: S.optional( S.NullOr(S.String).pipe(T.Body("email_claim_name")), ), pingEnvId: S.optional(S.NullOr(S.String).pipe(T.Body("ping_env_id"))), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessPingoneConfig", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessPingoneSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateResultAccessPingoneSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateResultAccessPingoneSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersUpdateResultAccessPingoneSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersUpdateResultAccessPingone { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersUpdateResultAccessPingoneConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersUpdateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersUpdateResultAzureADScimConfig | null; } export const IdentityProvidersUpdateResultAccessPingone = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersUpdateResultAccessPingoneConfig, name: S.String, type: IdentityProvidersUpdateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersUpdateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessPingone", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessSAMLConfigAttributesList = Array; export const IdentityProvidersUpdateResultAccessSAMLConfigAttributesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type IdentityProvidersUpdateResultAccessSAMLConfigHeaderAttributesItem = IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesItem; export const IdentityProvidersUpdateResultAccessSAMLConfigHeaderAttributesItem = IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesItem; export type IdentityProvidersUpdateResultAccessSAMLConfigHeaderAttributesList = Array; export const IdentityProvidersUpdateResultAccessSAMLConfigHeaderAttributesList = /*@__PURE__*/ S.Array( IdentityProvidersCreateResultAccessSAMLConfigHeaderAttributesItem, ) as any as S.Schema; export type IdentityProvidersUpdateResultAccessSAMLConfigIdpPublicCertsList = Array; export const IdentityProvidersUpdateResultAccessSAMLConfigIdpPublicCertsList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export interface IdentityProvidersUpdateResultAccessSAMLConfig { /** A list of SAML attribute names that will be added to your signed JWT token and can be used in SAML policy rules. */ attributes?: IdentityProvidersUpdateResultAccessSAMLConfigAttributesList | null; /** The attribute name for email in the SAML response. */ emailAttributeName?: string | null; /** Enable SAML assertion encryption. When enabled, the Identity Provider will encrypt */ enableEncryption?: boolean | null; /** Add a list of attribute names that will be returned in the response header from the Access callback. */ headerAttributes?: IdentityProvidersUpdateResultAccessSAMLConfigHeaderAttributesList | null; /** X509 certificate to verify the signature in the SAML authentication response */ idpPublicCerts?: IdentityProvidersUpdateResultAccessSAMLConfigIdpPublicCertsList | null; /** IdP Entity ID or Issuer URL */ issuerUrl?: string | null; /** Sign the SAML authentication request with Access credentials. To verify the signature, use the public key from the Access certs endpoints. */ signRequest?: boolean | null; /** URL to send the SAML authentication requests to */ ssoTargetUrl?: string | null; } export const IdentityProvidersUpdateResultAccessSAMLConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ attributes: S.optional( S.NullOr(IdentityProvidersUpdateResultAccessSAMLConfigAttributesList), ), emailAttributeName: S.optional( S.NullOr(S.String).pipe(T.Body("email_attribute_name")), ), enableEncryption: S.optional( S.NullOr(S.Boolean).pipe(T.Body("enable_encryption")), ), headerAttributes: S.optional( S.NullOr( IdentityProvidersUpdateResultAccessSAMLConfigHeaderAttributesList, ).pipe(T.Body("header_attributes")), ), idpPublicCerts: S.optional( S.NullOr( IdentityProvidersUpdateResultAccessSAMLConfigIdpPublicCertsList, ).pipe(T.Body("idp_public_certs")), ), issuerUrl: S.optional(S.NullOr(S.String).pipe(T.Body("issuer_url"))), signRequest: S.optional(S.NullOr(S.Boolean).pipe(T.Body("sign_request"))), ssoTargetUrl: S.optional( S.NullOr(S.String).pipe(T.Body("sso_target_url")), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessSAMLConfig", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessSAMLSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateResultAccessSAMLSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateResultAccessSAMLSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersUpdateResultAccessSAMLSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersUpdateResultAccessSAML { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersUpdateResultAccessSAMLConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersUpdateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersUpdateResultAzureADScimConfig | null; } export const IdentityProvidersUpdateResultAccessSAML = /*@__PURE__*/ S.suspend( () => S.Struct({ config: IdentityProvidersUpdateResultAccessSAMLConfig, name: S.String, type: IdentityProvidersUpdateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersUpdateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessSAML", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessYandexSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateResultAccessYandexSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateResultAccessYandexSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersUpdateResultAccessYandexSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export type IdentityProvidersUpdateResultAccessYandex = IdentityProvidersUpdateResultAccessFacebook; export const IdentityProvidersUpdateResultAccessYandex = IdentityProvidersUpdateResultAccessFacebook; export type IdentityProvidersUpdateResultAccessOnetimepinConfig = IdentityProvidersCreateResultAccessOnetimepinConfig; export const IdentityProvidersUpdateResultAccessOnetimepinConfig = IdentityProvidersCreateResultAccessOnetimepinConfig; export type IdentityProvidersUpdateResultAccessOnetimepinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateResultAccessOnetimepinSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateResultAccessOnetimepinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersUpdateResultAccessOnetimepinSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersUpdateResultAccessOnetimepin { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessOnetimepinConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersUpdateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersUpdateResultAzureADScimConfig | null; } export const IdentityProvidersUpdateResultAccessOnetimepin = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessOnetimepinConfig, name: S.String, type: IdentityProvidersUpdateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersUpdateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessOnetimepin", }) as any as S.Schema; export type IdentityProvidersUpdateResultAccessCloudflareConfig = IdentityProvidersCreateResultAccessCloudflareConfig; export const IdentityProvidersUpdateResultAccessCloudflareConfig = IdentityProvidersCreateResultAccessCloudflareConfig; export type IdentityProvidersUpdateResultAccessCloudflareSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export const IdentityProvidersUpdateResultAccessCloudflareSamlCertificateSetCurrentCertificate = IdentityProvidersCreateRequestSamlCertificateSetCurrentCertificate; export type IdentityProvidersUpdateResultAccessCloudflareSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export const IdentityProvidersUpdateResultAccessCloudflareSamlCertificateSet = IdentityProvidersCreateResultAzureADSamlCertificateSet; export interface IdentityProvidersUpdateResultAccessCloudflare { /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersCreateResultAccessCloudflareConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersUpdateResultAzureADType; /** UUID. */ id?: string | null; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean | null; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateResultAzureADSamlCertificateSet | null; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string | null; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersUpdateResultAzureADScimConfig | null; } export const IdentityProvidersUpdateResultAccessCloudflare = /*@__PURE__*/ S.suspend(() => S.Struct({ config: IdentityProvidersCreateResultAccessCloudflareConfig, name: S.String, type: IdentityProvidersUpdateResultAzureADType, id: S.optional(S.NullOr(S.String)), readOnly: S.optional(S.NullOr(S.Boolean).pipe(T.Body("read_only"))), samlCertificateSet: S.optional( S.NullOr(IdentityProvidersCreateResultAzureADSamlCertificateSet).pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.NullOr(S.String).pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( S.NullOr(IdentityProvidersUpdateResultAzureADScimConfig).pipe( T.Body("scim_config"), ), ), }), ).annotate({ identifier: "IdentityProvidersUpdateResultAccessCloudflare", }) as any as S.Schema; export type IdentityProvidersUpdateResult = | IdentityProvidersUpdateResultAzureAD | IdentityProvidersUpdateResultAccessCentrify | IdentityProvidersUpdateResultAccessFacebook | IdentityProvidersUpdateResultAccessFacebook | IdentityProvidersUpdateResultAccessGoogle | IdentityProvidersUpdateResultAccessGoogleApps | IdentityProvidersUpdateResultAccessFacebook | IdentityProvidersUpdateResultAccessOIDC | IdentityProvidersUpdateResultAccessOkta | IdentityProvidersUpdateResultAccessOnelogin | IdentityProvidersUpdateResultAccessPingone | IdentityProvidersUpdateResultAccessSAML | IdentityProvidersUpdateResultAccessFacebook | IdentityProvidersUpdateResultAccessOnetimepin | IdentityProvidersUpdateResultAccessCloudflare; export const IdentityProvidersUpdateResult = /*@__PURE__*/ S.Unknown.pipe( T.UnionCases([ [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], [ "config", "name", "type", "id", "readOnly", "samlCertificateSet", "samlCertificateSetId", "scimConfig", ], ]), ); export type UpdateIdentityProviderResponse = IdentityProvidersUpdateResult; export const UpdateIdentityProviderResponse = /*@__PURE__*/ S.suspend(() => IdentityProvidersUpdateResult.pipe( T.EnvelopePayloadRoot(), T.KeyDictionary(KEY_DICTIONARY), ), ).annotate({ identifier: "UpdateIdentityProviderResponse", }) as any as S.Schema; export interface UpdateIdentityProviderForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** UUID. */ identityProviderId: string; /** The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ config: IdentityProvidersUpdateRequestConfig; /** The name of the identity provider, shown to users on the login page. */ name: string; /** The type of identity provider. To determine the value for a specific provider, refer to our [developer documentation](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/). */ type: IdentityProvidersUpdateRequestTypeAzureAD | (string & {}); /** UUID. */ id?: string; /** Indicates that the identity provider is immutable and cannot be updated or deleted via the API. */ readOnly?: boolean; /** The SAML encryption certificate set details, including current and previous certificates. */ samlCertificateSet?: IdentityProvidersCreateRequestSamlCertificateSet; /** The UID of the SAML encryption certificate set assigned to this Identity Provider. */ samlCertificateSetId?: string; /** The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider. */ scimConfig?: IdentityProvidersUpdateRequestScimConfigAzureAD; } export const UpdateIdentityProviderForZoneRequest = /*@__PURE__*/ S.suspend( () => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), identityProviderId: S.String.pipe(T.Label("identity_provider_id")), config: IdentityProvidersUpdateRequestConfig, name: S.String, type: IdentityProvidersUpdateRequestTypeAzureAD, id: S.optional(S.String), readOnly: S.optional(S.Boolean.pipe(T.Body("read_only"))), samlCertificateSet: S.optional( IdentityProvidersCreateRequestSamlCertificateSet.pipe( T.Body("saml_certificate_set"), ), ), samlCertificateSetId: S.optional( S.String.pipe(T.Body("saml_certificate_set_id")), ), scimConfig: S.optional( IdentityProvidersUpdateRequestScimConfigAzureAD.pipe( T.Body("scim_config"), ), ), }) .pipe( T.Http({ method: "PUT", uri: "/zones/{zone_id}/access/identity_providers/{identity_provider_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateIdentityProviderForZoneRequest", }) as any as S.Schema; export interface OrganizationsUpdateRequestCustomPages { /** The uid of the custom page to use when a user is denied access after failing a non-identity rule. */ forbidden?: string; /** The uid of the custom page to use when a user is denied access. */ identityDenied?: string; } export const OrganizationsUpdateRequestCustomPages = /*@__PURE__*/ S.suspend( () => S.Struct({ forbidden: S.optional(S.String), identityDenied: S.optional(S.String.pipe(T.Body("identity_denied"))), }), ).annotate({ identifier: "OrganizationsUpdateRequestCustomPages", }) as any as S.Schema; export type OrganizationsUpdateRequestDenyUnmatchedRequestsExemptedZoneNamesList = Array; export const OrganizationsUpdateRequestDenyUnmatchedRequestsExemptedZoneNamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type OrganizationsUpdateRequestLoginDesign = OrganizationsCreateRequestLoginDesign; export const OrganizationsUpdateRequestLoginDesign = OrganizationsCreateRequestLoginDesign; export type OrganizationsUpdateRequestMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key" | "piv_key"; export const OrganizationsUpdateRequestMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type OrganizationsUpdateRequestMfaConfigAllowedAuthenticatorsList = Array< OrganizationsUpdateRequestMfaConfigAllowedAuthenticatorsItem | (string & {}) >; export const OrganizationsUpdateRequestMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( OrganizationsUpdateRequestMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface OrganizationsUpdateRequestMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: OrganizationsUpdateRequestMfaConfigAllowedAuthenticatorsList; /** Allows a user to skip MFA via Authentication Method Reference (AMR) matching when the AMR claim provided by the IdP the user used to authenticate contains "mfa". Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). */ amrMatchingSessionDuration?: string; /** Specifies a Cloudflare List of required FIDO2 authenticator device AAGUIDs. */ requiredAaguids?: string; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string; } export const OrganizationsUpdateRequestMfaConfig = /*@__PURE__*/ S.suspend(() => S.Struct({ allowedAuthenticators: S.optional( OrganizationsUpdateRequestMfaConfigAllowedAuthenticatorsList.pipe( T.Body("allowed_authenticators"), ), ), amrMatchingSessionDuration: S.optional( S.String.pipe(T.Body("amr_matching_session_duration")), ), requiredAaguids: S.optional(S.String.pipe(T.Body("required_aaguids"))), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), }), ).annotate({ identifier: "OrganizationsUpdateRequestMfaConfig", }) as any as S.Schema; export type OrganizationsUpdateRequestMfaPivKeyRequirementsPinPolicy = | "never" | "once" | "always"; export const OrganizationsUpdateRequestMfaPivKeyRequirementsPinPolicy = /*@__PURE__*/ S.String; export type OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeySizeItem = | 256 | 384 | 521 | 2048 | 3072 | 4096; export const OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeySizeItem = /*@__PURE__*/ S.Number; export type OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeySizeList = Array< | OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeySizeItem | (number & {}) >; export const OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeySizeList = /*@__PURE__*/ S.Array( OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeySizeItem, ) as any as S.Schema; export type OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeyTypeItem = | "ecdsa" | "ed25519" | "rsa"; export const OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeyTypeItem = /*@__PURE__*/ S.String; export type OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeyTypeList = Array< | OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeyTypeItem | (string & {}) >; export const OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeyTypeList = /*@__PURE__*/ S.Array( OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeyTypeItem, ) as any as S.Schema; export type OrganizationsUpdateRequestMfaPivKeyRequirementsTouchPolicy = | "never" | "always" | "cached"; export const OrganizationsUpdateRequestMfaPivKeyRequirementsTouchPolicy = /*@__PURE__*/ S.String; export interface OrganizationsUpdateRequestMfaPivKeyRequirements { /** Defines when a PIN is required to use the SSH key. Valid values: `never` (no PIN required), `once` (PIN required once per session), `always` (PIN required for each use). */ pinPolicy?: | OrganizationsUpdateRequestMfaPivKeyRequirementsPinPolicy | (string & {}); /** Requires the PIV key to be stored on a FIPS 140-2 Level 1 or higher validated device. */ requireFipsDevice?: boolean; /** Specifies the allowed SSH key sizes in bits. Valid sizes depend on key type. Ed25519 has a fixed key size and does not accept this parameter. */ sshKeySize?: OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeySizeList; /** Specifies the allowed SSH key types. Valid values are `ecdsa`, `ed25519`, and `rsa`. */ sshKeyType?: OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeyTypeList; /** Defines when physical touch is required to use the SSH key. Valid values: `never` (no touch required), `always` (touch required for each use), `cached` (touch cached for 15 seconds). */ touchPolicy?: | OrganizationsUpdateRequestMfaPivKeyRequirementsTouchPolicy | (string & {}); } export const OrganizationsUpdateRequestMfaPivKeyRequirements = /*@__PURE__*/ S.suspend(() => S.Struct({ pinPolicy: S.optional( OrganizationsUpdateRequestMfaPivKeyRequirementsPinPolicy.pipe( T.Body("pin_policy"), ), ), requireFipsDevice: S.optional( S.Boolean.pipe(T.Body("require_fips_device")), ), sshKeySize: S.optional( OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeySizeList.pipe( T.Body("ssh_key_size"), ), ), sshKeyType: S.optional( OrganizationsUpdateRequestMfaPivKeyRequirementsSshKeyTypeList.pipe( T.Body("ssh_key_type"), ), ), touchPolicy: S.optional( OrganizationsUpdateRequestMfaPivKeyRequirementsTouchPolicy.pipe( T.Body("touch_policy"), ), ), }), ).annotate({ identifier: "OrganizationsUpdateRequestMfaPivKeyRequirements", }) as any as S.Schema; export interface UpdateOrganizationForAccountRequest { /** The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. */ accountId: string; /** When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value. */ allowAuthenticateViaWarp?: boolean; /** The unique subdomain assigned to your Zero Trust organization. */ authDomain?: string; /** When set to `true`, users skip the identity provider selection step during login. */ autoRedirectToIdentity?: boolean; customPages?: OrganizationsUpdateRequestCustomPages; /** Determines whether to deny all requests to Cloudflare-protected resources that lack an associated Access application. If enabled, you must explicitly configure an Access application and policy to allow traffic to your Cloudflare-protected resources. For domains you want to be public across all subdomains, add the domain to the `deny_unmatched_requests_exempted_zone_names` array. */ denyUnmatchedRequests?: boolean; /** Contains zone names to exempt from the `deny_unmatched_requests` feature. Requests to a subdomain in an exempted zone will block unauthenticated traffic by default if there is a configured Access application and policy that matches the request. */ denyUnmatchedRequestsExemptedZoneNames?: OrganizationsUpdateRequestDenyUnmatchedRequestsExemptedZoneNamesList; /** Lock all settings as Read-Only in the Dashboard, regardless of user permission. Updates may only be made via the API or Terraform for this account when enabled. */ isUiReadOnly?: boolean; loginDesign?: OrganizationsCreateRequestLoginDesign; /** Configures multi-factor authentication (MFA) settings for an organization. */ mfaConfig?: OrganizationsUpdateRequestMfaConfig; /** Configures PIV key requirements for MFA using hardware security keys. */ mfaPivKeyRequirements?: OrganizationsUpdateRequestMfaPivKeyRequirements; /** Determines whether global MFA settings apply to applications by default. The organization must have MFA enabled with at least one authentication method and a session duration configured. Note: 'allowed_authenticators' cannot only contain 'piv_key' if the organization has any non-infrastructure applications because PIV keys are only compatible with infrastructure apps. */ mfaRequiredForAllApps?: boolean; /** The name of your Zero Trust organization. */ name?: string; /** The amount of time that tokens issued for applications will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string; /** A description of the reason why the UI read only field is being toggled. */ uiReadOnlyToggleReason?: string; /** The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format `300ms` or `2h45m`. Valid time units are: `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. */ userSeatExpirationInactiveTime?: string; /** The amount of time that tokens issued for applications will be valid. Must be in the format `30m` or `2h45m`. Valid time units are: m, h. */ warpAuthSessionDuration?: string; } export const UpdateOrganizationForAccountRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), allowAuthenticateViaWarp: S.optional( S.Boolean.pipe(T.Body("allow_authenticate_via_warp")), ), authDomain: S.optional(S.String.pipe(T.Body("auth_domain"))), autoRedirectToIdentity: S.optional( S.Boolean.pipe(T.Body("auto_redirect_to_identity")), ), customPages: S.optional( OrganizationsUpdateRequestCustomPages.pipe(T.Body("custom_pages")), ), denyUnmatchedRequests: S.optional( S.Boolean.pipe(T.Body("deny_unmatched_requests")), ), denyUnmatchedRequestsExemptedZoneNames: S.optional( OrganizationsUpdateRequestDenyUnmatchedRequestsExemptedZoneNamesList.pipe( T.Body("deny_unmatched_requests_exempted_zone_names"), ), ), isUiReadOnly: S.optional(S.Boolean.pipe(T.Body("is_ui_read_only"))), loginDesign: S.optional( OrganizationsCreateRequestLoginDesign.pipe(T.Body("login_design")), ), mfaConfig: S.optional( OrganizationsUpdateRequestMfaConfig.pipe(T.Body("mfa_config")), ), mfaPivKeyRequirements: S.optional( OrganizationsUpdateRequestMfaPivKeyRequirements.pipe( T.Body("mfa_piv_key_requirements"), ), ), mfaRequiredForAllApps: S.optional( S.Boolean.pipe(T.Body("mfa_required_for_all_apps")), ), name: S.optional(S.String), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), uiReadOnlyToggleReason: S.optional( S.String.pipe(T.Body("ui_read_only_toggle_reason")), ), userSeatExpirationInactiveTime: S.optional( S.String.pipe(T.Body("user_seat_expiration_inactive_time")), ), warpAuthSessionDuration: S.optional( S.String.pipe(T.Body("warp_auth_session_duration")), ), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/access/organizations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateOrganizationForAccountRequest", }) as any as S.Schema; export type OrganizationsUpdateResponseCustomPages = OrganizationsCreateResponseCustomPages; export const OrganizationsUpdateResponseCustomPages = OrganizationsCreateResponseCustomPages; export type OrganizationsUpdateResponseDenyUnmatchedRequestsExemptedZoneNamesList = Array; export const OrganizationsUpdateResponseDenyUnmatchedRequestsExemptedZoneNamesList = /*@__PURE__*/ S.Array( S.String, ) as any as S.Schema; export type OrganizationsUpdateResponseLoginDesign = OrganizationsCreateResponseLoginDesign; export const OrganizationsUpdateResponseLoginDesign = OrganizationsCreateResponseLoginDesign; export type OrganizationsUpdateResponseMfaConfigAllowedAuthenticatorsItem = | "totp" | "biometrics" | "security_key" | "piv_key"; export const OrganizationsUpdateResponseMfaConfigAllowedAuthenticatorsItem = /*@__PURE__*/ S.String; export type OrganizationsUpdateResponseMfaConfigAllowedAuthenticatorsList = Array; export const OrganizationsUpdateResponseMfaConfigAllowedAuthenticatorsList = /*@__PURE__*/ S.Array( OrganizationsUpdateResponseMfaConfigAllowedAuthenticatorsItem, ) as any as S.Schema; export interface OrganizationsUpdateResponseMfaConfig { /** Lists the MFA methods that users can authenticate with. */ allowedAuthenticators?: OrganizationsUpdateResponseMfaConfigAllowedAuthenticatorsList | null; /** Allows a user to skip MFA via Authentication Method Reference (AMR) matching when the AMR claim provided by the IdP the user used to authenticate contains "mfa". Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). */ amrMatchingSessionDuration?: string | null; /** Specifies a Cloudflare List of required FIDO2 authenticator device AAGUIDs. */ requiredAaguids?: string | null; /** Defines the duration of an MFA session. Must be in minutes (m) or hours (h). Minimum: 0m. Maximum: 720h (30 days). Examples:`5m` or `24h`. */ sessionDuration?: string | null; } export const OrganizationsUpdateResponseMfaConfig = /*@__PURE__*/ S.suspend( () => S.Struct({ allowedAuthenticators: S.optional( S.NullOr( OrganizationsUpdateResponseMfaConfigAllowedAuthenticatorsList, ).pipe(T.Body("allowed_authenticators")), ), amrMatchingSessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("amr_matching_session_duration")), ), requiredAaguids: S.optional( S.NullOr(S.String).pipe(T.Body("required_aaguids")), ), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), }), ).annotate({ identifier: "OrganizationsUpdateResponseMfaConfig", }) as any as S.Schema; export type OrganizationsUpdateResponseMfaPivKeyRequirementsPinPolicy = | "never" | "once" | "always"; export const OrganizationsUpdateResponseMfaPivKeyRequirementsPinPolicy = /*@__PURE__*/ S.String; export type OrganizationsUpdateResponseMfaPivKeyRequirementsSshKeySizeItem = | 256 | 384 | 521 | 2048 | 3072 | 4096; export const OrganizationsUpdateResponseMfaPivKeyRequirementsSshKeySizeItem = /*@__PURE__*/ S.Number; export type OrganizationsUpdateResponseMfaPivKeyRequirementsSshKeySizeList = Array; export const OrganizationsUpdateResponseMfaPivKeyRequirementsSshKeySizeList = /*@__PURE__*/ S.Array( OrganizationsUpdateResponseMfaPivKeyRequirementsSshKeySizeItem, ) as any as S.Schema; export type OrganizationsUpdateResponseMfaPivKeyRequirementsSshKeyTypeItem = | "ecdsa" | "ed25519" | "rsa"; export const OrganizationsUpdateResponseMfaPivKeyRequirementsSshKeyTypeItem = /*@__PURE__*/ S.String; export type OrganizationsUpdateResponseMfaPivKeyRequirementsSshKeyTypeList = Array; export const OrganizationsUpdateResponseMfaPivKeyRequirementsSshKeyTypeList = /*@__PURE__*/ S.Array( OrganizationsUpdateResponseMfaPivKeyRequirementsSshKeyTypeItem, ) as any as S.Schema; export type OrganizationsUpdateResponseMfaPivKeyRequirementsTouchPolicy = | "never" | "always" | "cached"; export const OrganizationsUpdateResponseMfaPivKeyRequirementsTouchPolicy = /*@__PURE__*/ S.String; export interface OrganizationsUpdateResponseMfaPivKeyRequirements { /** Defines when a PIN is required to use the SSH key. Valid values: `never` (no PIN required), `once` (PIN required once per session), `always` (PIN required for each use). */ pinPolicy?: OrganizationsUpdateResponseMfaPivKeyRequirementsPinPolicy | null; /** Requires the PIV key to be stored on a FIPS 140-2 Level 1 or higher validated device. */ requireFipsDevice?: boolean | null; /** Specifies the allowed SSH key sizes in bits. Valid sizes depend on key type. Ed25519 has a fixed key size and does not accept this parameter. */ sshKeySize?: OrganizationsUpdateResponseMfaPivKeyRequirementsSshKeySizeList | null; /** Specifies the allowed SSH key types. Valid values are `ecdsa`, `ed25519`, and `rsa`. */ sshKeyType?: OrganizationsUpdateResponseMfaPivKeyRequirementsSshKeyTypeList | null; /** Defines when physical touch is required to use the SSH key. Valid values: `never` (no touch required), `always` (touch required for each use), `cached` (touch cached for 15 seconds). */ touchPolicy?: OrganizationsUpdateResponseMfaPivKeyRequirementsTouchPolicy | null; } export const OrganizationsUpdateResponseMfaPivKeyRequirements = /*@__PURE__*/ S.suspend(() => S.Struct({ pinPolicy: S.optional( S.NullOr( OrganizationsUpdateResponseMfaPivKeyRequirementsPinPolicy, ).pipe(T.Body("pin_policy")), ), requireFipsDevice: S.optional( S.NullOr(S.Boolean).pipe(T.Body("require_fips_device")), ), sshKeySize: S.optional( S.NullOr( OrganizationsUpdateResponseMfaPivKeyRequirementsSshKeySizeList, ).pipe(T.Body("ssh_key_size")), ), sshKeyType: S.optional( S.NullOr( OrganizationsUpdateResponseMfaPivKeyRequirementsSshKeyTypeList, ).pipe(T.Body("ssh_key_type")), ), touchPolicy: S.optional( S.NullOr( OrganizationsUpdateResponseMfaPivKeyRequirementsTouchPolicy, ).pipe(T.Body("touch_policy")), ), }), ).annotate({ identifier: "OrganizationsUpdateResponseMfaPivKeyRequirements", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateOrganizationResponse { /** When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value. */ allowAuthenticateViaWarp?: boolean | null; /** The unique subdomain assigned to your Zero Trust organization. */ authDomain?: string | null; /** When set to `true`, users skip the identity provider selection step during login. */ autoRedirectToIdentity?: boolean | null; customPages?: OrganizationsCreateResponseCustomPages | null; /** Determines whether to deny all requests to Cloudflare-protected resources that lack an associated Access application. If enabled, you must explicitly configure an Access application and policy to allow traffic to your Cloudflare-protected resources. For domains you want to be public across all subdomains, add the domain to the `deny_unmatched_requests_exempted_zone_names` array. */ denyUnmatchedRequests?: boolean | null; /** Contains zone names to exempt from the `deny_unmatched_requests` feature. Requests to a subdomain in an exempted zone will block unauthenticated traffic by default if there is a configured Access application and policy that matches the request. */ denyUnmatchedRequestsExemptedZoneNames?: OrganizationsUpdateResponseDenyUnmatchedRequestsExemptedZoneNamesList | null; /** Lock all settings as Read-Only in the Dashboard, regardless of user permission. Updates may only be made via the API or Terraform for this account when enabled. */ isUiReadOnly?: boolean | null; loginDesign?: OrganizationsCreateResponseLoginDesign | null; /** Configures multi-factor authentication (MFA) settings for an organization. */ mfaConfig?: OrganizationsUpdateResponseMfaConfig | null; /** Configures PIV key requirements for MFA using hardware security keys. */ mfaPivKeyRequirements?: OrganizationsUpdateResponseMfaPivKeyRequirements | null; /** Determines whether global MFA settings apply to applications by default. The organization must have MFA enabled with at least one authentication method and a session duration configured. Note: 'allowed_authenticators' cannot only contain 'piv_key' if the organization has any non-infrastructure applications because PIV keys are only compatible with infrastructure apps. */ mfaRequiredForAllApps?: boolean | null; /** The name of your Zero Trust organization. */ name?: string | null; /** The amount of time that tokens issued for applications will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string | null; /** A description of the reason why the UI read only field is being toggled. */ uiReadOnlyToggleReason?: string | null; /** The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format `300ms` or `2h45m`. Valid time units are: `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. */ userSeatExpirationInactiveTime?: string | null; /** The amount of time that tokens issued for applications will be valid. Must be in the format `30m` or `2h45m`. Valid time units are: m, h. */ warpAuthSessionDuration?: string | null; } export const UpdateOrganizationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ allowAuthenticateViaWarp: S.optional( S.NullOr(S.Boolean).pipe(T.Body("allow_authenticate_via_warp")), ), authDomain: S.optional(S.NullOr(S.String).pipe(T.Body("auth_domain"))), autoRedirectToIdentity: S.optional( S.NullOr(S.Boolean).pipe(T.Body("auto_redirect_to_identity")), ), customPages: S.optional( S.NullOr(OrganizationsCreateResponseCustomPages).pipe( T.Body("custom_pages"), ), ), denyUnmatchedRequests: S.optional( S.NullOr(S.Boolean).pipe(T.Body("deny_unmatched_requests")), ), denyUnmatchedRequestsExemptedZoneNames: S.optional( S.NullOr( OrganizationsUpdateResponseDenyUnmatchedRequestsExemptedZoneNamesList, ).pipe(T.Body("deny_unmatched_requests_exempted_zone_names")), ), isUiReadOnly: S.optional( S.NullOr(S.Boolean).pipe(T.Body("is_ui_read_only")), ), loginDesign: S.optional( S.NullOr(OrganizationsCreateResponseLoginDesign).pipe( T.Body("login_design"), ), ), mfaConfig: S.optional( S.NullOr(OrganizationsUpdateResponseMfaConfig).pipe(T.Body("mfa_config")), ), mfaPivKeyRequirements: S.optional( S.NullOr(OrganizationsUpdateResponseMfaPivKeyRequirements).pipe( T.Body("mfa_piv_key_requirements"), ), ), mfaRequiredForAllApps: S.optional( S.NullOr(S.Boolean).pipe(T.Body("mfa_required_for_all_apps")), ), name: S.optional(S.NullOr(S.String)), sessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("session_duration")), ), uiReadOnlyToggleReason: S.optional( S.NullOr(S.String).pipe(T.Body("ui_read_only_toggle_reason")), ), userSeatExpirationInactiveTime: S.optional( S.NullOr(S.String).pipe(T.Body("user_seat_expiration_inactive_time")), ), warpAuthSessionDuration: S.optional( S.NullOr(S.String).pipe(T.Body("warp_auth_session_duration")), ), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateOrganizationResponse", }) as any as S.Schema; export interface UpdateOrganizationForZoneRequest { /** The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. */ zoneId: string; /** When set to true, users can authenticate via WARP for any application in your organization. Application settings will take precedence over this value. */ allowAuthenticateViaWarp?: boolean; /** The unique subdomain assigned to your Zero Trust organization. */ authDomain?: string; /** When set to `true`, users skip the identity provider selection step during login. */ autoRedirectToIdentity?: boolean; customPages?: OrganizationsUpdateRequestCustomPages; /** Determines whether to deny all requests to Cloudflare-protected resources that lack an associated Access application. If enabled, you must explicitly configure an Access application and policy to allow traffic to your Cloudflare-protected resources. For domains you want to be public across all subdomains, add the domain to the `deny_unmatched_requests_exempted_zone_names` array. */ denyUnmatchedRequests?: boolean; /** Contains zone names to exempt from the `deny_unmatched_requests` feature. Requests to a subdomain in an exempted zone will block unauthenticated traffic by default if there is a configured Access application and policy that matches the request. */ denyUnmatchedRequestsExemptedZoneNames?: OrganizationsUpdateRequestDenyUnmatchedRequestsExemptedZoneNamesList; /** Lock all settings as Read-Only in the Dashboard, regardless of user permission. Updates may only be made via the API or Terraform for this account when enabled. */ isUiReadOnly?: boolean; loginDesign?: OrganizationsCreateRequestLoginDesign; /** Configures multi-factor authentication (MFA) settings for an organization. */ mfaConfig?: OrganizationsUpdateRequestMfaConfig; /** Configures PIV key requirements for MFA using hardware security keys. */ mfaPivKeyRequirements?: OrganizationsUpdateRequestMfaPivKeyRequirements; /** Determines whether global MFA settings apply to applications by default. The organization must have MFA enabled with at least one authentication method and a session duration configured. Note: 'allowed_authenticators' cannot only contain 'piv_key' if the organization has any non-infrastructure applications because PIV keys are only compatible with infrastructure apps. */ mfaRequiredForAllApps?: boolean; /** The name of your Zero Trust organization. */ name?: string; /** The amount of time that tokens issued for applications will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. */ sessionDuration?: string; /** A description of the reason why the UI read only field is being toggled. */ uiReadOnlyToggleReason?: string; /** The amount of time a user seat is inactive before it expires. When the user seat exceeds the set time of inactivity, the user is removed as an active seat and no longer counts against your Teams seat count. Minimum value for this setting is 1 month (730h). Must be in the format `300ms` or `2h45m`. Valid time units are: `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. */ userSeatExpirationInactiveTime?: string; /** The amount of time that tokens issued for applications will be valid. Must be in the format `30m` or `2h45m`. Valid time units are: m, h. */ warpAuthSessionDuration?: string; } export const UpdateOrganizationForZoneRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ zoneId: S.String.pipe(T.Label("zone_id")), allowAuthenticateViaWarp: S.optional( S.Boolean.pipe(T.Body("allow_authenticate_via_warp")), ), authDomain: S.optional(S.String.pipe(T.Body("auth_domain"))), autoRedirectToIdentity: S.optional( S.Boolean.pipe(T.Body("auto_redirect_to_identity")), ), customPages: S.optional( OrganizationsUpdateRequestCustomPages.pipe(T.Body("custom_pages")), ), denyUnmatchedRequests: S.optional( S.Boolean.pipe(T.Body("deny_unmatched_requests")), ), denyUnmatchedRequestsExemptedZoneNames: S.optional( OrganizationsUpdateRequestDenyUnmatchedRequestsExemptedZoneNamesList.pipe( T.Body("deny_unmatched_requests_exempted_zone_names"), ), ), isUiReadOnly: S.optional(S.Boolean.pipe(T.Body("is_ui_read_only"))), loginDesign: S.optional( OrganizationsCreateRequestLoginDesign.pipe(T.Body("login_design")), ), mfaConfig: S.optional( OrganizationsUpdateRequestMfaConfig.pipe(T.Body("mfa_config")), ), mfaPivKeyRequirements: S.optional( OrganizationsUpdateRequestMfaPivKeyRequirements.pipe( T.Body("mfa_piv_key_requirements"), ), ), mfaRequiredForAllApps: S.optional( S.Boolean.pipe(T.Body("mfa_required_for_all_apps")), ), name: S.optional(S.String), sessionDuration: S.optional(S.String.pipe(T.Body("session_duration"))), uiReadOnlyToggleReason: S.optional( S.String.pipe(T.Body("ui_read_only_toggle_reason")), ), userSeatExpirationInactiveTime: S.optional( S.String.pipe(T.Body("user_seat_expiration_inactive_time")), ), warpAuthSessionDuration: S.optional( S.String.pipe(T.Body("warp_auth_session_duration")), ), }) .pipe( T.Http({ method: "PUT", uri: "/zones/{zone_id}/access/organizations", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateOrganizationForZoneRequest", }) as any as S.Schema; export interface UpdateRiskScoringIntegrationRequest { accountId: string; integrationId: string; /** Whether this integration is enabled. If disabled, no risk changes will be exported to the third-party. */ active: boolean; /** The base url of the tenant, e.g. "https://tenant.okta.com". */ tenantUrl: string; /** A reference id that can be supplied by the client. Currently this should be set to the Access-Okta IDP ID (a UUIDv4). */ referenceId?: string; } export const UpdateRiskScoringIntegrationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), integrationId: S.String.pipe(T.Label("integration_id")), active: S.Boolean, tenantUrl: S.String.pipe(T.Body("tenant_url")), referenceId: S.optional(S.String.pipe(T.Body("reference_id"))), }) .pipe( T.Http({ method: "PUT", uri: "/accounts/{account_id}/zt_risk_scoring/integrations/{integration_id}", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateRiskScoringIntegrationRequest", }) as any as S.Schema; export type RiskScoringIntegrationsUpdateResponseIntegrationType = "Okta"; export const RiskScoringIntegrationsUpdateResponseIntegrationType = /*@__PURE__*/ S.String; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface UpdateRiskScoringIntegrationResponse { /** The id of the integration, a UUIDv4. */ id: string; /** The Cloudflare account tag. */ accountTag: string; /** Whether this integration is enabled and should export changes in risk score. */ active: boolean; /** When the integration was created in RFC3339 format. */ createdAt: string; integrationType: RiskScoringIntegrationsUpdateResponseIntegrationType; /** A reference ID defined by the client. */ referenceId: string; /** The base URL for the tenant. E.g. "https://tenant.okta.com". */ tenantUrl: string; /** The URL for the Shared Signals Framework configuration, e.g. "/.well-known/sse-configuration/{integration_uuid}/". https://openid.net/specs/openid-sse-framework-1_0.html#rfc.section.6.2.1. */ wellKnownUrl: string; } export const UpdateRiskScoringIntegrationResponse = /*@__PURE__*/ S.suspend( () => S.Struct({ id: S.String, accountTag: S.String.pipe(T.Body("account_tag")), active: S.Boolean, createdAt: S.String.pipe(T.Body("created_at")), integrationType: RiskScoringIntegrationsUpdateResponseIntegrationType.pipe( T.Body("integration_type"), ), referenceId: S.String.pipe(T.Body("reference_id")), tenantUrl: S.String.pipe(T.Body("tenant_url")), wellKnownUrl: S.String.pipe(T.Body("well_known_url")), }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "UpdateRiskScoringIntegrationResponse", }) as any as S.Schema; export interface ValidateDlpPatternRequest { accountId: string; regex: string; /** Maximum number of bytes that the regular expression can match. */ maxMatchBytes?: number; } export const ValidateDlpPatternRequest = /*@__PURE__*/ S.suspend(() => S.Struct({ accountId: S.String.pipe(T.Label("account_id")), regex: S.String, maxMatchBytes: S.optional(S.Number.pipe(T.Body("max_match_bytes"))), }) .pipe( T.Http({ method: "POST", uri: "/accounts/{account_id}/dlp/patterns/validate", code: 200, }), ) .pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ValidateDlpPatternRequest", }) as any as S.Schema; /** Unwrapped `result` payload of the Cloudflare v4 response envelope. */ export interface ValidateDlpPatternResponse { valid: boolean; } export const ValidateDlpPatternResponse = /*@__PURE__*/ S.suspend(() => S.Struct({ valid: S.Boolean, }).pipe(T.KeyDictionary(KEY_DICTIONARY)), ).annotate({ identifier: "ValidateDlpPatternResponse", }) as any as S.Schema; export type ActivateGatewayCertificateError = | GatewayCertificateNotFound | CloudflareOpError; /** Bind a single Zero Trust certificate to the edge. */ export const activateGatewayCertificate: API.OperationMethod< ActivateGatewayCertificateRequest, ActivateGatewayCertificateResponse, ActivateGatewayCertificateError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ActivateGatewayCertificateRequest, output: ActivateGatewayCertificateResponse, errors: [GatewayCertificateNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type BulkDeleteAccessInfrastructureTargetsError = CloudflareOpError; /** Removes one or more targets. */ export const bulkDeleteAccessInfrastructureTargets: API.OperationMethod< BulkDeleteAccessInfrastructureTargetsRequest, BulkDeleteAccessInfrastructureTargetsResponse, BulkDeleteAccessInfrastructureTargetsError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: BulkDeleteAccessInfrastructureTargetsRequest, output: BulkDeleteAccessInfrastructureTargetsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type BulkDeleteDeviceRegistrationsError = CloudflareOpError; /** Deletes a list of WARP registrations. */ export const bulkDeleteDeviceRegistrations: API.OperationMethod< BulkDeleteDeviceRegistrationsRequest, BulkDeleteDeviceRegistrationsResponse, BulkDeleteDeviceRegistrationsError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: BulkDeleteDeviceRegistrationsRequest, output: BulkDeleteDeviceRegistrationsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type BulkDeleteV2AccessInfrastructureTargetsError = CloudflareOpError; /** Removes one or more targets. */ export const bulkDeleteV2AccessInfrastructureTargets: API.OperationMethod< BulkDeleteV2AccessInfrastructureTargetsRequest, BulkDeleteV2AccessInfrastructureTargetsResponse, BulkDeleteV2AccessInfrastructureTargetsError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: BulkDeleteV2AccessInfrastructureTargetsRequest, output: BulkDeleteV2AccessInfrastructureTargetsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type BulkPatchDlpEmailRulesError = CloudflareOpError; /** Reorders DLP email scanning rules by updating their priority values. Higher priority rules are evaluated first. */ export const bulkPatchDlpEmailRules: API.OperationMethod< BulkPatchDlpEmailRulesRequest, BulkPatchDlpEmailRulesResponse, BulkPatchDlpEmailRulesError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: BulkPatchDlpEmailRulesRequest, output: BulkPatchDlpEmailRulesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type BulkPutAccessInfrastructureTargetsError = CloudflareOpError; /** Adds one or more targets. */ export const bulkPutAccessInfrastructureTargets: API.PaginatedOperationMethod< BulkPutAccessInfrastructureTargetsRequest, BulkPutAccessInfrastructureTargetsResponse, BulkPutAccessInfrastructureTargetsError, CloudflareOpContext, AccessInfrastructureTargetsBulkUpdateResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: BulkPutAccessInfrastructureTargetsRequest, output: BulkPutAccessInfrastructureTargetsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type CreateAccessAiControlMcpPortalError = | McpPortalHostnameInUse | Forbidden | CloudflareOpError; /** Creates a new MCP portal for managing AI tool access through Cloudflare Access. */ export const createAccessAiControlMcpPortal: API.OperationMethod< CreateAccessAiControlMcpPortalRequest, CreateAccessAiControlMcpPortalResponse, CreateAccessAiControlMcpPortalError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessAiControlMcpPortalRequest, output: CreateAccessAiControlMcpPortalResponse, errors: [ McpPortalHostnameInUse, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessAiControlMcpServerError = CloudflareOpError; /** Creates a new MCP portal for managing AI tool access through Cloudflare Access. */ export const createAccessAiControlMcpServer: API.OperationMethod< CreateAccessAiControlMcpServerRequest, CreateAccessAiControlMcpServerResponse, CreateAccessAiControlMcpServerError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessAiControlMcpServerRequest, output: CreateAccessAiControlMcpServerResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessApplicationCaForAccountError = CloudflareOpError; /** Generates a new short-lived certificate CA and public key. */ export const createAccessApplicationCaForAccount: API.OperationMethod< CreateAccessApplicationCaForAccountRequest, CreateAccessApplicationCaResponse, CreateAccessApplicationCaForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessApplicationCaForAccountRequest, output: CreateAccessApplicationCaResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessApplicationCaForZoneError = CloudflareOpError; /** Generates a new short-lived certificate CA and public key. */ export const createAccessApplicationCaForZone: API.OperationMethod< CreateAccessApplicationCaForZoneRequest, CreateAccessApplicationCaResponse, CreateAccessApplicationCaForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessApplicationCaForZoneRequest, output: CreateAccessApplicationCaResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessApplicationForAccountError = | AccessReferenceNotFound | AccessDestinationConflict | CloudflareOpError; /** Adds a new application to Access. */ export const createAccessApplicationForAccount: API.OperationMethod< CreateAccessApplicationForAccountRequest, CreateAccessApplicationResponse, CreateAccessApplicationForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessApplicationForAccountRequest, output: CreateAccessApplicationResponse, errors: [ AccessReferenceNotFound, AccessDestinationConflict, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessApplicationForZoneError = | AccessReferenceNotFound | CloudflareOpError; /** Adds a new application to Access. */ export const createAccessApplicationForZone: API.OperationMethod< CreateAccessApplicationForZoneRequest, CreateAccessApplicationResponse, CreateAccessApplicationForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessApplicationForZoneRequest, output: CreateAccessApplicationResponse, errors: [AccessReferenceNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessApplicationPolicyForAccountError = CloudflareOpError; /** Creates a policy applying exclusive to a single application that defines the users or groups who can reach it. We recommend creating a reusable policy instead and subsequently referencing its ID in the application's 'policies' array. */ export const createAccessApplicationPolicyForAccount: API.OperationMethod< CreateAccessApplicationPolicyForAccountRequest, CreateAccessApplicationPolicyResponse, CreateAccessApplicationPolicyForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessApplicationPolicyForAccountRequest, output: CreateAccessApplicationPolicyResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessApplicationPolicyForZoneError = CloudflareOpError; /** Creates a policy applying exclusive to a single application that defines the users or groups who can reach it. We recommend creating a reusable policy instead and subsequently referencing its ID in the application's 'policies' array. */ export const createAccessApplicationPolicyForZone: API.OperationMethod< CreateAccessApplicationPolicyForZoneRequest, CreateAccessApplicationPolicyResponse, CreateAccessApplicationPolicyForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessApplicationPolicyForZoneRequest, output: CreateAccessApplicationPolicyResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessApplicationPolicyTestError = CloudflareOpError; /** Starts an Access policy test. */ export const createAccessApplicationPolicyTest: API.OperationMethod< CreateAccessApplicationPolicyTestRequest, CreateAccessApplicationPolicyTestResponse, CreateAccessApplicationPolicyTestError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessApplicationPolicyTestRequest, output: CreateAccessApplicationPolicyTestResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessBookmarkError = | AccessBookmarkNotFound | CloudflareOpError; /** Create a new Bookmark application. */ export const createAccessBookmark: API.OperationMethod< CreateAccessBookmarkRequest, CreateAccessBookmarkResponse, CreateAccessBookmarkError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessBookmarkRequest, output: CreateAccessBookmarkResponse, errors: [AccessBookmarkNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessCertificateForAccountError = | AccessCertificateQuotaExceeded | CloudflareOpError; /** Adds a new mTLS root certificate to Access. */ export const createAccessCertificateForAccount: API.OperationMethod< CreateAccessCertificateForAccountRequest, CreateAccessCertificateResponse, CreateAccessCertificateForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessCertificateForAccountRequest, output: CreateAccessCertificateResponse, errors: [ AccessCertificateQuotaExceeded, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessCertificateForZoneError = | AccessCertificateQuotaExceeded | CloudflareOpError; /** Adds a new mTLS root certificate to Access. */ export const createAccessCertificateForZone: API.OperationMethod< CreateAccessCertificateForZoneRequest, CreateAccessCertificateResponse, CreateAccessCertificateForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessCertificateForZoneRequest, output: CreateAccessCertificateResponse, errors: [ AccessCertificateQuotaExceeded, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessCustomPageError = | AccessCustomPagesNotEntitled | CloudflareOpError; /** Create a custom page */ export const createAccessCustomPage: API.OperationMethod< CreateAccessCustomPageRequest, CreateAccessCustomPageResponse, CreateAccessCustomPageError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessCustomPageRequest, output: CreateAccessCustomPageResponse, errors: [ AccessCustomPagesNotEntitled, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessGatewayCaError = CloudflareOpError; /** Adds a new SSH Certificate Authority (CA). */ export const createAccessGatewayCa: API.OperationMethod< CreateAccessGatewayCaRequest, CreateAccessGatewayCaResponse, CreateAccessGatewayCaError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessGatewayCaRequest, output: CreateAccessGatewayCaResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessGroupForAccountError = CloudflareOpError; /** Creates a new Access group. */ export const createAccessGroupForAccount: API.OperationMethod< CreateAccessGroupForAccountRequest, CreateAccessGroupResponse, CreateAccessGroupForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessGroupForAccountRequest, output: CreateAccessGroupResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessGroupForZoneError = CloudflareOpError; /** Creates a new Access group. */ export const createAccessGroupForZone: API.OperationMethod< CreateAccessGroupForZoneRequest, CreateAccessGroupResponse, CreateAccessGroupForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessGroupForZoneRequest, output: CreateAccessGroupResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessIdpFederationGrantError = CloudflareOpError; /** Creates an IdP federation grant for the specified identity provider, making it available for federation to other accounts in the same Cloudflare organization. The account must belong to a Cloudflare organization. One-time pin and Cloudflare-managed identity providers cannot be federated. An account can federate at most five identity providers at a time. */ export const createAccessIdpFederationGrant: API.OperationMethod< CreateAccessIdpFederationGrantRequest, CreateAccessIdpFederationGrantResponse, CreateAccessIdpFederationGrantError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessIdpFederationGrantRequest, output: CreateAccessIdpFederationGrantResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessInfrastructureTargetError = | Forbidden | CloudflareOpError; /** Create new target */ export const createAccessInfrastructureTarget: API.OperationMethod< CreateAccessInfrastructureTargetRequest, CreateAccessInfrastructureTargetResponse, CreateAccessInfrastructureTargetError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessInfrastructureTargetRequest, output: CreateAccessInfrastructureTargetResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessPolicyError = CloudflareOpError; /** Creates a new Access reusable policy. */ export const createAccessPolicy: API.OperationMethod< CreateAccessPolicyRequest, CreateAccessPolicyResponse, CreateAccessPolicyError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessPolicyRequest, output: CreateAccessPolicyResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessServiceTokenForAccountError = CloudflareOpError; /** Generates a new service token. **Note:** This is the only time you can get the Client Secret. If you lose the Client Secret, you will have to rotate the Client Secret or create a new service token. */ export const createAccessServiceTokenForAccount: API.OperationMethod< CreateAccessServiceTokenForAccountRequest, CreateAccessServiceTokenResponse, CreateAccessServiceTokenForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessServiceTokenForAccountRequest, output: CreateAccessServiceTokenResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessServiceTokenForZoneError = CloudflareOpError; /** Generates a new service token. **Note:** This is the only time you can get the Client Secret. If you lose the Client Secret, you will have to rotate the Client Secret or create a new service token. */ export const createAccessServiceTokenForZone: API.OperationMethod< CreateAccessServiceTokenForZoneRequest, CreateAccessServiceTokenResponse, CreateAccessServiceTokenForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessServiceTokenForZoneRequest, output: CreateAccessServiceTokenResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessTagError = CloudflareOpError; /** Create a tag */ export const createAccessTag: API.OperationMethod< CreateAccessTagRequest, CreateAccessTagResponse, CreateAccessTagError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessTagRequest, output: CreateAccessTagResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateAccessUserError = CloudflareOpError; /** Creates a new user. */ export const createAccessUser: API.OperationMethod< CreateAccessUserRequest, CreateAccessUserResponse, CreateAccessUserError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateAccessUserRequest, output: CreateAccessUserResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateCasbIntegrationError = CloudflareOpError; /** Creates a new integration for the specified application. */ export const createCasbIntegration: API.OperationMethod< CreateCasbIntegrationRequest, CreateCasbIntegrationResponse, CreateCasbIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateCasbIntegrationRequest, output: CreateCasbIntegrationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDeviceDeploymentGroupError = CloudflareOpError; /** Creates a new deployment group. Policy IDs must be unique across all deployment groups. This endpoint is in Beta. */ export const createDeviceDeploymentGroup: API.OperationMethod< CreateDeviceDeploymentGroupRequest, CreateDeviceDeploymentGroupResponse, CreateDeviceDeploymentGroupError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDeviceDeploymentGroupRequest, output: CreateDeviceDeploymentGroupResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDeviceDexTestError = Forbidden | CloudflareOpError; /** Create a DEX test. */ export const createDeviceDexTest: API.OperationMethod< CreateDeviceDexTestRequest, CreateDeviceDexTestResponse, CreateDeviceDexTestError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDeviceDexTestRequest, output: CreateDeviceDexTestResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDeviceIpProfileError = CloudflareOpError; /** Creates a WARP Device IP profile. Currently, only IPv4 Device subnets can be associated. */ export const createDeviceIpProfile: API.OperationMethod< CreateDeviceIpProfileRequest, CreateDeviceIpProfileResponse, CreateDeviceIpProfileError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDeviceIpProfileRequest, output: CreateDeviceIpProfileResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDeviceNetworkError = Forbidden | CloudflareOpError; /** Creates a new device managed network. */ export const createDeviceNetwork: API.OperationMethod< CreateDeviceNetworkRequest, CreateDeviceNetworkResponse, CreateDeviceNetworkError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDeviceNetworkRequest, output: CreateDeviceNetworkResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDevicePolicyCustomError = Forbidden | CloudflareOpError; /** Creates a device settings profile to be applied to certain devices matching the criteria. */ export const createDevicePolicyCustom: API.OperationMethod< CreateDevicePolicyCustomRequest, CreateDevicePolicyCustomResponse, CreateDevicePolicyCustomError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDevicePolicyCustomRequest, output: CreateDevicePolicyCustomResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDevicePostureError = Forbidden | CloudflareOpError; /** Creates a new device posture rule. */ export const createDevicePosture: API.OperationMethod< CreateDevicePostureRequest, CreateDevicePostureResponse, CreateDevicePostureError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDevicePostureRequest, output: CreateDevicePostureResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDevicePostureIntegrationError = | InvalidPostureIntegrationConfig | Forbidden | CloudflareOpError; /** Create a new device posture integration. */ export const createDevicePostureIntegration: API.OperationMethod< CreateDevicePostureIntegrationRequest, CreateDevicePostureIntegrationResponse, CreateDevicePostureIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDevicePostureIntegrationRequest, output: CreateDevicePostureIntegrationResponse, errors: [ InvalidPostureIntegrationConfig, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDeviceResilienceGlobalWarpOverrideError = CloudflareOpError; /** Sets the Global WARP override state. */ export const createDeviceResilienceGlobalWarpOverride: API.OperationMethod< CreateDeviceResilienceGlobalWarpOverrideRequest, CreateDeviceResilienceGlobalWarpOverrideResponse, CreateDeviceResilienceGlobalWarpOverrideError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDeviceResilienceGlobalWarpOverrideRequest, output: CreateDeviceResilienceGlobalWarpOverrideResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDeviceRevokeError = CloudflareOpError; /** Revokes a list of devices. Not supported when [multi-user mode](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/windows-multiuser/) is enabled. **Deprecated**: please use POST /accounts/{account_id}/devices/registrations/revoke instead. */ export const createDeviceRevoke: API.OperationMethod< CreateDeviceRevokeRequest, CreateDeviceRevokeResponse, CreateDeviceRevokeError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDeviceRevokeRequest, output: CreateDeviceRevokeResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDeviceUnrevokeError = CloudflareOpError; /** Unrevokes a list of devices. Not supported when [multi-user mode](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/windows-multiuser/) is enabled. **Deprecated**: please use POST /accounts/{account_id}/devices/registrations/unrevoke instead. */ export const createDeviceUnrevoke: API.OperationMethod< CreateDeviceUnrevokeRequest, CreateDeviceUnrevokeResponse, CreateDeviceUnrevokeError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDeviceUnrevokeRequest, output: CreateDeviceUnrevokeResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDexCommandError = CloudflareOpError; /** Initiate commands for up to 10 devices per account. */ export const createDexCommand: API.OperationMethod< CreateDexCommandRequest, CreateDexCommandResponse, CreateDexCommandError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDexCommandRequest, output: CreateDexCommandResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDexRuleError = CloudflareOpError; /** Create a DEX Rule. */ export const createDexRule: API.OperationMethod< CreateDexRuleRequest, CreateDexRuleResponse, CreateDexRuleError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDexRuleRequest, output: CreateDexRuleResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpCustomEntryError = CloudflareOpError; /** Creates a DLP custom entry. */ export const createDlpCustomEntry: API.OperationMethod< CreateDlpCustomEntryRequest, CreateDlpCustomEntryResponse, CreateDlpCustomEntryError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpCustomEntryRequest, output: CreateDlpCustomEntryResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpCustomPromptTopicError = CloudflareOpError; /** Creates a DLP custom prompt topic entry. */ export const createDlpCustomPromptTopic: API.OperationMethod< CreateDlpCustomPromptTopicRequest, CreateDlpCustomPromptTopicResponse, CreateDlpCustomPromptTopicError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpCustomPromptTopicRequest, output: CreateDlpCustomPromptTopicResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpDataClassError = CloudflareOpError; /** Creates a new data class */ export const createDlpDataClass: API.OperationMethod< CreateDlpDataClassRequest, CreateDlpDataClassResponse, CreateDlpDataClassError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpDataClassRequest, output: CreateDlpDataClassResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpDatasetError = CloudflareOpError; /** Creates a new DLP (Data Loss Prevention) dataset for storing custom detection patterns. Datasets can contain exact match data, word lists, or EDM (Exact Data Match) configurations. */ export const createDlpDataset: API.OperationMethod< CreateDlpDatasetRequest, CreateDlpDatasetResponse, CreateDlpDatasetError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpDatasetRequest, output: CreateDlpDatasetResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpDatasetUploadError = CloudflareOpError; /** Creates a new version of a DLP dataset, allowing you to stage changes before activation. Used for single-column EDM and custom word lists. */ export const createDlpDatasetUpload: API.OperationMethod< CreateDlpDatasetUploadRequest, CreateDlpDatasetUploadResponse, CreateDlpDatasetUploadError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpDatasetUploadRequest, output: CreateDlpDatasetUploadResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpDatasetVersionError = CloudflareOpError; /** This is used for multi-column EDMv2 datasets. The EDMv2 format can only be created in the Cloudflare dashboard. The columns in the response appear in the same order as in the request. */ export const createDlpDatasetVersion: API.PaginatedOperationMethod< CreateDlpDatasetVersionRequest, CreateDlpDatasetVersionResponse, CreateDlpDatasetVersionError, CloudflareOpContext, DlpDatasetsVersionsCreateResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: CreateDlpDatasetVersionRequest, output: CreateDlpDatasetVersionResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type CreateDlpDatasetVersionEntryError = CloudflareOpError; /** This is used for multi-column EDMv2 datasets. The EDMv2 format can only be created in the Cloudflare dashboard. */ export const createDlpDatasetVersionEntry: API.OperationMethod< CreateDlpDatasetVersionEntryRequest, CreateDlpDatasetVersionEntryResponse, CreateDlpDatasetVersionEntryError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpDatasetVersionEntryRequest, output: CreateDlpDatasetVersionEntryResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpDataTagCategoryError = CloudflareOpError; /** Creates a new data tag category. */ export const createDlpDataTagCategory: API.OperationMethod< CreateDlpDataTagCategoryRequest, CreateDlpDataTagCategoryResponse, CreateDlpDataTagCategoryError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpDataTagCategoryRequest, output: CreateDlpDataTagCategoryResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpDataTagCategoryDataTagError = CloudflareOpError; /** Creates a new data tag. */ export const createDlpDataTagCategoryDataTag: API.OperationMethod< CreateDlpDataTagCategoryDataTagRequest, CreateDlpDataTagCategoryDataTagResponse, CreateDlpDataTagCategoryDataTagError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpDataTagCategoryDataTagRequest, output: CreateDlpDataTagCategoryDataTagResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpEmailAccountMappingError = CloudflareOpError; /** Creates a mapping between a Cloudflare account and an email provider for DLP email scanning integration. */ export const createDlpEmailAccountMapping: API.OperationMethod< CreateDlpEmailAccountMappingRequest, CreateDlpEmailAccountMappingResponse, CreateDlpEmailAccountMappingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpEmailAccountMappingRequest, output: CreateDlpEmailAccountMappingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpEmailRuleError = CloudflareOpError; /** Creates a new DLP email scanning rule that defines what content patterns to detect in email messages and what actions to take. */ export const createDlpEmailRule: API.OperationMethod< CreateDlpEmailRuleRequest, CreateDlpEmailRuleResponse, CreateDlpEmailRuleError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpEmailRuleRequest, output: CreateDlpEmailRuleResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpEntryError = CloudflareOpError; /** Creates a DLP custom entry. */ export const createDlpEntry: API.OperationMethod< CreateDlpEntryRequest, CreateDlpEntryResponse, CreateDlpEntryError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpEntryRequest, output: CreateDlpEntryResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpEntryIntegrationError = CloudflareOpError; /** Integration entries can't be created, this will update an existing integration entry. This is needed for our generated terraform API. */ export const createDlpEntryIntegration: API.OperationMethod< CreateDlpEntryIntegrationRequest, CreateDlpEntryIntegrationResponse, CreateDlpEntryIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpEntryIntegrationRequest, output: CreateDlpEntryIntegrationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpEntryPredefinedError = CloudflareOpError; /** Predefined entries can't be created, this will update an existing predefined entry. This is needed for our generated terraform API. */ export const createDlpEntryPredefined: API.OperationMethod< CreateDlpEntryPredefinedRequest, CreateDlpEntryPredefinedResponse, CreateDlpEntryPredefinedError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpEntryPredefinedRequest, output: CreateDlpEntryPredefinedResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpProfileCustomError = Forbidden | CloudflareOpError; /** Creates a DLP custom profile. */ export const createDlpProfileCustom: API.OperationMethod< CreateDlpProfileCustomRequest, CreateDlpProfileCustomResponse, CreateDlpProfileCustomError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpProfileCustomRequest, output: CreateDlpProfileCustomResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpSensitivityGroupError = CloudflareOpError; /** Creates a new sensitivity group. */ export const createDlpSensitivityGroup: API.OperationMethod< CreateDlpSensitivityGroupRequest, CreateDlpSensitivityGroupResponse, CreateDlpSensitivityGroupError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpSensitivityGroupRequest, output: CreateDlpSensitivityGroupResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateDlpSensitivityGroupLevelError = CloudflareOpError; /** Creates a new sensitivity level. */ export const createDlpSensitivityGroupLevel: API.OperationMethod< CreateDlpSensitivityGroupLevelRequest, CreateDlpSensitivityGroupLevelResponse, CreateDlpSensitivityGroupLevelError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateDlpSensitivityGroupLevelRequest, output: CreateDlpSensitivityGroupLevelResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateGatewayError = CloudflareOpError; /** Create a Zero Trust account for an existing Cloudflare account. */ export const createGateway: API.OperationMethod< CreateGatewayRequest, CreateGatewayResponse, CreateGatewayError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateGatewayRequest, output: CreateGatewayResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateGatewayCertificateError = | GatewayCertificateQuotaReached | CloudflareOpError; /** Create a new Zero Trust certificate. */ export const createGatewayCertificate: API.OperationMethod< CreateGatewayCertificateRequest, CreateGatewayCertificateResponse, CreateGatewayCertificateError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateGatewayCertificateRequest, output: CreateGatewayCertificateResponse, errors: [ GatewayCertificateQuotaReached, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateGatewayListError = CloudflareOpError; /** Creates a new Zero Trust list. */ export const createGatewayList: API.OperationMethod< CreateGatewayListRequest, CreateGatewayListResponse, CreateGatewayListError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateGatewayListRequest, output: CreateGatewayListResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateGatewayLocationError = CloudflareOpError; /** Create a new Zero Trust Gateway location. */ export const createGatewayLocation: API.OperationMethod< CreateGatewayLocationRequest, CreateGatewayLocationResponse, CreateGatewayLocationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateGatewayLocationRequest, output: CreateGatewayLocationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateGatewayPacfileError = CloudflareOpError; /** Create a new Zero Trust Gateway PAC file. */ export const createGatewayPacfile: API.OperationMethod< CreateGatewayPacfileRequest, CreateGatewayPacfileResponse, CreateGatewayPacfileError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateGatewayPacfileRequest, output: CreateGatewayPacfileResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateGatewayProxyEndpointError = | IpProxyEndpointsRequireEnterprise | Forbidden | CloudflareOpError; /** Create a new Zero Trust Gateway proxy endpoint. */ export const createGatewayProxyEndpoint: API.OperationMethod< CreateGatewayProxyEndpointRequest, CreateGatewayProxyEndpointResponse, CreateGatewayProxyEndpointError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateGatewayProxyEndpointRequest, output: CreateGatewayProxyEndpointResponse, errors: [ IpProxyEndpointsRequireEnterprise, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateGatewayRuleError = CloudflareOpError; /** Create a new Zero Trust Gateway rule. */ export const createGatewayRule: API.OperationMethod< CreateGatewayRuleRequest, CreateGatewayRuleResponse, CreateGatewayRuleError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateGatewayRuleRequest, output: CreateGatewayRuleResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateIdentityProviderForAccountError = CloudflareOpError; /** Adds a new identity provider to Access. */ export const createIdentityProviderForAccount: API.OperationMethod< CreateIdentityProviderForAccountRequest, CreateIdentityProviderResponse, CreateIdentityProviderForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateIdentityProviderForAccountRequest, output: CreateIdentityProviderResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateIdentityProviderForZoneError = CloudflareOpError; /** Adds a new identity provider to Access. */ export const createIdentityProviderForZone: API.OperationMethod< CreateIdentityProviderForZoneRequest, CreateIdentityProviderResponse, CreateIdentityProviderForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateIdentityProviderForZoneRequest, output: CreateIdentityProviderResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateIdentityProviderSamlCertificateError = CloudflareOpError; /** Creates a new SAML encryption certificate set and assigns it to the specified SAML Identity Provider. This endpoint is idempotent - if the IdP already has a certificate set assigned, the existing certificate set is returned with a 200 status. **Workflow for enabling SAML encryption:** 1. Call this endpoint to create and assign a certificate set to the IdP 1. Update the IdP configuration (PUT `/identity_providers/{id}`) with: - `config.enable_encryption: true` - `saml_certificate_set_id: ` 1. Configure the certificate's public key in your external SAML Identity Provider */ export const createIdentityProviderSamlCertificate: API.OperationMethod< CreateIdentityProviderSamlCertificateRequest, CreateIdentityProviderSamlCertificateResponse, CreateIdentityProviderSamlCertificateError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateIdentityProviderSamlCertificateRequest, output: CreateIdentityProviderSamlCertificateResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateNetworkHostnameRouteError = | HostnameRouteAlreadyRouted | Forbidden | CloudflareOpError; /** Create a hostname route. */ export const createNetworkHostnameRoute: API.OperationMethod< CreateNetworkHostnameRouteRequest, CreateNetworkHostnameRouteResponse, CreateNetworkHostnameRouteError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateNetworkHostnameRouteRequest, output: CreateNetworkHostnameRouteResponse, errors: [ HostnameRouteAlreadyRouted, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateNetworkRouteError = CloudflareOpError; /** Routes a private network through a Cloudflare Tunnel. */ export const createNetworkRoute: API.OperationMethod< CreateNetworkRouteRequest, CreateNetworkRouteResponse, CreateNetworkRouteError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateNetworkRouteRequest, output: CreateNetworkRouteResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateNetworkRouteNetworkError = CloudflareOpError; /** Routes a private network through a Cloudflare Tunnel. The CIDR in `ip_network_encoded` must be written in URL-encoded format. */ export const createNetworkRouteNetwork: API.OperationMethod< CreateNetworkRouteNetworkRequest, CreateNetworkRouteNetworkResponse, CreateNetworkRouteNetworkError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateNetworkRouteNetworkRequest, output: CreateNetworkRouteNetworkResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateNetworkSubnetWarpError = CloudflareOpError; /** Create a WARP IP assignment subnet. Currently, only IPv4 subnets can be created. **Network constraints:** - The network must be within one of the following private IP ranges: - `10.0.0.0/8` (RFC 1918) - `172.16.0.0/12` (RFC 1918) - `192.168.0.0/16` (RFC 1918) - `100.64.0.0/10` (RFC 6598 - CGNAT) - The subnet must have a prefix length of `/24` or larger (e.g., `/16`, `/20`, `/24` are valid; `/25`, `/28` are not) */ export const createNetworkSubnetWarp: API.OperationMethod< CreateNetworkSubnetWarpRequest, CreateNetworkSubnetWarpResponse, CreateNetworkSubnetWarpError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateNetworkSubnetWarpRequest, output: CreateNetworkSubnetWarpResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateNetworkVirtualNetworkError = | VirtualNetworkConflict | CloudflareOpError; /** Adds a new virtual network to an account. */ export const createNetworkVirtualNetwork: API.OperationMethod< CreateNetworkVirtualNetworkRequest, CreateNetworkVirtualNetworkResponse, CreateNetworkVirtualNetworkError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateNetworkVirtualNetworkRequest, output: CreateNetworkVirtualNetworkResponse, errors: [VirtualNetworkConflict, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateOrganizationForAccountError = | OrganizationAlreadyExists | CloudflareOpError; /** Sets up a Zero Trust organization for your account or zone. */ export const createOrganizationForAccount: API.OperationMethod< CreateOrganizationForAccountRequest, CreateOrganizationResponse, CreateOrganizationForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateOrganizationForAccountRequest, output: CreateOrganizationResponse, errors: [OrganizationAlreadyExists, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateOrganizationForZoneError = | OrganizationAlreadyExists | CloudflareOpError; /** Sets up a Zero Trust organization for your account or zone. */ export const createOrganizationForZone: API.OperationMethod< CreateOrganizationForZoneRequest, CreateOrganizationResponse, CreateOrganizationForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateOrganizationForZoneRequest, output: CreateOrganizationResponse, errors: [OrganizationAlreadyExists, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateRiskScoringIntegrationError = Forbidden | CloudflareOpError; /** Creates a new Zero Trust risk score integration, connecting external risk signals to Cloudflare's risk scoring system. */ export const createRiskScoringIntegration: API.OperationMethod< CreateRiskScoringIntegrationRequest, CreateRiskScoringIntegrationResponse, CreateRiskScoringIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateRiskScoringIntegrationRequest, output: CreateRiskScoringIntegrationResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateTunnelCloudflaredError = | DuplicateTunnelName | CloudflareOpError; /** Creates a new Cloudflare Tunnel in an account. */ export const createTunnelCloudflared: API.OperationMethod< CreateTunnelCloudflaredRequest, CreateTunnelCloudflaredResponse, CreateTunnelCloudflaredError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateTunnelCloudflaredRequest, output: CreateTunnelCloudflaredResponse, errors: [DuplicateTunnelName, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateTunnelCloudflaredManagementError = CloudflareOpError; /** Gets a management token used to access the management resources (i.e. Streaming Logs) of a tunnel. */ export const createTunnelCloudflaredManagement: API.OperationMethod< CreateTunnelCloudflaredManagementRequest, CreateTunnelCloudflaredManagementResponse, CreateTunnelCloudflaredManagementError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateTunnelCloudflaredManagementRequest, output: CreateTunnelCloudflaredManagementResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type CreateTunnelWarpConnectorError = | DuplicateTunnelName | Forbidden | CloudflareOpError; /** Creates a new Warp Connector Tunnel in an account. */ export const createTunnelWarpConnector: API.OperationMethod< CreateTunnelWarpConnectorRequest, CreateTunnelWarpConnectorResponse, CreateTunnelWarpConnectorError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: CreateTunnelWarpConnectorRequest, output: CreateTunnelWarpConnectorResponse, errors: [ DuplicateTunnelName, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeactivateGatewayCertificateError = | GatewayCertificateNotFound | GatewayCertificateInUse | CloudflareOpError; /** Unbind a single Zero Trust certificate from the edge. */ export const deactivateGatewayCertificate: API.OperationMethod< DeactivateGatewayCertificateRequest, DeactivateGatewayCertificateResponse, DeactivateGatewayCertificateError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeactivateGatewayCertificateRequest, output: DeactivateGatewayCertificateResponse, errors: [ GatewayCertificateNotFound, GatewayCertificateInUse, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessAiControlMcpPortalError = | McpPortalNotFound | Forbidden | CloudflareOpError; /** Deletes an MCP portal from the account. */ export const deleteAccessAiControlMcpPortal: API.OperationMethod< DeleteAccessAiControlMcpPortalRequest, DeleteAccessAiControlMcpPortalResponse, DeleteAccessAiControlMcpPortalError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessAiControlMcpPortalRequest, output: DeleteAccessAiControlMcpPortalResponse, errors: [ McpPortalNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessAiControlMcpServerError = CloudflareOpError; /** Deletes an MCP portal from the account. */ export const deleteAccessAiControlMcpServer: API.OperationMethod< DeleteAccessAiControlMcpServerRequest, DeleteAccessAiControlMcpServerResponse, DeleteAccessAiControlMcpServerError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessAiControlMcpServerRequest, output: DeleteAccessAiControlMcpServerResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessApplicationCaForAccountError = CloudflareOpError; /** Deletes a short-lived certificate CA. */ export const deleteAccessApplicationCaForAccount: API.OperationMethod< DeleteAccessApplicationCaForAccountRequest, DeleteAccessApplicationCaResponse, DeleteAccessApplicationCaForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessApplicationCaForAccountRequest, output: DeleteAccessApplicationCaResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessApplicationCaForZoneError = CloudflareOpError; /** Deletes a short-lived certificate CA. */ export const deleteAccessApplicationCaForZone: API.OperationMethod< DeleteAccessApplicationCaForZoneRequest, DeleteAccessApplicationCaResponse, DeleteAccessApplicationCaForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessApplicationCaForZoneRequest, output: DeleteAccessApplicationCaResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessApplicationForAccountError = | AccessApplicationNotFound | CloudflareOpError; /** Deletes an application from Access. */ export const deleteAccessApplicationForAccount: API.OperationMethod< DeleteAccessApplicationForAccountRequest, DeleteAccessApplicationResponse, DeleteAccessApplicationForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessApplicationForAccountRequest, output: DeleteAccessApplicationResponse, errors: [AccessApplicationNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessApplicationForZoneError = CloudflareOpError; /** Deletes an application from Access. */ export const deleteAccessApplicationForZone: API.OperationMethod< DeleteAccessApplicationForZoneRequest, DeleteAccessApplicationResponse, DeleteAccessApplicationForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessApplicationForZoneRequest, output: DeleteAccessApplicationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessApplicationPolicyForAccountError = CloudflareOpError; /** Deletes an Access policy specific to an application. To delete a reusable policy, use the /account or zones/{account or zone_id}/policies/{uid} endpoint. */ export const deleteAccessApplicationPolicyForAccount: API.OperationMethod< DeleteAccessApplicationPolicyForAccountRequest, DeleteAccessApplicationPolicyResponse, DeleteAccessApplicationPolicyForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessApplicationPolicyForAccountRequest, output: DeleteAccessApplicationPolicyResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessApplicationPolicyForZoneError = CloudflareOpError; /** Deletes an Access policy specific to an application. To delete a reusable policy, use the /account or zones/{account or zone_id}/policies/{uid} endpoint. */ export const deleteAccessApplicationPolicyForZone: API.OperationMethod< DeleteAccessApplicationPolicyForZoneRequest, DeleteAccessApplicationPolicyResponse, DeleteAccessApplicationPolicyForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessApplicationPolicyForZoneRequest, output: DeleteAccessApplicationPolicyResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessBookmarkError = | AccessBookmarkNotFound | CloudflareOpError; /** Deletes a Bookmark application. */ export const deleteAccessBookmark: API.OperationMethod< DeleteAccessBookmarkRequest, DeleteAccessBookmarkResponse, DeleteAccessBookmarkError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessBookmarkRequest, output: DeleteAccessBookmarkResponse, errors: [AccessBookmarkNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessCertificateForAccountError = | AccessCertificateNotFound | CloudflareOpError; /** Deletes an mTLS certificate. */ export const deleteAccessCertificateForAccount: API.OperationMethod< DeleteAccessCertificateForAccountRequest, DeleteAccessCertificateResponse, DeleteAccessCertificateForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessCertificateForAccountRequest, output: DeleteAccessCertificateResponse, errors: [AccessCertificateNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessCertificateForZoneError = | AccessCertificateNotFound | CloudflareOpError; /** Deletes an mTLS certificate. */ export const deleteAccessCertificateForZone: API.OperationMethod< DeleteAccessCertificateForZoneRequest, DeleteAccessCertificateResponse, DeleteAccessCertificateForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessCertificateForZoneRequest, output: DeleteAccessCertificateResponse, errors: [AccessCertificateNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessCustomPageError = | AccessCustomPageNotFound | CloudflareOpError; /** Delete a custom page */ export const deleteAccessCustomPage: API.OperationMethod< DeleteAccessCustomPageRequest, DeleteAccessCustomPageResponse, DeleteAccessCustomPageError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessCustomPageRequest, output: DeleteAccessCustomPageResponse, errors: [AccessCustomPageNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessGatewayCaError = CloudflareOpError; /** Deletes an SSH Certificate Authority. */ export const deleteAccessGatewayCa: API.OperationMethod< DeleteAccessGatewayCaRequest, DeleteAccessGatewayCaResponse, DeleteAccessGatewayCaError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessGatewayCaRequest, output: DeleteAccessGatewayCaResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessGroupForAccountError = | AccessGroupNotFound | CloudflareOpError; /** Deletes an Access group. */ export const deleteAccessGroupForAccount: API.OperationMethod< DeleteAccessGroupForAccountRequest, DeleteAccessGroupResponse, DeleteAccessGroupForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessGroupForAccountRequest, output: DeleteAccessGroupResponse, errors: [AccessGroupNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessGroupForZoneError = | AccessGroupNotFound | CloudflareOpError; /** Deletes an Access group. */ export const deleteAccessGroupForZone: API.OperationMethod< DeleteAccessGroupForZoneRequest, DeleteAccessGroupResponse, DeleteAccessGroupForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessGroupForZoneRequest, output: DeleteAccessGroupResponse, errors: [AccessGroupNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessIdpFederationGrantError = CloudflareOpError; /** Deletes an IdP federation grant. The identity provider remains in the account, but it is no longer available for federation to other accounts. */ export const deleteAccessIdpFederationGrant: API.OperationMethod< DeleteAccessIdpFederationGrantRequest, DeleteAccessIdpFederationGrantResponse, DeleteAccessIdpFederationGrantError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessIdpFederationGrantRequest, output: DeleteAccessIdpFederationGrantResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessInfrastructureTargetError = | TargetNotFound | Forbidden | CloudflareOpError; /** Delete target */ export const deleteAccessInfrastructureTarget: API.OperationMethod< DeleteAccessInfrastructureTargetRequest, DeleteAccessInfrastructureTargetResponse, DeleteAccessInfrastructureTargetError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessInfrastructureTargetRequest, output: DeleteAccessInfrastructureTargetResponse, errors: [TargetNotFound, Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessPolicyError = CloudflareOpError; /** Deletes an Access reusable policy. */ export const deleteAccessPolicy: API.OperationMethod< DeleteAccessPolicyRequest, DeleteAccessPolicyResponse, DeleteAccessPolicyError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessPolicyRequest, output: DeleteAccessPolicyResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessServiceTokenForAccountError = | AccessServiceTokenNotFound | CloudflareOpError; /** Deletes a service token. */ export const deleteAccessServiceTokenForAccount: API.OperationMethod< DeleteAccessServiceTokenForAccountRequest, DeleteAccessServiceTokenResponse, DeleteAccessServiceTokenForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessServiceTokenForAccountRequest, output: DeleteAccessServiceTokenResponse, errors: [AccessServiceTokenNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessServiceTokenForZoneError = | AccessServiceTokenNotFound | CloudflareOpError; /** Deletes a service token. */ export const deleteAccessServiceTokenForZone: API.OperationMethod< DeleteAccessServiceTokenForZoneRequest, DeleteAccessServiceTokenResponse, DeleteAccessServiceTokenForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessServiceTokenForZoneRequest, output: DeleteAccessServiceTokenResponse, errors: [AccessServiceTokenNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessTagError = AccessTagNotFound | CloudflareOpError; /** Delete a tag */ export const deleteAccessTag: API.OperationMethod< DeleteAccessTagRequest, DeleteAccessTagResponse, DeleteAccessTagError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessTagRequest, output: DeleteAccessTagResponse, errors: [AccessTagNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteAccessUserError = CloudflareOpError; /** Deletes a specific user for an account. This will also revoke any active seats and tokens for the user. */ export const deleteAccessUser: API.OperationMethod< DeleteAccessUserRequest, DeleteAccessUserResponse, DeleteAccessUserError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteAccessUserRequest, output: DeleteAccessUserResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteCasbIntegrationError = CloudflareOpError; /** Delete an integration by soft-deleting it. */ export const deleteCasbIntegration: API.OperationMethod< DeleteCasbIntegrationRequest, DeleteCasbIntegrationResponse, DeleteCasbIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteCasbIntegrationRequest, output: DeleteCasbIntegrationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDeviceDeploymentGroupError = CloudflareOpError; /** Deletes a deployment group. Associated policies no longer apply and devices stop receiving version targets. This endpoint is in Beta. */ export const deleteDeviceDeploymentGroup: API.OperationMethod< DeleteDeviceDeploymentGroupRequest, DeleteDeviceDeploymentGroupResponse, DeleteDeviceDeploymentGroupError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDeviceDeploymentGroupRequest, output: DeleteDeviceDeploymentGroupResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDeviceDevicesError = CloudflareOpError; /** Deletes a WARP device. */ export const deleteDeviceDevices: API.OperationMethod< DeleteDeviceDevicesRequest, DeleteDeviceDevicesResponse, DeleteDeviceDevicesError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDeviceDevicesRequest, output: DeleteDeviceDevicesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDeviceDexTestError = | DexTestNotFound | Forbidden | CloudflareOpError; /** Delete a Device DEX test. Returns the remaining device dex tests for the account. */ export const deleteDeviceDexTest: API.OperationMethod< DeleteDeviceDexTestRequest, DeleteDeviceDexTestResponse, DeleteDeviceDexTestError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDeviceDexTestRequest, output: DeleteDeviceDexTestResponse, errors: [DexTestNotFound, Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDeviceIpProfileError = CloudflareOpError; /** Delete a WARP Device IP profile. */ export const deleteDeviceIpProfile: API.OperationMethod< DeleteDeviceIpProfileRequest, DeleteDeviceIpProfileResponse, DeleteDeviceIpProfileError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDeviceIpProfileRequest, output: DeleteDeviceIpProfileResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDeviceNetworkError = | DeviceNetworkNotFound | Forbidden | CloudflareOpError; /** Deletes a device managed network and fetches a list of the remaining device managed networks for an account. */ export const deleteDeviceNetwork: API.PaginatedOperationMethod< DeleteDeviceNetworkRequest, DeleteDeviceNetworkResponse, DeleteDeviceNetworkError, CloudflareOpContext, DevicesNetworksDeleteResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: DeleteDeviceNetworkRequest, output: DeleteDeviceNetworkResponse, errors: [ DeviceNetworkNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type DeleteDevicePolicyCustomError = | DevicePolicyNotFound | Forbidden | CloudflareOpError; /** Deletes a device settings profile and fetches a list of the remaining profiles for an account. */ export const deleteDevicePolicyCustom: API.PaginatedOperationMethod< DeleteDevicePolicyCustomRequest, DeleteDevicePolicyCustomResponse, DeleteDevicePolicyCustomError, CloudflareOpContext, DevicesPoliciesCustomDeleteResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: DeleteDevicePolicyCustomRequest, output: DeleteDevicePolicyCustomResponse, errors: [ DevicePolicyNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type DeleteDevicePostureError = | PostureRuleNotFound | Forbidden | CloudflareOpError; /** Deletes a device posture rule. */ export const deleteDevicePosture: API.OperationMethod< DeleteDevicePostureRequest, DeleteDevicePostureResponse, DeleteDevicePostureError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDevicePostureRequest, output: DeleteDevicePostureResponse, errors: [ PostureRuleNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDevicePostureIntegrationError = | DevicePostureIntegrationNotFound | Forbidden | CloudflareOpError; /** Delete a configured device posture integration. */ export const deleteDevicePostureIntegration: API.OperationMethod< DeleteDevicePostureIntegrationRequest, DeleteDevicePostureIntegrationResponse, DeleteDevicePostureIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDevicePostureIntegrationRequest, output: DeleteDevicePostureIntegrationResponse, errors: [ DevicePostureIntegrationNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDeviceRegistrationError = CloudflareOpError; /** Deletes a WARP registration. */ export const deleteDeviceRegistration: API.OperationMethod< DeleteDeviceRegistrationRequest, DeleteDeviceRegistrationResponse, DeleteDeviceRegistrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDeviceRegistrationRequest, output: DeleteDeviceRegistrationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDeviceSettingError = Forbidden | CloudflareOpError; /** Resets the current device settings for a Zero Trust account. */ export const deleteDeviceSetting: API.OperationMethod< DeleteDeviceSettingRequest, DeleteDeviceSettingResponse, DeleteDeviceSettingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDeviceSettingRequest, output: DeleteDeviceSettingResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDexRuleError = CloudflareOpError; /** Delete a DEX Rule. */ export const deleteDexRule: API.OperationMethod< DeleteDexRuleRequest, DeleteDexRuleResponse, DeleteDexRuleError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDexRuleRequest, output: DeleteDexRuleResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDlpCustomEntryError = CloudflareOpError; /** Deletes a DLP custom entry. */ export const deleteDlpCustomEntry: API.OperationMethod< DeleteDlpCustomEntryRequest, DeleteDlpCustomEntryResponse, DeleteDlpCustomEntryError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDlpCustomEntryRequest, output: DeleteDlpCustomEntryResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDlpCustomPromptTopicError = CloudflareOpError; /** Deletes a DLP custom prompt topic entry. */ export const deleteDlpCustomPromptTopic: API.OperationMethod< DeleteDlpCustomPromptTopicRequest, DeleteDlpCustomPromptTopicResponse, DeleteDlpCustomPromptTopicError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDlpCustomPromptTopicRequest, output: DeleteDlpCustomPromptTopicResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDlpDataClassError = CloudflareOpError; /** Delete a single data class */ export const deleteDlpDataClass: API.OperationMethod< DeleteDlpDataClassRequest, DeleteDlpDataClassResponse, DeleteDlpDataClassError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDlpDataClassRequest, output: DeleteDlpDataClassResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDlpDatasetError = CloudflareOpError; /** This deletes all versions of the dataset. */ export const deleteDlpDataset: API.OperationMethod< DeleteDlpDatasetRequest, DeleteDlpDatasetResponse, DeleteDlpDatasetError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDlpDatasetRequest, output: DeleteDlpDatasetResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDlpDataTagCategoryError = CloudflareOpError; /** Delete a single data tag category. */ export const deleteDlpDataTagCategory: API.OperationMethod< DeleteDlpDataTagCategoryRequest, DeleteDlpDataTagCategoryResponse, DeleteDlpDataTagCategoryError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDlpDataTagCategoryRequest, output: DeleteDlpDataTagCategoryResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDlpDataTagCategoryDataTagError = CloudflareOpError; /** Delete a single data tag. */ export const deleteDlpDataTagCategoryDataTag: API.OperationMethod< DeleteDlpDataTagCategoryDataTagRequest, DeleteDlpDataTagCategoryDataTagResponse, DeleteDlpDataTagCategoryDataTagError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDlpDataTagCategoryDataTagRequest, output: DeleteDlpDataTagCategoryDataTagResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDlpEmailRuleError = CloudflareOpError; /** Removes a DLP email scanning rule. The rule will no longer be applied to email messages. */ export const deleteDlpEmailRule: API.OperationMethod< DeleteDlpEmailRuleRequest, DeleteDlpEmailRuleResponse, DeleteDlpEmailRuleError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDlpEmailRuleRequest, output: DeleteDlpEmailRuleResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDlpEntryError = DlpEntryNotFound | CloudflareOpError; /** Deletes a DLP custom entry. */ export const deleteDlpEntry: API.OperationMethod< DeleteDlpEntryRequest, DeleteDlpEntryResponse, DeleteDlpEntryError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDlpEntryRequest, output: DeleteDlpEntryResponse, errors: [DlpEntryNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDlpEntryIntegrationError = CloudflareOpError; /** This is a no-op as integration entires can't be deleted but is needed for our generated terraform API. */ export const deleteDlpEntryIntegration: API.OperationMethod< DeleteDlpEntryIntegrationRequest, DeleteDlpEntryIntegrationResponse, DeleteDlpEntryIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDlpEntryIntegrationRequest, output: DeleteDlpEntryIntegrationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDlpEntryPredefinedError = CloudflareOpError; /** This is a no-op as predefined entires can't be deleted but is needed for our generated terraform API. */ export const deleteDlpEntryPredefined: API.OperationMethod< DeleteDlpEntryPredefinedRequest, DeleteDlpEntryPredefinedResponse, DeleteDlpEntryPredefinedError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDlpEntryPredefinedRequest, output: DeleteDlpEntryPredefinedResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDlpProfileCustomError = | DlpProfileNotFound | Forbidden | CloudflareOpError; /** Deletes a DLP custom profile. */ export const deleteDlpProfileCustom: API.OperationMethod< DeleteDlpProfileCustomRequest, DeleteDlpProfileCustomResponse, DeleteDlpProfileCustomError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDlpProfileCustomRequest, output: DeleteDlpProfileCustomResponse, errors: [ DlpProfileNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDlpProfilePredefinedError = CloudflareOpError; /** This is a no-op as predefined profiles can't be deleted but is needed for our generated terraform API. */ export const deleteDlpProfilePredefined: API.OperationMethod< DeleteDlpProfilePredefinedRequest, DeleteDlpProfilePredefinedResponse, DeleteDlpProfilePredefinedError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDlpProfilePredefinedRequest, output: DeleteDlpProfilePredefinedResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDlpSensitivityGroupError = CloudflareOpError; /** Delete a single sensitivity group. */ export const deleteDlpSensitivityGroup: API.OperationMethod< DeleteDlpSensitivityGroupRequest, DeleteDlpSensitivityGroupResponse, DeleteDlpSensitivityGroupError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDlpSensitivityGroupRequest, output: DeleteDlpSensitivityGroupResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDlpSensitivityGroupLevelError = CloudflareOpError; /** Delete a single sensitivity level. */ export const deleteDlpSensitivityGroupLevel: API.OperationMethod< DeleteDlpSensitivityGroupLevelRequest, DeleteDlpSensitivityGroupLevelResponse, DeleteDlpSensitivityGroupLevelError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDlpSensitivityGroupLevelRequest, output: DeleteDlpSensitivityGroupLevelResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteDlpSettingError = CloudflareOpError; /** Delete (reset) DLP account-level settings to initial values. */ export const deleteDlpSetting: API.OperationMethod< DeleteDlpSettingRequest, DeleteDlpSettingResponse, DeleteDlpSettingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteDlpSettingRequest, output: DeleteDlpSettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteGatewayCertificateError = | GatewayCertificateNotFound | GatewayCertificateInUse | CloudflareOpError; /** Delete a gateway-managed Zero Trust certificate. You must deactivate the certificate from the edge (inactive) before deleting it. */ export const deleteGatewayCertificate: API.OperationMethod< DeleteGatewayCertificateRequest, DeleteGatewayCertificateResponse, DeleteGatewayCertificateError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteGatewayCertificateRequest, output: DeleteGatewayCertificateResponse, errors: [ GatewayCertificateNotFound, GatewayCertificateInUse, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteGatewayListError = GatewayListNotFound | CloudflareOpError; /** Deletes a Zero Trust list. */ export const deleteGatewayList: API.OperationMethod< DeleteGatewayListRequest, DeleteGatewayListResponse, DeleteGatewayListError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteGatewayListRequest, output: DeleteGatewayListResponse, errors: [GatewayListNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteGatewayLocationError = | GatewayLocationNotFound | CannotDeleteDefaultGatewayLocation | Forbidden | CloudflareOpError; /** Delete a configured Zero Trust Gateway location. */ export const deleteGatewayLocation: API.OperationMethod< DeleteGatewayLocationRequest, DeleteGatewayLocationResponse, DeleteGatewayLocationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteGatewayLocationRequest, output: DeleteGatewayLocationResponse, errors: [ GatewayLocationNotFound, CannotDeleteDefaultGatewayLocation, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteGatewayPacfileError = CloudflareOpError; /** Delete a configured Zero Trust Gateway PAC file. */ export const deleteGatewayPacfile: API.OperationMethod< DeleteGatewayPacfileRequest, DeleteGatewayPacfileResponse, DeleteGatewayPacfileError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteGatewayPacfileRequest, output: DeleteGatewayPacfileResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteGatewayProxyEndpointError = | ProxyEndpointNotFound | CloudflareOpError; /** Delete a configured Zero Trust Gateway proxy endpoint. */ export const deleteGatewayProxyEndpoint: API.OperationMethod< DeleteGatewayProxyEndpointRequest, DeleteGatewayProxyEndpointResponse, DeleteGatewayProxyEndpointError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteGatewayProxyEndpointRequest, output: DeleteGatewayProxyEndpointResponse, errors: [ProxyEndpointNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteGatewayRuleError = CloudflareOpError; /** Delete a Zero Trust Gateway rule. */ export const deleteGatewayRule: API.OperationMethod< DeleteGatewayRuleRequest, DeleteGatewayRuleResponse, DeleteGatewayRuleError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteGatewayRuleRequest, output: DeleteGatewayRuleResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteIdentityProviderForAccountError = | AccessIdentityProviderNotFound | CloudflareOpError; /** Deletes an identity provider from Access. */ export const deleteIdentityProviderForAccount: API.OperationMethod< DeleteIdentityProviderForAccountRequest, DeleteIdentityProviderResponse, DeleteIdentityProviderForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteIdentityProviderForAccountRequest, output: DeleteIdentityProviderResponse, errors: [ AccessIdentityProviderNotFound, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteIdentityProviderForZoneError = | AccessIdentityProviderNotFound | CloudflareOpError; /** Deletes an identity provider from Access. */ export const deleteIdentityProviderForZone: API.OperationMethod< DeleteIdentityProviderForZoneRequest, DeleteIdentityProviderResponse, DeleteIdentityProviderForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteIdentityProviderForZoneRequest, output: DeleteIdentityProviderResponse, errors: [ AccessIdentityProviderNotFound, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteNetworkHostnameRouteError = | HostnameRouteNotFound | Forbidden | CloudflareOpError; /** Delete a hostname route. */ export const deleteNetworkHostnameRoute: API.OperationMethod< DeleteNetworkHostnameRouteRequest, DeleteNetworkHostnameRouteResponse, DeleteNetworkHostnameRouteError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteNetworkHostnameRouteRequest, output: DeleteNetworkHostnameRouteResponse, errors: [ HostnameRouteNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteNetworkRouteError = CloudflareOpError; /** Deletes a private network route from an account. */ export const deleteNetworkRoute: API.OperationMethod< DeleteNetworkRouteRequest, DeleteNetworkRouteResponse, DeleteNetworkRouteError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteNetworkRouteRequest, output: DeleteNetworkRouteResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteNetworkRouteNetworkError = CloudflareOpError; /** Deletes a private network route from an account. The CIDR in `ip_network_encoded` must be written in URL-encoded format. If no virtual_network_id is provided it will delete the route from the default vnet. If no tun_type is provided it will fetch the type from the tunnel_id or if that is missing it will assume Cloudflare Tunnel as default. If tunnel_id is provided it will delete the route from that tunnel, otherwise it will delete the route based on the vnet and tun_type. */ export const deleteNetworkRouteNetwork: API.OperationMethod< DeleteNetworkRouteNetworkRequest, DeleteNetworkRouteNetworkResponse, DeleteNetworkRouteNetworkError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteNetworkRouteNetworkRequest, output: DeleteNetworkRouteNetworkResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteNetworkSubnetWarpError = CloudflareOpError; /** Delete a WARP IP assignment subnet. This operation is idempotent - deleting an already-deleted or non-existent subnet will return success with a null result. */ export const deleteNetworkSubnetWarp: API.OperationMethod< DeleteNetworkSubnetWarpRequest, DeleteNetworkSubnetWarpResponse, DeleteNetworkSubnetWarpError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteNetworkSubnetWarpRequest, output: DeleteNetworkSubnetWarpResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteNetworkVirtualNetworkError = | VirtualNetworkNotFound | Forbidden | CloudflareOpError; /** Deletes an existing virtual network. */ export const deleteNetworkVirtualNetwork: API.OperationMethod< DeleteNetworkVirtualNetworkRequest, DeleteNetworkVirtualNetworkResponse, DeleteNetworkVirtualNetworkError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteNetworkVirtualNetworkRequest, output: DeleteNetworkVirtualNetworkResponse, errors: [ VirtualNetworkNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteRiskScoringIntegrationError = | RiskScoringIntegrationNotFound | Forbidden | CloudflareOpError; /** Removes a Zero Trust risk score integration, disconnecting the external risk signal source. */ export const deleteRiskScoringIntegration: API.OperationMethod< DeleteRiskScoringIntegrationRequest, DeleteRiskScoringIntegrationResponse, DeleteRiskScoringIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteRiskScoringIntegrationRequest, output: DeleteRiskScoringIntegrationResponse, errors: [ RiskScoringIntegrationNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteTunnelCloudflaredError = CloudflareOpError; /** Deletes a Cloudflare Tunnel from an account. */ export const deleteTunnelCloudflared: API.OperationMethod< DeleteTunnelCloudflaredRequest, DeleteTunnelCloudflaredResponse, DeleteTunnelCloudflaredError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteTunnelCloudflaredRequest, output: DeleteTunnelCloudflaredResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteTunnelCloudflaredConnectionError = CloudflareOpError; /** Removes a connection (aka Cloudflare Tunnel Connector) from a Cloudflare Tunnel independently of its current state. If no connector id (client_id) is provided all connectors will be removed. We recommend running this command after rotating tokens. */ export const deleteTunnelCloudflaredConnection: API.OperationMethod< DeleteTunnelCloudflaredConnectionRequest, DeleteTunnelCloudflaredConnectionResponse, DeleteTunnelCloudflaredConnectionError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteTunnelCloudflaredConnectionRequest, output: DeleteTunnelCloudflaredConnectionResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type DeleteTunnelWarpConnectorError = | TunnelNotFound | Forbidden | CloudflareOpError; /** Deletes a Warp Connector Tunnel from an account. */ export const deleteTunnelWarpConnector: API.OperationMethod< DeleteTunnelWarpConnectorRequest, DeleteTunnelWarpConnectorResponse, DeleteTunnelWarpConnectorError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: DeleteTunnelWarpConnectorRequest, output: DeleteTunnelWarpConnectorResponse, errors: [TunnelNotFound, Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type EditDlpDatasetUploadError = CloudflareOpError; /** This is used for single-column EDMv1 and Custom Word Lists. The EDM format can only be created in the Cloudflare dashboard. For other clients, this operation can only be used for non-secret Custom Word Lists. The body must be a UTF-8 encoded, newline (NL or CRNL) separated list of words to be matched. */ export const editDlpDatasetUpload: API.OperationMethod< EditDlpDatasetUploadRequest, EditDlpDatasetUploadResponse, EditDlpDatasetUploadError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: EditDlpDatasetUploadRequest, output: EditDlpDatasetUploadResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessApplicationCaForAccountError = CloudflareOpError; /** Fetches a short-lived certificate CA and its public key. */ export const getAccessApplicationCaForAccount: API.OperationMethod< GetAccessApplicationCaForAccountRequest, GetAccessApplicationCaResponse, GetAccessApplicationCaForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessApplicationCaForAccountRequest, output: GetAccessApplicationCaResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessApplicationCaForZoneError = CloudflareOpError; /** Fetches a short-lived certificate CA and its public key. */ export const getAccessApplicationCaForZone: API.OperationMethod< GetAccessApplicationCaForZoneRequest, GetAccessApplicationCaResponse, GetAccessApplicationCaForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessApplicationCaForZoneRequest, output: GetAccessApplicationCaResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessApplicationForAccountError = | Forbidden | AccessApplicationNotFound | CloudflareOpError; /** Fetches information about an Access application. */ export const getAccessApplicationForAccount: API.OperationMethod< GetAccessApplicationForAccountRequest, GetAccessApplicationResponse, GetAccessApplicationForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessApplicationForAccountRequest, output: GetAccessApplicationResponse, errors: [ Forbidden, AccessApplicationNotFound, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessApplicationForZoneError = CloudflareOpError; /** Fetches information about an Access application. */ export const getAccessApplicationForZone: API.OperationMethod< GetAccessApplicationForZoneRequest, GetAccessApplicationResponse, GetAccessApplicationForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessApplicationForZoneRequest, output: GetAccessApplicationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessApplicationPolicyForAccountError = CloudflareOpError; /** Fetches a single Access policy configured for an application. Returns both exclusively owned and reusable policies used by the application. */ export const getAccessApplicationPolicyForAccount: API.OperationMethod< GetAccessApplicationPolicyForAccountRequest, GetAccessApplicationPolicyResponse, GetAccessApplicationPolicyForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessApplicationPolicyForAccountRequest, output: GetAccessApplicationPolicyResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessApplicationPolicyForZoneError = CloudflareOpError; /** Fetches a single Access policy configured for an application. Returns both exclusively owned and reusable policies used by the application. */ export const getAccessApplicationPolicyForZone: API.OperationMethod< GetAccessApplicationPolicyForZoneRequest, GetAccessApplicationPolicyResponse, GetAccessApplicationPolicyForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessApplicationPolicyForZoneRequest, output: GetAccessApplicationPolicyResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessApplicationPolicyTestError = CloudflareOpError; /** Fetches the current status of a given Access policy test. */ export const getAccessApplicationPolicyTest: API.OperationMethod< GetAccessApplicationPolicyTestRequest, GetAccessApplicationPolicyTestResponse, GetAccessApplicationPolicyTestError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessApplicationPolicyTestRequest, output: GetAccessApplicationPolicyTestResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessBookmarkError = AccessBookmarkNotFound | CloudflareOpError; /** Fetches a single Bookmark application. */ export const getAccessBookmark: API.OperationMethod< GetAccessBookmarkRequest, GetAccessBookmarkResponse, GetAccessBookmarkError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessBookmarkRequest, output: GetAccessBookmarkResponse, errors: [AccessBookmarkNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessCertificateForAccountError = | AccessCertificateNotFound | CloudflareOpError; /** Fetches a single mTLS certificate. */ export const getAccessCertificateForAccount: API.OperationMethod< GetAccessCertificateForAccountRequest, GetAccessCertificateResponse, GetAccessCertificateForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessCertificateForAccountRequest, output: GetAccessCertificateResponse, errors: [AccessCertificateNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessCertificateForZoneError = | AccessCertificateNotFound | CloudflareOpError; /** Fetches a single mTLS certificate. */ export const getAccessCertificateForZone: API.OperationMethod< GetAccessCertificateForZoneRequest, GetAccessCertificateResponse, GetAccessCertificateForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessCertificateForZoneRequest, output: GetAccessCertificateResponse, errors: [AccessCertificateNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessCertificateSettingForAccountError = CloudflareOpError; /** List all mTLS hostname settings for this account or zone. */ export const getAccessCertificateSettingForAccount: API.PaginatedOperationMethod< GetAccessCertificateSettingForAccountRequest, GetAccessCertificateSettingResponse, GetAccessCertificateSettingForAccountError, CloudflareOpContext, AccessCertificatesSettingsGetResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: GetAccessCertificateSettingForAccountRequest, output: GetAccessCertificateSettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type GetAccessCertificateSettingForZoneError = CloudflareOpError; /** List all mTLS hostname settings for this account or zone. */ export const getAccessCertificateSettingForZone: API.PaginatedOperationMethod< GetAccessCertificateSettingForZoneRequest, GetAccessCertificateSettingResponse, GetAccessCertificateSettingForZoneError, CloudflareOpContext, AccessCertificatesSettingsGetResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: GetAccessCertificateSettingForZoneRequest, output: GetAccessCertificateSettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type GetAccessCustomPageError = | AccessCustomPageNotFound | CloudflareOpError; /** Fetches a custom page and also returns its HTML. */ export const getAccessCustomPage: API.OperationMethod< GetAccessCustomPageRequest, GetAccessCustomPageResponse, GetAccessCustomPageError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessCustomPageRequest, output: GetAccessCustomPageResponse, errors: [AccessCustomPageNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessGroupForAccountError = | AccessGroupNotFound | CloudflareOpError; /** Fetches a single Access group. */ export const getAccessGroupForAccount: API.OperationMethod< GetAccessGroupForAccountRequest, GetAccessGroupResponse, GetAccessGroupForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessGroupForAccountRequest, output: GetAccessGroupResponse, errors: [AccessGroupNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessGroupForZoneError = | AccessGroupNotFound | CloudflareOpError; /** Fetches a single Access group. */ export const getAccessGroupForZone: API.OperationMethod< GetAccessGroupForZoneRequest, GetAccessGroupResponse, GetAccessGroupForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessGroupForZoneRequest, output: GetAccessGroupResponse, errors: [AccessGroupNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessIdpFederationGrantError = CloudflareOpError; /** Retrieves a single IdP federation grant by its UID. */ export const getAccessIdpFederationGrant: API.OperationMethod< GetAccessIdpFederationGrantRequest, GetAccessIdpFederationGrantResponse, GetAccessIdpFederationGrantError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessIdpFederationGrantRequest, output: GetAccessIdpFederationGrantResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessInfrastructureTargetError = | TargetNotFound | Forbidden | CloudflareOpError; /** Get target */ export const getAccessInfrastructureTarget: API.OperationMethod< GetAccessInfrastructureTargetRequest, GetAccessInfrastructureTargetResponse, GetAccessInfrastructureTargetError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessInfrastructureTargetRequest, output: GetAccessInfrastructureTargetResponse, errors: [TargetNotFound, Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessKeyError = Forbidden | CloudflareOpError; /** Gets the Access key rotation settings for an account. */ export const getAccessKey: API.OperationMethod< GetAccessKeyRequest, GetAccessKeyResponse, GetAccessKeyError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessKeyRequest, output: GetAccessKeyResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessPolicyError = CloudflareOpError; /** Fetches a single Access reusable policy. */ export const getAccessPolicy: API.OperationMethod< GetAccessPolicyRequest, GetAccessPolicyResponse, GetAccessPolicyError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessPolicyRequest, output: GetAccessPolicyResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessSamlCertificateError = CloudflareOpError; /** Retrieves a specific SAML encryption certificate set by its UID, including both current and previous certificates if available. */ export const getAccessSamlCertificate: API.OperationMethod< GetAccessSamlCertificateRequest, GetAccessSamlCertificateResponse, GetAccessSamlCertificateError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessSamlCertificateRequest, output: GetAccessSamlCertificateResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessServiceTokenForAccountError = | AccessServiceTokenNotFound | CloudflareOpError; /** Fetches a single service token. */ export const getAccessServiceTokenForAccount: API.OperationMethod< GetAccessServiceTokenForAccountRequest, GetAccessServiceTokenResponse, GetAccessServiceTokenForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessServiceTokenForAccountRequest, output: GetAccessServiceTokenResponse, errors: [AccessServiceTokenNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessServiceTokenForZoneError = | AccessServiceTokenNotFound | CloudflareOpError; /** Fetches a single service token. */ export const getAccessServiceTokenForZone: API.OperationMethod< GetAccessServiceTokenForZoneRequest, GetAccessServiceTokenResponse, GetAccessServiceTokenForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessServiceTokenForZoneRequest, output: GetAccessServiceTokenResponse, errors: [AccessServiceTokenNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessTagError = AccessTagNotFound | CloudflareOpError; /** Get a tag */ export const getAccessTag: API.OperationMethod< GetAccessTagRequest, GetAccessTagResponse, GetAccessTagError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessTagRequest, output: GetAccessTagResponse, errors: [AccessTagNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessUserError = CloudflareOpError; /** Gets a specific user for an account. */ export const getAccessUser: API.OperationMethod< GetAccessUserRequest, GetAccessUserResponse, GetAccessUserError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessUserRequest, output: GetAccessUserResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessUserActiveSessionError = CloudflareOpError; /** Get an active session for a single user. */ export const getAccessUserActiveSession: API.OperationMethod< GetAccessUserActiveSessionRequest, GetAccessUserActiveSessionResponse, GetAccessUserActiveSessionError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessUserActiveSessionRequest, output: GetAccessUserActiveSessionResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetAccessUserLastSeenIdentityError = CloudflareOpError; /** Get last seen identity for a single user. */ export const getAccessUserLastSeenIdentity: API.OperationMethod< GetAccessUserLastSeenIdentityRequest, GetAccessUserLastSeenIdentityResponse, GetAccessUserLastSeenIdentityError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetAccessUserLastSeenIdentityRequest, output: GetAccessUserLastSeenIdentityResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetCasbApplicationError = CloudflareOpError; /** Returns full application details including auth methods, use cases, and permissions. */ export const getCasbApplication: API.OperationMethod< GetCasbApplicationRequest, GetCasbApplicationResponse, GetCasbApplicationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetCasbApplicationRequest, output: GetCasbApplicationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetCasbIntegrationError = CloudflareOpError; /** Returns full integration details including use cases and permissions. */ export const getCasbIntegration: API.OperationMethod< GetCasbIntegrationRequest, GetCasbIntegrationResponse, GetCasbIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetCasbIntegrationRequest, output: GetCasbIntegrationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetConnectivitySettingError = CloudflareOpError; /** Gets the Zero Trust Connectivity Settings for the given account. */ export const getConnectivitySetting: API.OperationMethod< GetConnectivitySettingRequest, GetConnectivitySettingResponse, GetConnectivitySettingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetConnectivitySettingRequest, output: GetConnectivitySettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDeviceError = CloudflareOpError; /** Fetches a single WARP device. Not supported when [multi-user mode](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/windows-multiuser/) is enabled for the account. **Deprecated**: please use one of the following endpoints instead: - GET /accounts/{account_id}/devices/physical-devices/{device_id} - GET /accounts/{account_id}/devices/registrations/{registration_id} */ export const getDevice: API.OperationMethod< GetDeviceRequest, GetDeviceResponse, GetDeviceError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDeviceRequest, output: GetDeviceResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDeviceDeploymentGroupError = CloudflareOpError; /** Fetches a single deployment group by its ID. This endpoint is in Beta. */ export const getDeviceDeploymentGroup: API.OperationMethod< GetDeviceDeploymentGroupRequest, GetDeviceDeploymentGroupResponse, GetDeviceDeploymentGroupError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDeviceDeploymentGroupRequest, output: GetDeviceDeploymentGroupResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDeviceDevicesError = CloudflareOpError; /** Fetches a single WARP device. */ export const getDeviceDevices: API.OperationMethod< GetDeviceDevicesRequest, GetDeviceDevicesResponse, GetDeviceDevicesError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDeviceDevicesRequest, output: GetDeviceDevicesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDeviceDexTestError = | DexTestNotFound | Forbidden | CloudflareOpError; /** Fetch a single DEX test. */ export const getDeviceDexTest: API.OperationMethod< GetDeviceDexTestRequest, GetDeviceDexTestResponse, GetDeviceDexTestError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDeviceDexTestRequest, output: GetDeviceDexTestResponse, errors: [DexTestNotFound, Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDeviceFleetStatusError = CloudflareOpError; /** Get the latest status of a device given device_id from the device_state table. */ export const getDeviceFleetStatus: API.OperationMethod< GetDeviceFleetStatusRequest, GetDeviceFleetStatusResponse, GetDeviceFleetStatusError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDeviceFleetStatusRequest, output: GetDeviceFleetStatusResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDeviceIpProfileError = CloudflareOpError; /** Fetches a single WARP Device IP profile. */ export const getDeviceIpProfile: API.OperationMethod< GetDeviceIpProfileRequest, GetDeviceIpProfileResponse, GetDeviceIpProfileError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDeviceIpProfileRequest, output: GetDeviceIpProfileResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDeviceNetworkError = | DeviceNetworkNotFound | Forbidden | CloudflareOpError; /** Fetches details for a single managed network. */ export const getDeviceNetwork: API.OperationMethod< GetDeviceNetworkRequest, GetDeviceNetworkResponse, GetDeviceNetworkError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDeviceNetworkRequest, output: GetDeviceNetworkResponse, errors: [ DeviceNetworkNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDeviceOverrideCodeError = CloudflareOpError; /** Fetches one-time use admin override codes for a registration. This relies on the **Admin Override** setting being enabled in your device configuration. */ export const getDeviceOverrideCode: API.OperationMethod< GetDeviceOverrideCodeRequest, GetDeviceOverrideCodeResponse, GetDeviceOverrideCodeError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDeviceOverrideCodeRequest, output: GetDeviceOverrideCodeResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDevicePolicyCustomError = | DevicePolicyNotFound | Forbidden | CloudflareOpError; /** Fetches a device settings profile by ID. */ export const getDevicePolicyCustom: API.OperationMethod< GetDevicePolicyCustomRequest, GetDevicePolicyCustomResponse, GetDevicePolicyCustomError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDevicePolicyCustomRequest, output: GetDevicePolicyCustomResponse, errors: [ DevicePolicyNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDevicePolicyCustomExcludeError = | DevicePolicyNotFound | Forbidden | CloudflareOpError; /** Fetches the list of routes excluded from the WARP client's tunnel for a specific device settings profile. */ export const getDevicePolicyCustomExclude: API.PaginatedOperationMethod< GetDevicePolicyCustomExcludeRequest, GetDevicePolicyCustomExcludeResponse, GetDevicePolicyCustomExcludeError, CloudflareOpContext, DevicesPoliciesCustomExcludesGetResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: GetDevicePolicyCustomExcludeRequest, output: GetDevicePolicyCustomExcludeResponse, errors: [ DevicePolicyNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type GetDevicePolicyCustomFallbackDomainError = | DevicePolicyNotFound | Forbidden | CloudflareOpError; /** Fetches the list of domains to bypass Gateway DNS resolution from a specified device settings profile. These domains will use the specified local DNS resolver instead. */ export const getDevicePolicyCustomFallbackDomain: API.PaginatedOperationMethod< GetDevicePolicyCustomFallbackDomainRequest, GetDevicePolicyCustomFallbackDomainResponse, GetDevicePolicyCustomFallbackDomainError, CloudflareOpContext, DevicesPoliciesCustomFallbackDomainsGetResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: GetDevicePolicyCustomFallbackDomainRequest, output: GetDevicePolicyCustomFallbackDomainResponse, errors: [ DevicePolicyNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type GetDevicePolicyCustomIncludeError = | DevicePolicyNotFound | Forbidden | CloudflareOpError; /** Fetches the list of routes included in the WARP client's tunnel for a specific device settings profile. */ export const getDevicePolicyCustomInclude: API.PaginatedOperationMethod< GetDevicePolicyCustomIncludeRequest, GetDevicePolicyCustomIncludeResponse, GetDevicePolicyCustomIncludeError, CloudflareOpContext, DevicesPoliciesCustomIncludesGetResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: GetDevicePolicyCustomIncludeRequest, output: GetDevicePolicyCustomIncludeResponse, errors: [ DevicePolicyNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type GetDevicePolicyDefaultError = CloudflareOpError; /** Fetches the default device settings profile for an account. */ export const getDevicePolicyDefault: API.OperationMethod< GetDevicePolicyDefaultRequest, GetDevicePolicyDefaultResponse, GetDevicePolicyDefaultError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDevicePolicyDefaultRequest, output: GetDevicePolicyDefaultResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDevicePolicyDefaultCertificateError = CloudflareOpError; /** Fetches device certificate provisioning. */ export const getDevicePolicyDefaultCertificate: API.OperationMethod< GetDevicePolicyDefaultCertificateRequest, GetDevicePolicyDefaultCertificateResponse, GetDevicePolicyDefaultCertificateError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDevicePolicyDefaultCertificateRequest, output: GetDevicePolicyDefaultCertificateResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDevicePolicyDefaultExcludeError = CloudflareOpError; /** Fetches the list of routes excluded from the WARP client's tunnel. */ export const getDevicePolicyDefaultExclude: API.PaginatedOperationMethod< GetDevicePolicyDefaultExcludeRequest, GetDevicePolicyDefaultExcludeResponse, GetDevicePolicyDefaultExcludeError, CloudflareOpContext, DevicesPoliciesDefaultExcludesGetResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: GetDevicePolicyDefaultExcludeRequest, output: GetDevicePolicyDefaultExcludeResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type GetDevicePolicyDefaultFallbackDomainError = CloudflareOpError; /** Fetches a list of domains to bypass Gateway DNS resolution. These domains will use the specified local DNS resolver instead. */ export const getDevicePolicyDefaultFallbackDomain: API.PaginatedOperationMethod< GetDevicePolicyDefaultFallbackDomainRequest, GetDevicePolicyDefaultFallbackDomainResponse, GetDevicePolicyDefaultFallbackDomainError, CloudflareOpContext, DevicesPoliciesDefaultFallbackDomainsGetResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: GetDevicePolicyDefaultFallbackDomainRequest, output: GetDevicePolicyDefaultFallbackDomainResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type GetDevicePolicyDefaultIncludeError = CloudflareOpError; /** Fetches the list of routes included in the WARP client's tunnel. */ export const getDevicePolicyDefaultInclude: API.PaginatedOperationMethod< GetDevicePolicyDefaultIncludeRequest, GetDevicePolicyDefaultIncludeResponse, GetDevicePolicyDefaultIncludeError, CloudflareOpContext, DevicesPoliciesDefaultIncludesGetResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: GetDevicePolicyDefaultIncludeRequest, output: GetDevicePolicyDefaultIncludeResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type GetDevicePostureError = | PostureRuleNotFound | Forbidden | CloudflareOpError; /** Fetches a single device posture rule. */ export const getDevicePosture: API.OperationMethod< GetDevicePostureRequest, GetDevicePostureResponse, GetDevicePostureError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDevicePostureRequest, output: GetDevicePostureResponse, errors: [ PostureRuleNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDevicePostureIntegrationError = | DevicePostureIntegrationNotFound | Forbidden | CloudflareOpError; /** Fetches details for a single device posture integration. */ export const getDevicePostureIntegration: API.OperationMethod< GetDevicePostureIntegrationRequest, GetDevicePostureIntegrationResponse, GetDevicePostureIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDevicePostureIntegrationRequest, output: GetDevicePostureIntegrationResponse, errors: [ DevicePostureIntegrationNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDeviceRegistrationError = CloudflareOpError; /** Fetches a single WARP registration. */ export const getDeviceRegistration: API.OperationMethod< GetDeviceRegistrationRequest, GetDeviceRegistrationResponse, GetDeviceRegistrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDeviceRegistrationRequest, output: GetDeviceRegistrationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDeviceResilienceGlobalWarpOverrideError = CloudflareOpError; /** Fetch the Global WARP override state. */ export const getDeviceResilienceGlobalWarpOverride: API.OperationMethod< GetDeviceResilienceGlobalWarpOverrideRequest, GetDeviceResilienceGlobalWarpOverrideResponse, GetDeviceResilienceGlobalWarpOverrideError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDeviceResilienceGlobalWarpOverrideRequest, output: GetDeviceResilienceGlobalWarpOverrideResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDeviceSettingError = Forbidden | CloudflareOpError; /** Describes the current device settings for a Zero Trust account. */ export const getDeviceSetting: API.OperationMethod< GetDeviceSettingRequest, GetDeviceSettingResponse, GetDeviceSettingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDeviceSettingRequest, output: GetDeviceSettingResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDexCommandDownloadError = CloudflareOpError; /** Downloads artifacts for an executed command. Bulk downloads are not supported */ export const getDexCommandDownload: API.OperationMethod< GetDexCommandDownloadRequest, GetDexCommandDownloadResponse, GetDexCommandDownloadError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDexCommandDownloadRequest, output: GetDexCommandDownloadResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDexCommandQuotaError = CloudflareOpError; /** Retrieves the current quota usage and limits for device commands within a specific account, including the time when the quota will reset */ export const getDexCommandQuota: API.OperationMethod< GetDexCommandQuotaRequest, GetDexCommandQuotaResponse, GetDexCommandQuotaError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDexCommandQuotaRequest, output: GetDexCommandQuotaResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDexHttpTestError = CloudflareOpError; /** Get test details and aggregate performance metrics for an http test for a given time period between 1 hour and 7 days. */ export const getDexHttpTest: API.OperationMethod< GetDexHttpTestRequest, GetDexHttpTestResponse, GetDexHttpTestError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDexHttpTestRequest, output: GetDexHttpTestResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDexHttpTestPercentileError = CloudflareOpError; /** Get percentiles for an http test for a given time period between 1 hour and 7 days. */ export const getDexHttpTestPercentile: API.OperationMethod< GetDexHttpTestPercentileRequest, GetDexHttpTestPercentileResponse, GetDexHttpTestPercentileError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDexHttpTestPercentileRequest, output: GetDexHttpTestPercentileResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDexRuleError = CloudflareOpError; /** Get details for a DEX Rule. */ export const getDexRule: API.OperationMethod< GetDexRuleRequest, GetDexRuleResponse, GetDexRuleError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDexRuleRequest, output: GetDexRuleResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDexTracerouteTestError = CloudflareOpError; /** Get test details and aggregate performance metrics for a traceroute test for a given time period between 1 hour and 7 days. */ export const getDexTracerouteTest: API.OperationMethod< GetDexTracerouteTestRequest, GetDexTracerouteTestResponse, GetDexTracerouteTestError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDexTracerouteTestRequest, output: GetDexTracerouteTestResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDexTracerouteTestResultNetworkPathError = CloudflareOpError; /** Get a breakdown of hops and performance metrics for a specific traceroute test run */ export const getDexTracerouteTestResultNetworkPath: API.OperationMethod< GetDexTracerouteTestResultNetworkPathRequest, GetDexTracerouteTestResultNetworkPathResponse, GetDexTracerouteTestResultNetworkPathError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDexTracerouteTestResultNetworkPathRequest, output: GetDexTracerouteTestResultNetworkPathResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDexWarpChangeEventError = CloudflareOpError; /** List WARP configuration and enablement toggle change events by device. */ export const getDexWarpChangeEvent: API.OperationMethod< GetDexWarpChangeEventRequest, GetDexWarpChangeEventResponse, GetDexWarpChangeEventError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDexWarpChangeEventRequest, output: GetDexWarpChangeEventResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpCustomEntryError = CloudflareOpError; /** Fetches a DLP entry by ID. */ export const getDlpCustomEntry: API.OperationMethod< GetDlpCustomEntryRequest, GetDlpCustomEntryResponse, GetDlpCustomEntryError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpCustomEntryRequest, output: GetDlpCustomEntryResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpCustomPromptTopicError = CloudflareOpError; /** Fetches a DLP custom prompt topic entry by ID. */ export const getDlpCustomPromptTopic: API.OperationMethod< GetDlpCustomPromptTopicRequest, GetDlpCustomPromptTopicResponse, GetDlpCustomPromptTopicError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpCustomPromptTopicRequest, output: GetDlpCustomPromptTopicResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpDataClassError = CloudflareOpError; /** Retrieve a specific data class */ export const getDlpDataClass: API.OperationMethod< GetDlpDataClassRequest, GetDlpDataClassResponse, GetDlpDataClassError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpDataClassRequest, output: GetDlpDataClassResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpDatasetError = CloudflareOpError; /** Fetch a specific dataset */ export const getDlpDataset: API.OperationMethod< GetDlpDatasetRequest, GetDlpDatasetResponse, GetDlpDatasetError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpDatasetRequest, output: GetDlpDatasetResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpDataTagCategoryError = CloudflareOpError; /** Retrieve a specific data tag category. */ export const getDlpDataTagCategory: API.OperationMethod< GetDlpDataTagCategoryRequest, GetDlpDataTagCategoryResponse, GetDlpDataTagCategoryError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpDataTagCategoryRequest, output: GetDlpDataTagCategoryResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpDataTagCategoryDataTagError = CloudflareOpError; /** Retrieve a specific data tag. */ export const getDlpDataTagCategoryDataTag: API.OperationMethod< GetDlpDataTagCategoryDataTagRequest, GetDlpDataTagCategoryDataTagResponse, GetDlpDataTagCategoryDataTagError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpDataTagCategoryDataTagRequest, output: GetDlpDataTagCategoryDataTagResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpEmailAccountMappingError = CloudflareOpError; /** Retrieves the email provider mapping configuration for DLP email scanning. */ export const getDlpEmailAccountMapping: API.OperationMethod< GetDlpEmailAccountMappingRequest, GetDlpEmailAccountMappingResponse, GetDlpEmailAccountMappingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpEmailAccountMappingRequest, output: GetDlpEmailAccountMappingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpEmailRuleError = CloudflareOpError; /** Gets detailed configuration for a specific DLP email scanning rule, including detection patterns and actions. */ export const getDlpEmailRule: API.OperationMethod< GetDlpEmailRuleRequest, GetDlpEmailRuleResponse, GetDlpEmailRuleError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpEmailRuleRequest, output: GetDlpEmailRuleResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpEntriesIntegrationError = CloudflareOpError; /** Fetches a DLP entry by ID. */ export const getDlpEntriesIntegration: API.OperationMethod< GetDlpEntriesIntegrationRequest, GetDlpEntriesIntegrationResponse, GetDlpEntriesIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpEntriesIntegrationRequest, output: GetDlpEntriesIntegrationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpEntriesPredefinedError = CloudflareOpError; /** Fetches a DLP entry by ID. */ export const getDlpEntriesPredefined: API.OperationMethod< GetDlpEntriesPredefinedRequest, GetDlpEntriesPredefinedResponse, GetDlpEntriesPredefinedError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpEntriesPredefinedRequest, output: GetDlpEntriesPredefinedResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpEntryError = DlpEntryNotFound | CloudflareOpError; /** Fetches a DLP entry by ID. */ export const getDlpEntry: API.OperationMethod< GetDlpEntryRequest, GetDlpEntryResponse, GetDlpEntryError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpEntryRequest, output: GetDlpEntryResponse, errors: [DlpEntryNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpPayloadLogError = CloudflareOpError; /** Gets the current payload logging configuration for DLP, showing whether matched content is being logged. */ export const getDlpPayloadLog: API.OperationMethod< GetDlpPayloadLogRequest, GetDlpPayloadLogResponse, GetDlpPayloadLogError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpPayloadLogRequest, output: GetDlpPayloadLogResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpProfileError = CloudflareOpError; /** Fetches a DLP profile by ID. */ export const getDlpProfile: API.OperationMethod< GetDlpProfileRequest, GetDlpProfileResponse, GetDlpProfileError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpProfileRequest, output: GetDlpProfileResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpProfileCustomError = | DlpProfileNotFound | Forbidden | CloudflareOpError; /** Fetches a custom DLP profile by id. */ export const getDlpProfileCustom: API.OperationMethod< GetDlpProfileCustomRequest, GetDlpProfileCustomResponse, GetDlpProfileCustomError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpProfileCustomRequest, output: GetDlpProfileCustomResponse, errors: [ DlpProfileNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpProfilePredefinedError = CloudflareOpError; /** This is similar to `get_predefined` but only returns entries that are enabled. This is needed for our terraform API Fetches a predefined DLP profile by id. */ export const getDlpProfilePredefined: API.OperationMethod< GetDlpProfilePredefinedRequest, GetDlpProfilePredefinedResponse, GetDlpProfilePredefinedError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpProfilePredefinedRequest, output: GetDlpProfilePredefinedResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpSensitivityGroupError = CloudflareOpError; /** Retrieve a specific sensitivity group. */ export const getDlpSensitivityGroup: API.OperationMethod< GetDlpSensitivityGroupRequest, GetDlpSensitivityGroupResponse, GetDlpSensitivityGroupError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpSensitivityGroupRequest, output: GetDlpSensitivityGroupResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpSensitivityGroupLevelError = CloudflareOpError; /** Retrieve a specific sensitivity level. */ export const getDlpSensitivityGroupLevel: API.OperationMethod< GetDlpSensitivityGroupLevelRequest, GetDlpSensitivityGroupLevelResponse, GetDlpSensitivityGroupLevelError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpSensitivityGroupLevelRequest, output: GetDlpSensitivityGroupLevelResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpSensitivityGroupLevelOrderError = CloudflareOpError; /** Retrieve the ordered list of level IDs for a sensitivity group. */ export const getDlpSensitivityGroupLevelOrder: API.OperationMethod< GetDlpSensitivityGroupLevelOrderRequest, GetDlpSensitivityGroupLevelOrderResponse, GetDlpSensitivityGroupLevelOrderError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpSensitivityGroupLevelOrderRequest, output: GetDlpSensitivityGroupLevelOrderResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetDlpSettingError = CloudflareOpError; /** Get DLP account-level settings. */ export const getDlpSetting: API.OperationMethod< GetDlpSettingRequest, GetDlpSettingResponse, GetDlpSettingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetDlpSettingRequest, output: GetDlpSettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetGatewayAuditSshSettingError = CloudflareOpError; /** Retrieve all Zero Trust Audit SSH and SSH with Access for Infrastructure settings for an account. */ export const getGatewayAuditSshSetting: API.OperationMethod< GetGatewayAuditSshSettingRequest, GetGatewayAuditSshSettingResponse, GetGatewayAuditSshSettingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetGatewayAuditSshSettingRequest, output: GetGatewayAuditSshSettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetGatewayCertificateError = | GatewayCertificateNotFound | Forbidden | CloudflareOpError; /** Get a single Zero Trust certificate. */ export const getGatewayCertificate: API.OperationMethod< GetGatewayCertificateRequest, GetGatewayCertificateResponse, GetGatewayCertificateError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetGatewayCertificateRequest, output: GetGatewayCertificateResponse, errors: [ GatewayCertificateNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetGatewayConfigurationError = Forbidden | CloudflareOpError; /** Retrieve the current Zero Trust account configuration. */ export const getGatewayConfiguration: API.OperationMethod< GetGatewayConfigurationRequest, GetGatewayConfigurationResponse, GetGatewayConfigurationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetGatewayConfigurationRequest, output: GetGatewayConfigurationResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetGatewayConfigurationCustomCertificateError = CloudflareOpError; /** Retrieve the current Zero Trust certificate configuration. */ export const getGatewayConfigurationCustomCertificate: API.OperationMethod< GetGatewayConfigurationCustomCertificateRequest, GetGatewayConfigurationCustomCertificateResponse, GetGatewayConfigurationCustomCertificateError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetGatewayConfigurationCustomCertificateRequest, output: GetGatewayConfigurationCustomCertificateResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetGatewayListError = | GatewayListNotFound | Forbidden | CloudflareOpError; /** Fetch a single Zero Trust list. */ export const getGatewayList: API.OperationMethod< GetGatewayListRequest, GetGatewayListResponse, GetGatewayListError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetGatewayListRequest, output: GetGatewayListResponse, errors: [ GatewayListNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetGatewayLocationError = | GatewayLocationNotFound | Forbidden | CloudflareOpError; /** Get a single Zero Trust Gateway location. */ export const getGatewayLocation: API.OperationMethod< GetGatewayLocationRequest, GetGatewayLocationResponse, GetGatewayLocationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetGatewayLocationRequest, output: GetGatewayLocationResponse, errors: [ GatewayLocationNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetGatewayLoggingError = Forbidden | CloudflareOpError; /** Retrieve the current logging settings for the Zero Trust account. */ export const getGatewayLogging: API.OperationMethod< GetGatewayLoggingRequest, GetGatewayLoggingResponse, GetGatewayLoggingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetGatewayLoggingRequest, output: GetGatewayLoggingResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetGatewayPacfileError = CloudflareOpError; /** Get a single Zero Trust Gateway PAC file. */ export const getGatewayPacfile: API.OperationMethod< GetGatewayPacfileRequest, GetGatewayPacfileResponse, GetGatewayPacfileError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetGatewayPacfileRequest, output: GetGatewayPacfileResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetGatewayProxyEndpointError = | ProxyEndpointNotFound | Forbidden | CloudflareOpError; /** Get a single Zero Trust Gateway proxy endpoint. */ export const getGatewayProxyEndpoint: API.OperationMethod< GetGatewayProxyEndpointRequest, GetGatewayProxyEndpointResponse, GetGatewayProxyEndpointError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetGatewayProxyEndpointRequest, output: GetGatewayProxyEndpointResponse, errors: [ ProxyEndpointNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetGatewayRuleError = CloudflareOpError; /** Get a single Zero Trust Gateway rule. */ export const getGatewayRule: API.OperationMethod< GetGatewayRuleRequest, GetGatewayRuleResponse, GetGatewayRuleError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetGatewayRuleRequest, output: GetGatewayRuleResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetIdentityProviderForAccountError = | AccessIdentityProviderNotFound | Forbidden | CloudflareOpError; /** Fetches a configured identity provider. */ export const getIdentityProviderForAccount: API.OperationMethod< GetIdentityProviderForAccountRequest, GetIdentityProviderResponse, GetIdentityProviderForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetIdentityProviderForAccountRequest, output: GetIdentityProviderResponse, errors: [ AccessIdentityProviderNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetIdentityProviderForZoneError = | AccessIdentityProviderNotFound | Forbidden | CloudflareOpError; /** Fetches a configured identity provider. */ export const getIdentityProviderForZone: API.OperationMethod< GetIdentityProviderForZoneRequest, GetIdentityProviderResponse, GetIdentityProviderForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetIdentityProviderForZoneRequest, output: GetIdentityProviderResponse, errors: [ AccessIdentityProviderNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetNetworkHostnameRouteError = | HostnameRouteNotFound | Forbidden | CloudflareOpError; /** Get a hostname route. */ export const getNetworkHostnameRoute: API.OperationMethod< GetNetworkHostnameRouteRequest, GetNetworkHostnameRouteResponse, GetNetworkHostnameRouteError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetNetworkHostnameRouteRequest, output: GetNetworkHostnameRouteResponse, errors: [ HostnameRouteNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetNetworkRouteError = CloudflareOpError; /** Get a private network route in an account. */ export const getNetworkRoute: API.OperationMethod< GetNetworkRouteRequest, GetNetworkRouteResponse, GetNetworkRouteError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetNetworkRouteRequest, output: GetNetworkRouteResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetNetworkRouteIpError = CloudflareOpError; /** Fetches routes that contain the given IP address. */ export const getNetworkRouteIp: API.OperationMethod< GetNetworkRouteIpRequest, GetNetworkRouteIpResponse, GetNetworkRouteIpError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetNetworkRouteIpRequest, output: GetNetworkRouteIpResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetNetworkSubnetWarpError = CloudflareOpError; /** Get a WARP IP assignment subnet. */ export const getNetworkSubnetWarp: API.OperationMethod< GetNetworkSubnetWarpRequest, GetNetworkSubnetWarpResponse, GetNetworkSubnetWarpError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetNetworkSubnetWarpRequest, output: GetNetworkSubnetWarpResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetNetworkVirtualNetworkError = | VirtualNetworkNotFound | Forbidden | CloudflareOpError; /** Get a virtual network. */ export const getNetworkVirtualNetwork: API.OperationMethod< GetNetworkVirtualNetworkRequest, GetNetworkVirtualNetworkResponse, GetNetworkVirtualNetworkError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetNetworkVirtualNetworkRequest, output: GetNetworkVirtualNetworkResponse, errors: [ VirtualNetworkNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetOrganizationDohError = CloudflareOpError; /** Returns the DoH settings for your Zero Trust organization. */ export const getOrganizationDoh: API.OperationMethod< GetOrganizationDohRequest, GetOrganizationDohResponse, GetOrganizationDohError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetOrganizationDohRequest, output: GetOrganizationDohResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetPemAccessSamlCertificateError = CloudflareOpError; /** Downloads the current SAML encryption certificate's public key in PEM format for the specified certificate set. This endpoint is useful for providing the certificate to Identity Providers for SAML assertion encryption configuration. */ export const getPemAccessSamlCertificate: API.OperationMethod< GetPemAccessSamlCertificateRequest, GetPemAccessSamlCertificateResponse, GetPemAccessSamlCertificateError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetPemAccessSamlCertificateRequest, output: GetPemAccessSamlCertificateResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetResourceLibraryApplicationError = CloudflareOpError; /** Get application by ID. */ export const getResourceLibraryApplication: API.OperationMethod< GetResourceLibraryApplicationRequest, GetResourceLibraryApplicationResponse, GetResourceLibraryApplicationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetResourceLibraryApplicationRequest, output: GetResourceLibraryApplicationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetResourceLibraryCategoryError = CloudflareOpError; /** Get application category by ID. */ export const getResourceLibraryCategory: API.OperationMethod< GetResourceLibraryCategoryRequest, GetResourceLibraryCategoryResponse, GetResourceLibraryCategoryError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetResourceLibraryCategoryRequest, output: GetResourceLibraryCategoryResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetRiskScoringError = CloudflareOpError; /** Retrieves the detailed risk score breakdown for a specific user, including contributing factors. */ export const getRiskScoring: API.OperationMethod< GetRiskScoringRequest, GetRiskScoringResponse, GetRiskScoringError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetRiskScoringRequest, output: GetRiskScoringResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetRiskScoringBehaviourError = CloudflareOpError; /** Retrieves configured risk score behaviors that define how user actions affect their overall risk score. */ export const getRiskScoringBehaviour: API.OperationMethod< GetRiskScoringBehaviourRequest, GetRiskScoringBehaviourResponse, GetRiskScoringBehaviourError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetRiskScoringBehaviourRequest, output: GetRiskScoringBehaviourResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetRiskScoringIntegrationError = | RiskScoringIntegrationNotFound | Forbidden | CloudflareOpError; /** Get risk score integration by id. */ export const getRiskScoringIntegration: API.OperationMethod< GetRiskScoringIntegrationRequest, GetRiskScoringIntegrationResponse, GetRiskScoringIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetRiskScoringIntegrationRequest, output: GetRiskScoringIntegrationResponse, errors: [ RiskScoringIntegrationNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetRiskScoringIntegrationReferenceError = CloudflareOpError; /** Retrieves a Zero Trust risk score integration using its external reference ID. */ export const getRiskScoringIntegrationReference: API.OperationMethod< GetRiskScoringIntegrationReferenceRequest, GetRiskScoringIntegrationReferenceResponse, GetRiskScoringIntegrationReferenceError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetRiskScoringIntegrationReferenceRequest, output: GetRiskScoringIntegrationReferenceResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetRiskScoringSummaryError = CloudflareOpError; /** Gets an aggregate summary of risk scores across the account, including distribution and trends. */ export const getRiskScoringSummary: API.OperationMethod< GetRiskScoringSummaryRequest, GetRiskScoringSummaryResponse, GetRiskScoringSummaryError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetRiskScoringSummaryRequest, output: GetRiskScoringSummaryResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetTunnelCloudflaredError = TunnelNotFound | CloudflareOpError; /** Fetches a single Cloudflare Tunnel. */ export const getTunnelCloudflared: API.OperationMethod< GetTunnelCloudflaredRequest, GetTunnelCloudflaredResponse, GetTunnelCloudflaredError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetTunnelCloudflaredRequest, output: GetTunnelCloudflaredResponse, errors: [TunnelNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetTunnelCloudflaredConfigurationError = | TunnelConfigurationNotFound | CloudflareOpError; /** Gets the configuration for a remotely-managed tunnel */ export const getTunnelCloudflaredConfiguration: API.OperationMethod< GetTunnelCloudflaredConfigurationRequest, GetTunnelCloudflaredConfigurationResponse, GetTunnelCloudflaredConfigurationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetTunnelCloudflaredConfigurationRequest, output: GetTunnelCloudflaredConfigurationResponse, errors: [TunnelConfigurationNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetTunnelCloudflaredConnectionError = CloudflareOpError; /** Fetches connection details for a Cloudflare Tunnel. */ export const getTunnelCloudflaredConnection: API.PaginatedOperationMethod< GetTunnelCloudflaredConnectionRequest, GetTunnelCloudflaredConnectionResponse, GetTunnelCloudflaredConnectionError, CloudflareOpContext, TunnelsCloudflaredConnectionsGetResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: GetTunnelCloudflaredConnectionRequest, output: GetTunnelCloudflaredConnectionResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type GetTunnelCloudflaredConnectorError = CloudflareOpError; /** Fetches connector and connection details for a Cloudflare Tunnel. */ export const getTunnelCloudflaredConnector: API.OperationMethod< GetTunnelCloudflaredConnectorRequest, GetTunnelCloudflaredConnectorResponse, GetTunnelCloudflaredConnectorError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetTunnelCloudflaredConnectorRequest, output: GetTunnelCloudflaredConnectorResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetTunnelCloudflaredTokenError = | TunnelTokenNotFound | CloudflareOpError; /** Gets the token used to associate cloudflared with a specific tunnel. */ export const getTunnelCloudflaredToken: API.OperationMethod< GetTunnelCloudflaredTokenRequest, GetTunnelCloudflaredTokenResponse, GetTunnelCloudflaredTokenError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetTunnelCloudflaredTokenRequest, output: GetTunnelCloudflaredTokenResponse, errors: [TunnelTokenNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetTunnelWarpConnectorError = | TunnelNotFound | Forbidden | CloudflareOpError; /** Fetches a single Warp Connector Tunnel. */ export const getTunnelWarpConnector: API.OperationMethod< GetTunnelWarpConnectorRequest, GetTunnelWarpConnectorResponse, GetTunnelWarpConnectorError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetTunnelWarpConnectorRequest, output: GetTunnelWarpConnectorResponse, errors: [TunnelNotFound, Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetTunnelWarpConnectorConfigurationError = CloudflareOpError; /** Gets the high-availability configuration for a WARP Connector tunnel. */ export const getTunnelWarpConnectorConfiguration: API.OperationMethod< GetTunnelWarpConnectorConfigurationRequest, GetTunnelWarpConnectorConfigurationResponse, GetTunnelWarpConnectorConfigurationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetTunnelWarpConnectorConfigurationRequest, output: GetTunnelWarpConnectorConfigurationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetTunnelWarpConnectorConnectionError = CloudflareOpError; /** Fetches connection details for a WARP Connector Tunnel. */ export const getTunnelWarpConnectorConnection: API.PaginatedOperationMethod< GetTunnelWarpConnectorConnectionRequest, GetTunnelWarpConnectorConnectionResponse, GetTunnelWarpConnectorConnectionError, CloudflareOpContext, TunnelsWarpConnectorConnectionsGetResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: GetTunnelWarpConnectorConnectionRequest, output: GetTunnelWarpConnectorConnectionResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type GetTunnelWarpConnectorConnectorError = CloudflareOpError; /** Fetches connector and connection details for a WARP Connector Tunnel. */ export const getTunnelWarpConnectorConnector: API.OperationMethod< GetTunnelWarpConnectorConnectorRequest, GetTunnelWarpConnectorConnectorResponse, GetTunnelWarpConnectorConnectorError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetTunnelWarpConnectorConnectorRequest, output: GetTunnelWarpConnectorConnectorResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type GetTunnelWarpConnectorTokenError = | TunnelNotFound | Forbidden | CloudflareOpError; /** Gets the token used to associate warp device with a specific Warp Connector tunnel. */ export const getTunnelWarpConnectorToken: API.OperationMethod< GetTunnelWarpConnectorTokenRequest, GetTunnelWarpConnectorTokenResponse, GetTunnelWarpConnectorTokenError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: GetTunnelWarpConnectorTokenRequest, output: GetTunnelWarpConnectorTokenResponse, errors: [TunnelNotFound, Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListAccessAiControlMcpPortalsError = Forbidden | CloudflareOpError; /** Lists all MCP portals configured for the account. */ export const listAccessAiControlMcpPortals: API.PaginatedOperationMethod< ListAccessAiControlMcpPortalsRequest, ListAccessAiControlMcpPortalsResponse, ListAccessAiControlMcpPortalsError, CloudflareOpContext, AccessAiControlsMcpPortalsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessAiControlMcpPortalsRequest, output: ListAccessAiControlMcpPortalsResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessAiControlMcpServersError = CloudflareOpError; /** Lists all MCP portals configured for the account. */ export const listAccessAiControlMcpServers: API.PaginatedOperationMethod< ListAccessAiControlMcpServersRequest, ListAccessAiControlMcpServersResponse, ListAccessAiControlMcpServersError, CloudflareOpContext, AccessAiControlsMcpServersListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessAiControlMcpServersRequest, output: ListAccessAiControlMcpServersResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessApplicationCasForAccountError = CloudflareOpError; /** Lists short-lived certificate CAs and their public keys. */ export const listAccessApplicationCasForAccount: API.PaginatedOperationMethod< ListAccessApplicationCasForAccountRequest, ListAccessApplicationCasResponse, ListAccessApplicationCasForAccountError, CloudflareOpContext, AccessApplicationsCasListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessApplicationCasForAccountRequest, output: ListAccessApplicationCasResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessApplicationCasForZoneError = CloudflareOpError; /** Lists short-lived certificate CAs and their public keys. */ export const listAccessApplicationCasForZone: API.PaginatedOperationMethod< ListAccessApplicationCasForZoneRequest, ListAccessApplicationCasResponse, ListAccessApplicationCasForZoneError, CloudflareOpContext, AccessApplicationsCasListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessApplicationCasForZoneRequest, output: ListAccessApplicationCasResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessApplicationPoliciesForAccountError = CloudflareOpError; /** Lists Access policies configured for an application. Returns both exclusively scoped and reusable policies used by the application. */ export const listAccessApplicationPoliciesForAccount: API.PaginatedOperationMethod< ListAccessApplicationPoliciesForAccountRequest, ListAccessApplicationPoliciesResponse, ListAccessApplicationPoliciesForAccountError, CloudflareOpContext, AccessApplicationsPoliciesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessApplicationPoliciesForAccountRequest, output: ListAccessApplicationPoliciesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessApplicationPoliciesForZoneError = CloudflareOpError; /** Lists Access policies configured for an application. Returns both exclusively scoped and reusable policies used by the application. */ export const listAccessApplicationPoliciesForZone: API.PaginatedOperationMethod< ListAccessApplicationPoliciesForZoneRequest, ListAccessApplicationPoliciesResponse, ListAccessApplicationPoliciesForZoneError, CloudflareOpContext, AccessApplicationsPoliciesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessApplicationPoliciesForZoneRequest, output: ListAccessApplicationPoliciesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessApplicationPolicyTestUsersError = CloudflareOpError; /** Fetches a single page of user results from an Access policy test. */ export const listAccessApplicationPolicyTestUsers: API.PaginatedOperationMethod< ListAccessApplicationPolicyTestUsersRequest, ListAccessApplicationPolicyTestUsersResponse, ListAccessApplicationPolicyTestUsersError, CloudflareOpContext, AccessApplicationsPolicyTestsUsersListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessApplicationPolicyTestUsersRequest, output: ListAccessApplicationPolicyTestUsersResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessApplicationsForAccountError = | AccessReferenceNotFound | CloudflareOpError; /** Lists all Access applications in an account or zone. */ export const listAccessApplicationsForAccount: API.PaginatedOperationMethod< ListAccessApplicationsForAccountRequest, ListAccessApplicationsResponse, ListAccessApplicationsForAccountError, CloudflareOpContext, AccessApplicationsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessApplicationsForAccountRequest, output: ListAccessApplicationsResponse, errors: [AccessReferenceNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessApplicationsForZoneError = | AccessReferenceNotFound | CloudflareOpError; /** Lists all Access applications in an account or zone. */ export const listAccessApplicationsForZone: API.PaginatedOperationMethod< ListAccessApplicationsForZoneRequest, ListAccessApplicationsResponse, ListAccessApplicationsForZoneError, CloudflareOpContext, AccessApplicationsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessApplicationsForZoneRequest, output: ListAccessApplicationsResponse, errors: [AccessReferenceNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessApplicationUserPolicyChecksForAccountError = CloudflareOpError; /** Tests if a specific user has permission to access an application. */ export const listAccessApplicationUserPolicyChecksForAccount: API.OperationMethod< ListAccessApplicationUserPolicyChecksForAccountRequest, ListAccessApplicationUserPolicyChecksResponse, ListAccessApplicationUserPolicyChecksForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListAccessApplicationUserPolicyChecksForAccountRequest, output: ListAccessApplicationUserPolicyChecksResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListAccessApplicationUserPolicyChecksForZoneError = CloudflareOpError; /** Tests if a specific user has permission to access an application. */ export const listAccessApplicationUserPolicyChecksForZone: API.OperationMethod< ListAccessApplicationUserPolicyChecksForZoneRequest, ListAccessApplicationUserPolicyChecksResponse, ListAccessApplicationUserPolicyChecksForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListAccessApplicationUserPolicyChecksForZoneRequest, output: ListAccessApplicationUserPolicyChecksResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListAccessBookmarksError = CloudflareOpError; /** Lists Bookmark applications. */ export const listAccessBookmarks: API.PaginatedOperationMethod< ListAccessBookmarksRequest, ListAccessBookmarksResponse, ListAccessBookmarksError, CloudflareOpContext, AccessBookmarksListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessBookmarksRequest, output: ListAccessBookmarksResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListAccessCertificatesForAccountError = CloudflareOpError; /** Lists all mTLS root certificates. */ export const listAccessCertificatesForAccount: API.PaginatedOperationMethod< ListAccessCertificatesForAccountRequest, ListAccessCertificatesResponse, ListAccessCertificatesForAccountError, CloudflareOpContext, AccessCertificatesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessCertificatesForAccountRequest, output: ListAccessCertificatesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessCertificatesForZoneError = CloudflareOpError; /** Lists all mTLS root certificates. */ export const listAccessCertificatesForZone: API.PaginatedOperationMethod< ListAccessCertificatesForZoneRequest, ListAccessCertificatesResponse, ListAccessCertificatesForZoneError, CloudflareOpContext, AccessCertificatesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessCertificatesForZoneRequest, output: ListAccessCertificatesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessCustomPagesError = CloudflareOpError; /** List custom pages */ export const listAccessCustomPages: API.PaginatedOperationMethod< ListAccessCustomPagesRequest, ListAccessCustomPagesResponse, ListAccessCustomPagesError, CloudflareOpContext, AccessCustomPagesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessCustomPagesRequest, output: ListAccessCustomPagesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessGatewayCasError = CloudflareOpError; /** Lists SSH Certificate Authorities (CA). */ export const listAccessGatewayCas: API.PaginatedOperationMethod< ListAccessGatewayCasRequest, ListAccessGatewayCasResponse, ListAccessGatewayCasError, CloudflareOpContext, AccessGatewayCaListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessGatewayCasRequest, output: ListAccessGatewayCasResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListAccessGroupsForAccountError = CloudflareOpError; /** Lists all Access groups. */ export const listAccessGroupsForAccount: API.PaginatedOperationMethod< ListAccessGroupsForAccountRequest, ListAccessGroupsResponse, ListAccessGroupsForAccountError, CloudflareOpContext, AccessGroupsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessGroupsForAccountRequest, output: ListAccessGroupsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessGroupsForZoneError = CloudflareOpError; /** Lists all Access groups. */ export const listAccessGroupsForZone: API.PaginatedOperationMethod< ListAccessGroupsForZoneRequest, ListAccessGroupsResponse, ListAccessGroupsForZoneError, CloudflareOpContext, AccessGroupsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessGroupsForZoneRequest, output: ListAccessGroupsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessIdpFederationGrantsError = CloudflareOpError; /** Lists the IdP federation grants owned by the account. */ export const listAccessIdpFederationGrants: API.OperationMethod< ListAccessIdpFederationGrantsRequest, ListAccessIdpFederationGrantsResponse, ListAccessIdpFederationGrantsError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListAccessIdpFederationGrantsRequest, output: ListAccessIdpFederationGrantsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListAccessInfrastructureTargetsError = | Forbidden | CloudflareOpError; /** Lists and sorts an account’s targets. Filters are optional and are ANDed together. */ export const listAccessInfrastructureTargets: API.PaginatedOperationMethod< ListAccessInfrastructureTargetsRequest, ListAccessInfrastructureTargetsResponse, ListAccessInfrastructureTargetsError, CloudflareOpContext, AccessInfrastructureTargetsBulkUpdateResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessInfrastructureTargetsRequest, output: ListAccessInfrastructureTargetsResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessLogAccessRequestsError = CloudflareOpError; /** Gets a list of Access authentication audit logs for an account. */ export const listAccessLogAccessRequests: API.OperationMethod< ListAccessLogAccessRequestsRequest, ListAccessLogAccessRequestsResponse, ListAccessLogAccessRequestsError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListAccessLogAccessRequestsRequest, output: ListAccessLogAccessRequestsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListAccessLogScimUpdatesError = CloudflareOpError; /** Lists Access SCIM update logs that maintain a record of updates made to User and Group resources synced to Cloudflare via the System for Cross-domain Identity Management (SCIM). */ export const listAccessLogScimUpdates: API.PaginatedOperationMethod< ListAccessLogScimUpdatesRequest, ListAccessLogScimUpdatesResponse, ListAccessLogScimUpdatesError, CloudflareOpContext, AccessLogsScimUpdatesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessLogScimUpdatesRequest, output: ListAccessLogScimUpdatesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessPoliciesError = CloudflareOpError; /** Lists Access reusable policies. */ export const listAccessPolicies: API.PaginatedOperationMethod< ListAccessPoliciesRequest, ListAccessPoliciesResponse, ListAccessPoliciesError, CloudflareOpContext, AccessPoliciesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessPoliciesRequest, output: ListAccessPoliciesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessSamlCertificatesError = CloudflareOpError; /** Returns a paginated list of the organization's SAML encryption certificate sets. Each certificate set includes the current and (if present) previous certificates. */ export const listAccessSamlCertificates: API.PaginatedOperationMethod< ListAccessSamlCertificatesRequest, ListAccessSamlCertificatesResponse, ListAccessSamlCertificatesError, CloudflareOpContext, AccessSamlCertificatesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessSamlCertificatesRequest, output: ListAccessSamlCertificatesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessServiceTokensForAccountError = CloudflareOpError; /** Lists all service tokens. */ export const listAccessServiceTokensForAccount: API.PaginatedOperationMethod< ListAccessServiceTokensForAccountRequest, ListAccessServiceTokensResponse, ListAccessServiceTokensForAccountError, CloudflareOpContext, AccessServiceTokensListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessServiceTokensForAccountRequest, output: ListAccessServiceTokensResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessServiceTokensForZoneError = CloudflareOpError; /** Lists all service tokens. */ export const listAccessServiceTokensForZone: API.PaginatedOperationMethod< ListAccessServiceTokensForZoneRequest, ListAccessServiceTokensResponse, ListAccessServiceTokensForZoneError, CloudflareOpContext, AccessServiceTokensListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessServiceTokensForZoneRequest, output: ListAccessServiceTokensResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessTagsError = CloudflareOpError; /** List tags */ export const listAccessTags: API.PaginatedOperationMethod< ListAccessTagsRequest, ListAccessTagsResponse, ListAccessTagsError, CloudflareOpContext, AccessTagsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessTagsRequest, output: ListAccessTagsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListAccessUserActiveSessionsError = CloudflareOpError; /** Get active sessions for a single user. */ export const listAccessUserActiveSessions: API.PaginatedOperationMethod< ListAccessUserActiveSessionsRequest, ListAccessUserActiveSessionsResponse, ListAccessUserActiveSessionsError, CloudflareOpContext, AccessUsersActiveSessionsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessUserActiveSessionsRequest, output: ListAccessUserActiveSessionsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListAccessUserFailedLoginsError = CloudflareOpError; /** Get all failed login attempts for a single user. */ export const listAccessUserFailedLogins: API.PaginatedOperationMethod< ListAccessUserFailedLoginsRequest, ListAccessUserFailedLoginsResponse, ListAccessUserFailedLoginsError, CloudflareOpContext, AccessUsersFailedLoginsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessUserFailedLoginsRequest, output: ListAccessUserFailedLoginsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListAccessUsersError = CloudflareOpError; /** Gets a list of users for an account. */ export const listAccessUsers: API.PaginatedOperationMethod< ListAccessUsersRequest, ListAccessUsersResponse, ListAccessUsersError, CloudflareOpContext, AccessUsersListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListAccessUsersRequest, output: ListAccessUsersResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListCasbApplicationsError = CloudflareOpError; /** Returns a list of available applications with use cases and permissions. */ export const listCasbApplications: API.OperationMethod< ListCasbApplicationsRequest, ListCasbApplicationsResponse, ListCasbApplicationsError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListCasbApplicationsRequest, output: ListCasbApplicationsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListCasbApplicationsSetupFlowsError = CloudflareOpError; /** Returns all available setup flows for the application, one per auth method. */ export const listCasbApplicationsSetupFlows: API.OperationMethod< ListCasbApplicationsSetupFlowsRequest, ListCasbApplicationsSetupFlowsResponse, ListCasbApplicationsSetupFlowsError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListCasbApplicationsSetupFlowsRequest, output: ListCasbApplicationsSetupFlowsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListCasbIntegrationsError = CloudflareOpError; /** Returns a paginated list of integrations for the account. */ export const listCasbIntegrations: API.OperationMethod< ListCasbIntegrationsRequest, ListCasbIntegrationsResponse, ListCasbIntegrationsError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListCasbIntegrationsRequest, output: ListCasbIntegrationsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListDeviceDeploymentGroupsError = CloudflareOpError; /** Lists all deployment groups for an account. Use deployment groups to assign target WARP client versions to specific devices. This endpoint is in Beta. */ export const listDeviceDeploymentGroups: API.PaginatedOperationMethod< ListDeviceDeploymentGroupsRequest, ListDeviceDeploymentGroupsResponse, ListDeviceDeploymentGroupsError, CloudflareOpContext, DevicesDeploymentGroupsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDeviceDeploymentGroupsRequest, output: ListDeviceDeploymentGroupsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListDeviceDevicesError = CloudflareOpError; /** Lists WARP devices. */ export const listDeviceDevices: API.PaginatedOperationMethod< ListDeviceDevicesRequest, ListDeviceDevicesResponse, ListDeviceDevicesError, CloudflareOpContext, DevicesDevicesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDeviceDevicesRequest, output: ListDeviceDevicesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "cursor", inputToken: "cursor", outputToken: "resultInfo.cursor", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListDeviceDexTestsError = Forbidden | CloudflareOpError; /** Fetch all DEX tests. */ export const listDeviceDexTests: API.PaginatedOperationMethod< ListDeviceDexTestsRequest, ListDeviceDexTestsResponse, ListDeviceDexTestsError, CloudflareOpContext, DevicesDexTestsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDeviceDexTestsRequest, output: ListDeviceDexTestsResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListDeviceIpProfilesError = CloudflareOpError; /** Lists WARP Device IP profiles. */ export const listDeviceIpProfiles: API.PaginatedOperationMethod< ListDeviceIpProfilesRequest, ListDeviceIpProfilesResponse, ListDeviceIpProfilesError, CloudflareOpContext, DevicesIpProfilesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDeviceIpProfilesRequest, output: ListDeviceIpProfilesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListDeviceNetworksError = Forbidden | CloudflareOpError; /** Fetches a list of managed networks for an account. */ export const listDeviceNetworks: API.PaginatedOperationMethod< ListDeviceNetworksRequest, ListDeviceNetworksResponse, ListDeviceNetworksError, CloudflareOpContext, DevicesNetworksListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDeviceNetworksRequest, output: ListDeviceNetworksResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDeviceOverrideCodesError = CloudflareOpError; /** Fetches a one-time use admin override code for a device. This relies on the **Admin Override** setting being enabled in your device configuration. Not supported when [multi-user mode](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/windows-multiuser/) is enabled for the account. **Deprecated:** please use GET /accounts/{account_id}/devices/registrations/{registration_id}/override_codes instead. */ export const listDeviceOverrideCodes: API.PaginatedOperationMethod< ListDeviceOverrideCodesRequest, ListDeviceOverrideCodesResponse, ListDeviceOverrideCodesError, CloudflareOpContext, unknown > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDeviceOverrideCodesRequest, output: ListDeviceOverrideCodesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDevicePolicyCustomsError = Forbidden | CloudflareOpError; /** Fetches a list of the device settings profiles for an account. */ export const listDevicePolicyCustoms: API.PaginatedOperationMethod< ListDevicePolicyCustomsRequest, ListDevicePolicyCustomsResponse, ListDevicePolicyCustomsError, CloudflareOpContext, DevicesPoliciesCustomListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDevicePolicyCustomsRequest, output: ListDevicePolicyCustomsResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDevicePostureIntegrationsError = Forbidden | CloudflareOpError; /** Fetches the list of device posture integrations for an account. */ export const listDevicePostureIntegrations: API.PaginatedOperationMethod< ListDevicePostureIntegrationsRequest, ListDevicePostureIntegrationsResponse, ListDevicePostureIntegrationsError, CloudflareOpContext, DevicesPostureIntegrationsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDevicePostureIntegrationsRequest, output: ListDevicePostureIntegrationsResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDevicePosturesError = Forbidden | CloudflareOpError; /** Fetches device posture rules for a Zero Trust account. */ export const listDevicePostures: API.PaginatedOperationMethod< ListDevicePosturesRequest, ListDevicePosturesResponse, ListDevicePosturesError, CloudflareOpContext, DevicesPostureListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDevicePosturesRequest, output: ListDevicePosturesResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDeviceRegistrationsError = CloudflareOpError; /** Lists WARP registrations. */ export const listDeviceRegistrations: API.PaginatedOperationMethod< ListDeviceRegistrationsRequest, ListDeviceRegistrationsResponse, ListDeviceRegistrationsError, CloudflareOpContext, DevicesRegistrationsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDeviceRegistrationsRequest, output: ListDeviceRegistrationsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "cursor", inputToken: "cursor", outputToken: "resultInfo.cursor", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListDevicesError = CloudflareOpError; /** List WARP devices. Not supported when [multi-user mode](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/windows-multiuser/) is enabled for the account. **Deprecated**: please use one of the following endpoints instead: - GET /accounts/{account_id}/devices/physical-devices - GET /accounts/{account_id}/devices/registrations */ export const listDevices: API.PaginatedOperationMethod< ListDevicesRequest, ListDevicesResponse, ListDevicesError, CloudflareOpContext, DevicesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDevicesRequest, output: ListDevicesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDexColosError = CloudflareOpError; /** List Cloudflare colos that account's devices were connected to during a time period, sorted by usage starting from the most used colo. Colos without traffic are also returned and sorted alphabetically. */ export const listDexColos: API.PaginatedOperationMethod< ListDexColosRequest, ListDexColosResponse, ListDexColosError, CloudflareOpContext, DexColosListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDexColosRequest, output: ListDexColosResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDexCommandDevicesError = CloudflareOpError; /** List devices with WARP client support for remote captures which have been connected in the last 1 hour. */ export const listDexCommandDevices: API.OperationMethod< ListDexCommandDevicesRequest, ListDexCommandDevicesResponse, ListDexCommandDevicesError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListDexCommandDevicesRequest, output: ListDexCommandDevicesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListDexCommandsError = CloudflareOpError; /** Retrieves a paginated list of commands issued to devices under the specified account, optionally filtered by time range, device, or other parameters */ export const listDexCommands: API.OperationMethod< ListDexCommandsRequest, ListDexCommandsResponse, ListDexCommandsError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListDexCommandsRequest, output: ListDexCommandsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListDexDeviceIspsError = CloudflareOpError; /** List ISP information observed for a specific device during traceroute tests. */ export const listDexDeviceIsps: API.OperationMethod< ListDexDeviceIspsRequest, ListDexDeviceIspsResponse, ListDexDeviceIspsError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListDexDeviceIspsRequest, output: ListDexDeviceIspsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListDexFleetStatusDevicesError = CloudflareOpError; /** List details of devices using WARP. */ export const listDexFleetStatusDevices: API.PaginatedOperationMethod< ListDexFleetStatusDevicesRequest, ListDexFleetStatusDevicesResponse, ListDexFleetStatusDevicesError, CloudflareOpContext, DexFleetStatusDevicesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDexFleetStatusDevicesRequest, output: ListDexFleetStatusDevicesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListDexRulesError = CloudflareOpError; /** List DEX Rules. */ export const listDexRules: API.OperationMethod< ListDexRulesRequest, ListDexRulesResponse, ListDexRulesError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListDexRulesRequest, output: ListDexRulesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListDexTestsError = CloudflareOpError; /** List DEX tests with overview metrics. */ export const listDexTests: API.OperationMethod< ListDexTestsRequest, ListDexTestsResponse, ListDexTestsError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListDexTestsRequest, output: ListDexTestsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListDexTestUniqueDevicesError = CloudflareOpError; /** Returns unique count of devices that have run synthetic application monitoring tests in the past 7 days. */ export const listDexTestUniqueDevices: API.OperationMethod< ListDexTestUniqueDevicesRequest, ListDexTestUniqueDevicesResponse, ListDexTestUniqueDevicesError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListDexTestUniqueDevicesRequest, output: ListDexTestUniqueDevicesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListDlpCustomEntriesError = CloudflareOpError; /** Lists all DLP entries in an account. */ export const listDlpCustomEntries: API.PaginatedOperationMethod< ListDlpCustomEntriesRequest, ListDlpCustomEntriesResponse, ListDlpCustomEntriesError, CloudflareOpContext, ListDlpCustomEntriesResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDlpCustomEntriesRequest, output: ListDlpCustomEntriesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDlpCustomPromptTopicsError = CloudflareOpError; /** Lists all DLP custom prompt topic entries in an account. */ export const listDlpCustomPromptTopics: API.PaginatedOperationMethod< ListDlpCustomPromptTopicsRequest, ListDlpCustomPromptTopicsResponse, ListDlpCustomPromptTopicsError, CloudflareOpContext, DlpCustomPromptTopicsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDlpCustomPromptTopicsRequest, output: ListDlpCustomPromptTopicsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDlpDataClassesError = CloudflareOpError; /** Retrieve all data classes in an account */ export const listDlpDataClasses: API.PaginatedOperationMethod< ListDlpDataClassesRequest, ListDlpDataClassesResponse, ListDlpDataClassesError, CloudflareOpContext, DlpDataClassesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDlpDataClassesRequest, output: ListDlpDataClassesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDlpDatasetsError = CloudflareOpError; /** Lists all DLP datasets configured for the account, including custom word lists and EDM datasets. */ export const listDlpDatasets: API.OperationMethod< ListDlpDatasetsRequest, ListDlpDatasetsResponse, ListDlpDatasetsError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListDlpDatasetsRequest, output: ListDlpDatasetsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListDlpDataTagCategoriesError = CloudflareOpError; /** Retrieve all data tag categories in an account */ export const listDlpDataTagCategories: API.PaginatedOperationMethod< ListDlpDataTagCategoriesRequest, ListDlpDataTagCategoriesResponse, ListDlpDataTagCategoriesError, CloudflareOpContext, DlpDataTagCategoriesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDlpDataTagCategoriesRequest, output: ListDlpDataTagCategoriesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDlpDataTagCategoryDataTagsError = CloudflareOpError; /** Retrieve all data tags in a data tag category */ export const listDlpDataTagCategoryDataTags: API.PaginatedOperationMethod< ListDlpDataTagCategoryDataTagsRequest, ListDlpDataTagCategoryDataTagsResponse, ListDlpDataTagCategoryDataTagsError, CloudflareOpContext, DlpDataTagCategoriesCreateResponseTagsItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDlpDataTagCategoryDataTagsRequest, output: ListDlpDataTagCategoryDataTagsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDlpEmailRulesError = CloudflareOpError; /** Lists all email scanner rules for an account. */ export const listDlpEmailRules: API.PaginatedOperationMethod< ListDlpEmailRulesRequest, ListDlpEmailRulesResponse, ListDlpEmailRulesError, CloudflareOpContext, DlpEmailRulesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDlpEmailRulesRequest, output: ListDlpEmailRulesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDlpEntriesError = CloudflareOpError; /** Lists all DLP entries in an account. */ export const listDlpEntries: API.PaginatedOperationMethod< ListDlpEntriesRequest, ListDlpEntriesResponse, ListDlpEntriesError, CloudflareOpContext, DlpEntriesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDlpEntriesRequest, output: ListDlpEntriesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDlpEntriesIntegrationError = CloudflareOpError; /** Lists all DLP entries in an account. */ export const listDlpEntriesIntegration: API.PaginatedOperationMethod< ListDlpEntriesIntegrationRequest, ListDlpEntriesIntegrationResponse, ListDlpEntriesIntegrationError, CloudflareOpContext, ListDlpEntriesIntegrationResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDlpEntriesIntegrationRequest, output: ListDlpEntriesIntegrationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDlpEntriesPredefinedError = CloudflareOpError; /** Lists all DLP entries in an account. */ export const listDlpEntriesPredefined: API.PaginatedOperationMethod< ListDlpEntriesPredefinedRequest, ListDlpEntriesPredefinedResponse, ListDlpEntriesPredefinedError, CloudflareOpContext, ListDlpEntriesPredefinedResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDlpEntriesPredefinedRequest, output: ListDlpEntriesPredefinedResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDlpLimitsError = CloudflareOpError; /** Retrieves current DLP usage limits and quotas for the account, including maximum allowed counts and current usage for custom entries, dataset cells, and document fingerprints. */ export const listDlpLimits: API.OperationMethod< ListDlpLimitsRequest, ListDlpLimitsResponse, ListDlpLimitsError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListDlpLimitsRequest, output: ListDlpLimitsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListDlpProfilesError = CloudflareOpError; /** Lists all DLP profiles in an account. */ export const listDlpProfiles: API.PaginatedOperationMethod< ListDlpProfilesRequest, ListDlpProfilesResponse, ListDlpProfilesError, CloudflareOpContext, DlpProfilesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDlpProfilesRequest, output: ListDlpProfilesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDlpSensitivityGroupLevelsError = CloudflareOpError; /** Retrieve all sensitivity levels in a sensitivity group */ export const listDlpSensitivityGroupLevels: API.PaginatedOperationMethod< ListDlpSensitivityGroupLevelsRequest, ListDlpSensitivityGroupLevelsResponse, ListDlpSensitivityGroupLevelsError, CloudflareOpContext, DlpDataTagCategoriesCreateResponseTagsItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDlpSensitivityGroupLevelsRequest, output: ListDlpSensitivityGroupLevelsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListDlpSensitivityGroupsError = CloudflareOpError; /** Retrieve all sensitivity groups in an account */ export const listDlpSensitivityGroups: API.PaginatedOperationMethod< ListDlpSensitivityGroupsRequest, ListDlpSensitivityGroupsResponse, ListDlpSensitivityGroupsError, CloudflareOpContext, DlpSensitivityGroupsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListDlpSensitivityGroupsRequest, output: ListDlpSensitivityGroupsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListGatewayAppTypesError = CloudflareOpError; /** List all application and application type mappings. */ export const listGatewayAppTypes: API.PaginatedOperationMethod< ListGatewayAppTypesRequest, ListGatewayAppTypesResponse, ListGatewayAppTypesError, CloudflareOpContext, GatewayAppTypesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListGatewayAppTypesRequest, output: ListGatewayAppTypesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListGatewayCategoriesError = CloudflareOpError; /** List all categories. */ export const listGatewayCategories: API.PaginatedOperationMethod< ListGatewayCategoriesRequest, ListGatewayCategoriesResponse, ListGatewayCategoriesError, CloudflareOpContext, GatewayCategoriesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListGatewayCategoriesRequest, output: ListGatewayCategoriesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListGatewayCertificatesError = CloudflareOpError; /** List all Zero Trust certificates for an account. */ export const listGatewayCertificates: API.PaginatedOperationMethod< ListGatewayCertificatesRequest, ListGatewayCertificatesResponse, ListGatewayCertificatesError, CloudflareOpContext, GatewayCertificatesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListGatewayCertificatesRequest, output: ListGatewayCertificatesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListGatewayListItemsError = GatewayListNotFound | CloudflareOpError; /** Fetch all items in a single Zero Trust list. */ export const listGatewayListItems: API.PaginatedOperationMethod< ListGatewayListItemsRequest, ListGatewayListItemsResponse, ListGatewayListItemsError, CloudflareOpContext, GatewayListsCreateResponseItemsItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListGatewayListItemsRequest, output: ListGatewayListItemsResponse, errors: [GatewayListNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListGatewayListsError = CloudflareOpError; /** Fetch all Zero Trust lists for an account. */ export const listGatewayLists: API.PaginatedOperationMethod< ListGatewayListsRequest, ListGatewayListsResponse, ListGatewayListsError, CloudflareOpContext, GatewayListsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListGatewayListsRequest, output: ListGatewayListsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListGatewayLocationsError = CloudflareOpError; /** List Zero Trust Gateway locations for an account. */ export const listGatewayLocations: API.PaginatedOperationMethod< ListGatewayLocationsRequest, ListGatewayLocationsResponse, ListGatewayLocationsError, CloudflareOpContext, GatewayLocationsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListGatewayLocationsRequest, output: ListGatewayLocationsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListGatewayPacfilesError = CloudflareOpError; /** List all Zero Trust Gateway PAC files for an account. */ export const listGatewayPacfiles: API.PaginatedOperationMethod< ListGatewayPacfilesRequest, ListGatewayPacfilesResponse, ListGatewayPacfilesError, CloudflareOpContext, GatewayPacfilesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListGatewayPacfilesRequest, output: ListGatewayPacfilesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListGatewayProxyEndpointsError = CloudflareOpError; /** List all Zero Trust Gateway proxy endpoints for an account. */ export const listGatewayProxyEndpoints: API.PaginatedOperationMethod< ListGatewayProxyEndpointsRequest, ListGatewayProxyEndpointsResponse, ListGatewayProxyEndpointsError, CloudflareOpContext, GatewayProxyEndpointsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListGatewayProxyEndpointsRequest, output: ListGatewayProxyEndpointsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListGatewayRulesError = CloudflareOpError; /** List Zero Trust Gateway rules for an account. */ export const listGatewayRules: API.PaginatedOperationMethod< ListGatewayRulesRequest, ListGatewayRulesResponse, ListGatewayRulesError, CloudflareOpContext, GatewayRulesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListGatewayRulesRequest, output: ListGatewayRulesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListGatewaysError = CloudflareOpError; /** Retrieve information about the current Zero Trust account. */ export const listGateways: API.OperationMethod< ListGatewaysRequest, ListGatewaysResponse, ListGatewaysError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListGatewaysRequest, output: ListGatewaysResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListIdentityProviderScimGroupsError = CloudflareOpError; /** Lists SCIM Group resources synced to Cloudflare via the System for Cross-domain Identity Management (SCIM). */ export const listIdentityProviderScimGroups: API.PaginatedOperationMethod< ListIdentityProviderScimGroupsRequest, ListIdentityProviderScimGroupsResponse, ListIdentityProviderScimGroupsError, CloudflareOpContext, IdentityProvidersScimGroupsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListIdentityProviderScimGroupsRequest, output: ListIdentityProviderScimGroupsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListIdentityProviderScimUsersError = CloudflareOpError; /** Lists SCIM User resources synced to Cloudflare via the System for Cross-domain Identity Management (SCIM). */ export const listIdentityProviderScimUsers: API.PaginatedOperationMethod< ListIdentityProviderScimUsersRequest, ListIdentityProviderScimUsersResponse, ListIdentityProviderScimUsersError, CloudflareOpContext, IdentityProvidersScimUsersListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListIdentityProviderScimUsersRequest, output: ListIdentityProviderScimUsersResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListIdentityProvidersForAccountError = | Forbidden | CloudflareOpError; /** Lists all configured identity providers. */ export const listIdentityProvidersForAccount: API.PaginatedOperationMethod< ListIdentityProvidersForAccountRequest, ListIdentityProvidersResponse, ListIdentityProvidersForAccountError, CloudflareOpContext, IdentityProvidersListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListIdentityProvidersForAccountRequest, output: ListIdentityProvidersResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListIdentityProvidersForZoneError = Forbidden | CloudflareOpError; /** Lists all configured identity providers. */ export const listIdentityProvidersForZone: API.PaginatedOperationMethod< ListIdentityProvidersForZoneRequest, ListIdentityProvidersResponse, ListIdentityProvidersForZoneError, CloudflareOpContext, IdentityProvidersListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListIdentityProvidersForZoneRequest, output: ListIdentityProvidersResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListNetworkHostnameRoutesError = Forbidden | CloudflareOpError; /** Lists and filters hostname routes in an account. */ export const listNetworkHostnameRoutes: API.PaginatedOperationMethod< ListNetworkHostnameRoutesRequest, ListNetworkHostnameRoutesResponse, ListNetworkHostnameRoutesError, CloudflareOpContext, NetworksHostnameRoutesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListNetworkHostnameRoutesRequest, output: ListNetworkHostnameRoutesResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListNetworkRoutesError = CloudflareOpError; /** Lists and filters private network routes in an account. */ export const listNetworkRoutes: API.PaginatedOperationMethod< ListNetworkRoutesRequest, ListNetworkRoutesResponse, ListNetworkRoutesError, CloudflareOpContext, NetworksRoutesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListNetworkRoutesRequest, output: ListNetworkRoutesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListNetworkSubnetsError = CloudflareOpError; /** Lists and filters subnets in an account. */ export const listNetworkSubnets: API.PaginatedOperationMethod< ListNetworkSubnetsRequest, ListNetworkSubnetsResponse, ListNetworkSubnetsError, CloudflareOpContext, NetworksSubnetsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListNetworkSubnetsRequest, output: ListNetworkSubnetsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListNetworkVirtualNetworksError = CloudflareOpError; /** Lists and filters virtual networks in an account. */ export const listNetworkVirtualNetworks: API.PaginatedOperationMethod< ListNetworkVirtualNetworksRequest, ListNetworkVirtualNetworksResponse, ListNetworkVirtualNetworksError, CloudflareOpContext, NetworksVirtualNetworksListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListNetworkVirtualNetworksRequest, output: ListNetworkVirtualNetworksResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListOrganizationsForAccountError = | OrganizationNotFound | CloudflareOpError; /** Returns the configuration for your Zero Trust organization. */ export const listOrganizationsForAccount: API.OperationMethod< ListOrganizationsForAccountRequest, ListOrganizationsResponse, ListOrganizationsForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListOrganizationsForAccountRequest, output: ListOrganizationsResponse, errors: [OrganizationNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListOrganizationsForZoneError = | OrganizationNotFound | CloudflareOpError; /** Returns the configuration for your Zero Trust organization. */ export const listOrganizationsForZone: API.OperationMethod< ListOrganizationsForZoneRequest, ListOrganizationsResponse, ListOrganizationsForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ListOrganizationsForZoneRequest, output: ListOrganizationsResponse, errors: [OrganizationNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ListResourceLibraryApplicationsError = CloudflareOpError; /** List applications with different filters. */ export const listResourceLibraryApplications: API.PaginatedOperationMethod< ListResourceLibraryApplicationsRequest, ListResourceLibraryApplicationsResponse, ListResourceLibraryApplicationsError, CloudflareOpContext, ResourceLibraryApplicationsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListResourceLibraryApplicationsRequest, output: ListResourceLibraryApplicationsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListResourceLibraryCategoriesError = CloudflareOpError; /** List application categories. */ export const listResourceLibraryCategories: API.PaginatedOperationMethod< ListResourceLibraryCategoriesRequest, ListResourceLibraryCategoriesResponse, ListResourceLibraryCategoriesError, CloudflareOpContext, ResourceLibraryCategoriesListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListResourceLibraryCategoriesRequest, output: ListResourceLibraryCategoriesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListRiskScoringIntegrationsError = Forbidden | CloudflareOpError; /** Lists all configured Zero Trust risk score integrations for the account. */ export const listRiskScoringIntegrations: API.PaginatedOperationMethod< ListRiskScoringIntegrationsRequest, ListRiskScoringIntegrationsResponse, ListRiskScoringIntegrationsError, CloudflareOpContext, RiskScoringIntegrationsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListRiskScoringIntegrationsRequest, output: ListRiskScoringIntegrationsResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListTenantGatewayRuleError = CloudflareOpError; /** List Zero Trust Gateway rules for the parent account of an account in the MSP configuration. */ export const listTenantGatewayRule: API.PaginatedOperationMethod< ListTenantGatewayRuleRequest, ListTenantGatewayRuleResponse, ListTenantGatewayRuleError, CloudflareOpContext, GatewayRulesListTenantResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListTenantGatewayRuleRequest, output: ListTenantGatewayRuleResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type ListTunnelCloudflaredsError = CloudflareOpError; /** Lists and filters Cloudflare Tunnels in an account. */ export const listTunnelCloudflareds: API.PaginatedOperationMethod< ListTunnelCloudflaredsRequest, ListTunnelCloudflaredsResponse, ListTunnelCloudflaredsError, CloudflareOpContext, TunnelsCloudflaredListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListTunnelCloudflaredsRequest, output: ListTunnelCloudflaredsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListTunnelsError = CloudflareOpError; /** Lists and filters all types of Tunnels in an account. */ export const listTunnels: API.PaginatedOperationMethod< ListTunnelsRequest, ListTunnelsResponse, ListTunnelsError, CloudflareOpContext, TunnelsListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListTunnelsRequest, output: ListTunnelsResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type ListTunnelWarpConnectorsError = Forbidden | CloudflareOpError; /** Lists and filters Warp Connector Tunnels in an account. */ export const listTunnelWarpConnectors: API.PaginatedOperationMethod< ListTunnelWarpConnectorsRequest, ListTunnelWarpConnectorsResponse, ListTunnelWarpConnectorsError, CloudflareOpContext, TunnelsWarpConnectorListResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: ListTunnelWarpConnectorsRequest, output: ListTunnelWarpConnectorsResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "page", inputToken: "page", outputToken: "resultInfo.page", items: "result", pageSize: "perPage", } as const, }), cloudflarePaginate, ) as any; export type LiveDexFleetStatusError = CloudflareOpError; /** Get details for live (up to 60 minutes) devices using WARP. */ export const liveDexFleetStatus: API.OperationMethod< LiveDexFleetStatusRequest, LiveDexFleetStatusResponse, LiveDexFleetStatusError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: LiveDexFleetStatusRequest, output: LiveDexFleetStatusResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type OverTimeDexFleetStatusError = CloudflareOpError; /** Get aggregate details for devices using WARP, up to 7 days. */ export const overTimeDexFleetStatus: API.OperationMethod< OverTimeDexFleetStatusRequest, OverTimeDexFleetStatusResponse, OverTimeDexFleetStatusError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: OverTimeDexFleetStatusRequest, output: OverTimeDexFleetStatusResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchAccessApplicationSettingForAccountError = CloudflareOpError; /** Updates Access application settings. */ export const patchAccessApplicationSettingForAccount: API.OperationMethod< PatchAccessApplicationSettingForAccountRequest, PatchAccessApplicationSettingResponse, PatchAccessApplicationSettingForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchAccessApplicationSettingForAccountRequest, output: PatchAccessApplicationSettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchAccessApplicationSettingForZoneError = CloudflareOpError; /** Updates Access application settings. */ export const patchAccessApplicationSettingForZone: API.OperationMethod< PatchAccessApplicationSettingForZoneRequest, PatchAccessApplicationSettingResponse, PatchAccessApplicationSettingForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchAccessApplicationSettingForZoneRequest, output: PatchAccessApplicationSettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchConnectivitySettingError = CloudflareOpError; /** Updates the Zero Trust Connectivity Settings for the given account. */ export const patchConnectivitySetting: API.OperationMethod< PatchConnectivitySettingRequest, PatchConnectivitySettingResponse, PatchConnectivitySettingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchConnectivitySettingRequest, output: PatchConnectivitySettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchDeviceDeploymentGroupError = CloudflareOpError; /** Updates a deployment group. Returns 409 if any newly added policy IDs already belong to another deployment group. This endpoint is in Beta. */ export const patchDeviceDeploymentGroup: API.OperationMethod< PatchDeviceDeploymentGroupRequest, PatchDeviceDeploymentGroupResponse, PatchDeviceDeploymentGroupError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchDeviceDeploymentGroupRequest, output: PatchDeviceDeploymentGroupResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchDeviceIpProfileError = CloudflareOpError; /** Updates a WARP Device IP profile. Currently, only IPv4 Device subnets can be associated. */ export const patchDeviceIpProfile: API.OperationMethod< PatchDeviceIpProfileRequest, PatchDeviceIpProfileResponse, PatchDeviceIpProfileError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchDeviceIpProfileRequest, output: PatchDeviceIpProfileResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchDevicePolicyCustomError = | DevicePolicyNotFound | Forbidden | CloudflareOpError; /** Updates a configured device settings profile. */ export const patchDevicePolicyCustom: API.OperationMethod< PatchDevicePolicyCustomRequest, PatchDevicePolicyCustomResponse, PatchDevicePolicyCustomError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchDevicePolicyCustomRequest, output: PatchDevicePolicyCustomResponse, errors: [ DevicePolicyNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchDevicePolicyDefaultError = CloudflareOpError; /** Updates the default device settings profile for an account. */ export const patchDevicePolicyDefault: API.OperationMethod< PatchDevicePolicyDefaultRequest, PatchDevicePolicyDefaultResponse, PatchDevicePolicyDefaultError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchDevicePolicyDefaultRequest, output: PatchDevicePolicyDefaultResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchDevicePolicyDefaultCertificateError = CloudflareOpError; /** Enable Zero Trust Clients to provision a certificate, containing a x509 subject, and referenced by Access device posture policies when the client visits MTLS protected domains. This facilitates device posture without a WARP session. */ export const patchDevicePolicyDefaultCertificate: API.OperationMethod< PatchDevicePolicyDefaultCertificateRequest, PatchDevicePolicyDefaultCertificateResponse, PatchDevicePolicyDefaultCertificateError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchDevicePolicyDefaultCertificateRequest, output: PatchDevicePolicyDefaultCertificateResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchDevicePostureIntegrationError = | DevicePostureIntegrationNotFound | InvalidPostureIntegrationConfig | Forbidden | CloudflareOpError; /** Updates a configured device posture integration. */ export const patchDevicePostureIntegration: API.OperationMethod< PatchDevicePostureIntegrationRequest, PatchDevicePostureIntegrationResponse, PatchDevicePostureIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchDevicePostureIntegrationRequest, output: PatchDevicePostureIntegrationResponse, errors: [ DevicePostureIntegrationNotFound, InvalidPostureIntegrationConfig, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchDeviceSettingError = Forbidden | CloudflareOpError; /** Patches the current device settings for a Zero Trust account. */ export const patchDeviceSetting: API.OperationMethod< PatchDeviceSettingRequest, PatchDeviceSettingResponse, PatchDeviceSettingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchDeviceSettingRequest, output: PatchDeviceSettingResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchDexRuleError = CloudflareOpError; /** Update a DEX Rule. */ export const patchDexRule: API.OperationMethod< PatchDexRuleRequest, PatchDexRuleResponse, PatchDexRuleError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchDexRuleRequest, output: PatchDexRuleResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchDlpSettingError = CloudflareOpError; /** Missing fields keep their existing values. */ export const patchDlpSetting: API.OperationMethod< PatchDlpSettingRequest, PatchDlpSettingResponse, PatchDlpSettingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchDlpSettingRequest, output: PatchDlpSettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchGatewayConfigurationError = Forbidden | CloudflareOpError; /** Update (PATCH) a single subcollection of settings such as `antivirus`, `tls_decrypt`, `activity_log`, `block_page`, `browser_isolation`, `fips`, `body_scanning`, `certificate`, or `max_ttl_secs` without updating the entire configuration object. This endpoint returns an error if any settings collection lacks proper configuration. */ export const patchGatewayConfiguration: API.OperationMethod< PatchGatewayConfigurationRequest, PatchGatewayConfigurationResponse, PatchGatewayConfigurationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchGatewayConfigurationRequest, output: PatchGatewayConfigurationResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchGatewayListError = CloudflareOpError; /** Appends or removes an item from a configured Zero Trust list. */ export const patchGatewayList: API.OperationMethod< PatchGatewayListRequest, PatchGatewayListResponse, PatchGatewayListError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchGatewayListRequest, output: PatchGatewayListResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchGatewayProxyEndpointError = | ProxyEndpointNotFound | CloudflareOpError; /** Update a configured Zero Trust Gateway proxy endpoint. */ export const patchGatewayProxyEndpoint: API.OperationMethod< PatchGatewayProxyEndpointRequest, PatchGatewayProxyEndpointResponse, PatchGatewayProxyEndpointError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchGatewayProxyEndpointRequest, output: PatchGatewayProxyEndpointResponse, errors: [ProxyEndpointNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchNetworkHostnameRouteError = | HostnameRouteNotFound | HostnameRouteAlreadyRouted | Forbidden | CloudflareOpError; /** Updates a hostname route. */ export const patchNetworkHostnameRoute: API.OperationMethod< PatchNetworkHostnameRouteRequest, PatchNetworkHostnameRouteResponse, PatchNetworkHostnameRouteError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchNetworkHostnameRouteRequest, output: PatchNetworkHostnameRouteResponse, errors: [ HostnameRouteNotFound, HostnameRouteAlreadyRouted, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchNetworkRouteError = CloudflareOpError; /** Updates an existing private network route in an account. The fields that are meant to be updated should be provided in the body of the request. */ export const patchNetworkRoute: API.OperationMethod< PatchNetworkRouteRequest, PatchNetworkRouteResponse, PatchNetworkRouteError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchNetworkRouteRequest, output: PatchNetworkRouteResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchNetworkRouteNetworkError = CloudflareOpError; /** Updates an existing private network route in an account. The CIDR in `ip_network_encoded` must be written in URL-encoded format. */ export const patchNetworkRouteNetwork: API.OperationMethod< PatchNetworkRouteNetworkRequest, PatchNetworkRouteNetworkResponse, PatchNetworkRouteNetworkError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchNetworkRouteNetworkRequest, output: PatchNetworkRouteNetworkResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchNetworkSubnetCloudflareSourceError = CloudflareOpError; /** Updates the Cloudflare Source subnet of the given address family */ export const patchNetworkSubnetCloudflareSource: API.OperationMethod< PatchNetworkSubnetCloudflareSourceRequest, PatchNetworkSubnetCloudflareSourceResponse, PatchNetworkSubnetCloudflareSourceError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchNetworkSubnetCloudflareSourceRequest, output: PatchNetworkSubnetCloudflareSourceResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchNetworkSubnetWarpError = CloudflareOpError; /** Updates a WARP IP assignment subnet. **Update constraints:** - The `network` field cannot be modified for WARP subnets. Only `name`, `comment`, and `is_default_network` can be updated. - IPv6 subnets cannot be updated */ export const patchNetworkSubnetWarp: API.OperationMethod< PatchNetworkSubnetWarpRequest, PatchNetworkSubnetWarpResponse, PatchNetworkSubnetWarpError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchNetworkSubnetWarpRequest, output: PatchNetworkSubnetWarpResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchNetworkVirtualNetworkError = | VirtualNetworkNotFound | CloudflareOpError; /** Updates an existing virtual network. */ export const patchNetworkVirtualNetwork: API.OperationMethod< PatchNetworkVirtualNetworkRequest, PatchNetworkVirtualNetworkResponse, PatchNetworkVirtualNetworkError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchNetworkVirtualNetworkRequest, output: PatchNetworkVirtualNetworkResponse, errors: [VirtualNetworkNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchSeatError = CloudflareOpError; /** Removes a user from a Zero Trust seat when both `access_seat` and `gateway_seat` are set to false. */ export const patchSeat: API.PaginatedOperationMethod< PatchSeatRequest, PatchSeatResponse, PatchSeatError, CloudflareOpContext, SeatsEditResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: PatchSeatRequest, output: PatchSeatResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type PatchTunnelCloudflaredError = | TunnelNotFound | DuplicateTunnelName | CloudflareOpError; /** Updates an existing Cloudflare Tunnel. */ export const patchTunnelCloudflared: API.OperationMethod< PatchTunnelCloudflaredRequest, PatchTunnelCloudflaredResponse, PatchTunnelCloudflaredError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchTunnelCloudflaredRequest, output: PatchTunnelCloudflaredResponse, errors: [ TunnelNotFound, DuplicateTunnelName, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PatchTunnelWarpConnectorError = | TunnelNotFound | DuplicateTunnelName | Forbidden | CloudflareOpError; /** Updates an existing Warp Connector Tunnel. */ export const patchTunnelWarpConnector: API.OperationMethod< PatchTunnelWarpConnectorRequest, PatchTunnelWarpConnectorResponse, PatchTunnelWarpConnectorError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PatchTunnelWarpConnectorRequest, output: PatchTunnelWarpConnectorResponse, errors: [ TunnelNotFound, DuplicateTunnelName, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PauseCasbIntegrationError = CloudflareOpError; /** Pauses an integration, stopping all crawlers. */ export const pauseCasbIntegration: API.OperationMethod< PauseCasbIntegrationRequest, PauseCasbIntegrationResponse, PauseCasbIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PauseCasbIntegrationRequest, output: PauseCasbIntegrationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutAccessApplicationSettingForAccountError = CloudflareOpError; /** Updates Access application settings. */ export const putAccessApplicationSettingForAccount: API.OperationMethod< PutAccessApplicationSettingForAccountRequest, PutAccessApplicationSettingResponse, PutAccessApplicationSettingForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutAccessApplicationSettingForAccountRequest, output: PutAccessApplicationSettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutAccessApplicationSettingForZoneError = CloudflareOpError; /** Updates Access application settings. */ export const putAccessApplicationSettingForZone: API.OperationMethod< PutAccessApplicationSettingForZoneRequest, PutAccessApplicationSettingResponse, PutAccessApplicationSettingForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutAccessApplicationSettingForZoneRequest, output: PutAccessApplicationSettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutAccessCertificateSettingForAccountError = CloudflareOpError; /** Updates an mTLS certificate's hostname settings. */ export const putAccessCertificateSettingForAccount: API.PaginatedOperationMethod< PutAccessCertificateSettingForAccountRequest, PutAccessCertificateSettingResponse, PutAccessCertificateSettingForAccountError, CloudflareOpContext, AccessCertificatesSettingsGetResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: PutAccessCertificateSettingForAccountRequest, output: PutAccessCertificateSettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type PutAccessCertificateSettingForZoneError = CloudflareOpError; /** Updates an mTLS certificate's hostname settings. */ export const putAccessCertificateSettingForZone: API.PaginatedOperationMethod< PutAccessCertificateSettingForZoneRequest, PutAccessCertificateSettingResponse, PutAccessCertificateSettingForZoneError, CloudflareOpContext, AccessCertificatesSettingsGetResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: PutAccessCertificateSettingForZoneRequest, output: PutAccessCertificateSettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type PutAccessKeyError = Forbidden | CloudflareOpError; /** Updates the Access key rotation settings for an account. */ export const putAccessKey: API.OperationMethod< PutAccessKeyRequest, PutAccessKeyResponse, PutAccessKeyError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutAccessKeyRequest, output: PutAccessKeyResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutDevicePolicyCustomExcludeError = | DevicePolicyNotFound | Forbidden | CloudflareOpError; /** Sets the list of routes excluded from the WARP client's tunnel for a specific device settings profile. */ export const putDevicePolicyCustomExclude: API.PaginatedOperationMethod< PutDevicePolicyCustomExcludeRequest, PutDevicePolicyCustomExcludeResponse, PutDevicePolicyCustomExcludeError, CloudflareOpContext, DevicesPoliciesCustomExcludesUpdateResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: PutDevicePolicyCustomExcludeRequest, output: PutDevicePolicyCustomExcludeResponse, errors: [ DevicePolicyNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type PutDevicePolicyCustomFallbackDomainError = | DevicePolicyNotFound | Forbidden | CloudflareOpError; /** Sets the list of domains to bypass Gateway DNS resolution. These domains will use the specified local DNS resolver instead. This will only apply to the specified device settings profile. */ export const putDevicePolicyCustomFallbackDomain: API.PaginatedOperationMethod< PutDevicePolicyCustomFallbackDomainRequest, PutDevicePolicyCustomFallbackDomainResponse, PutDevicePolicyCustomFallbackDomainError, CloudflareOpContext, DevicesPoliciesCustomFallbackDomainsUpdateResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: PutDevicePolicyCustomFallbackDomainRequest, output: PutDevicePolicyCustomFallbackDomainResponse, errors: [ DevicePolicyNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type PutDevicePolicyCustomIncludeError = | DevicePolicyNotFound | Forbidden | CloudflareOpError; /** Sets the list of routes included in the WARP client's tunnel for a specific device settings profile. */ export const putDevicePolicyCustomInclude: API.PaginatedOperationMethod< PutDevicePolicyCustomIncludeRequest, PutDevicePolicyCustomIncludeResponse, PutDevicePolicyCustomIncludeError, CloudflareOpContext, DevicesPoliciesCustomIncludesUpdateResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: PutDevicePolicyCustomIncludeRequest, output: PutDevicePolicyCustomIncludeResponse, errors: [ DevicePolicyNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type PutDevicePolicyDefaultExcludeError = CloudflareOpError; /** Sets the list of routes excluded from the WARP client's tunnel. */ export const putDevicePolicyDefaultExclude: API.PaginatedOperationMethod< PutDevicePolicyDefaultExcludeRequest, PutDevicePolicyDefaultExcludeResponse, PutDevicePolicyDefaultExcludeError, CloudflareOpContext, DevicesPoliciesDefaultExcludesUpdateResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: PutDevicePolicyDefaultExcludeRequest, output: PutDevicePolicyDefaultExcludeResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type PutDevicePolicyDefaultFallbackDomainError = CloudflareOpError; /** Sets the list of domains to bypass Gateway DNS resolution. These domains will use the specified local DNS resolver instead. */ export const putDevicePolicyDefaultFallbackDomain: API.PaginatedOperationMethod< PutDevicePolicyDefaultFallbackDomainRequest, PutDevicePolicyDefaultFallbackDomainResponse, PutDevicePolicyDefaultFallbackDomainError, CloudflareOpContext, DevicesPoliciesDefaultFallbackDomainsUpdateResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: PutDevicePolicyDefaultFallbackDomainRequest, output: PutDevicePolicyDefaultFallbackDomainResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type PutDevicePolicyDefaultIncludeError = CloudflareOpError; /** Sets the list of routes included in the WARP client's tunnel. */ export const putDevicePolicyDefaultInclude: API.PaginatedOperationMethod< PutDevicePolicyDefaultIncludeRequest, PutDevicePolicyDefaultIncludeResponse, PutDevicePolicyDefaultIncludeError, CloudflareOpContext, DevicesPoliciesDefaultIncludesUpdateResultItem > = /*@__PURE__*/ API.makePaginated( () => ({ input: PutDevicePolicyDefaultIncludeRequest, output: PutDevicePolicyDefaultIncludeResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflarePaginatedProtocol, retry: Retry.Retry, pagination: { mode: "single", items: "result" } as const, }), cloudflarePaginate, ) as any; export type PutDeviceSettingError = Forbidden | CloudflareOpError; /** Updates the current device settings for a Zero Trust account. */ export const putDeviceSetting: API.OperationMethod< PutDeviceSettingRequest, PutDeviceSettingResponse, PutDeviceSettingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutDeviceSettingRequest, output: PutDeviceSettingResponse, errors: [Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutDlpPayloadLogError = CloudflareOpError; /** Enables or disables payload logging for DLP matches. When enabled, matched content is stored for review. */ export const putDlpPayloadLog: API.OperationMethod< PutDlpPayloadLogRequest, PutDlpPayloadLogResponse, PutDlpPayloadLogError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutDlpPayloadLogRequest, output: PutDlpPayloadLogResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutDlpProfilePredefinedError = CloudflareOpError; /** This is similar to `update_predefined` but only returns entries that are enabled. This is needed for our terraform API Updates a DLP predefined profile. Only supports enabling/disabling entries. */ export const putDlpProfilePredefined: API.OperationMethod< PutDlpProfilePredefinedRequest, PutDlpProfilePredefinedResponse, PutDlpProfilePredefinedError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutDlpProfilePredefinedRequest, output: PutDlpProfilePredefinedResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutDlpSensitivityGroupLevelOrderError = CloudflareOpError; /** Set the ordering of levels within a sensitivity group. */ export const putDlpSensitivityGroupLevelOrder: API.OperationMethod< PutDlpSensitivityGroupLevelOrderRequest, PutDlpSensitivityGroupLevelOrderResponse, PutDlpSensitivityGroupLevelOrderError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutDlpSensitivityGroupLevelOrderRequest, output: PutDlpSensitivityGroupLevelOrderResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutDlpSettingError = CloudflareOpError; /** Missing fields are reset to initial (unconfigured) values. */ export const putDlpSetting: API.OperationMethod< PutDlpSettingRequest, PutDlpSettingResponse, PutDlpSettingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutDlpSettingRequest, output: PutDlpSettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutGatewayAuditSshSettingError = CloudflareOpError; /** Update Zero Trust Audit SSH and SSH with Access for Infrastructure settings for an account. */ export const putGatewayAuditSshSetting: API.OperationMethod< PutGatewayAuditSshSettingRequest, PutGatewayAuditSshSettingResponse, PutGatewayAuditSshSettingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutGatewayAuditSshSettingRequest, output: PutGatewayAuditSshSettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutGatewayConfigurationError = CloudflareOpError; /** Update the current Zero Trust account configuration. */ export const putGatewayConfiguration: API.OperationMethod< PutGatewayConfigurationRequest, PutGatewayConfigurationResponse, PutGatewayConfigurationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutGatewayConfigurationRequest, output: PutGatewayConfigurationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutGatewayLoggingError = CloudflareOpError; /** Update logging settings for the current Zero Trust account. */ export const putGatewayLogging: API.OperationMethod< PutGatewayLoggingRequest, PutGatewayLoggingResponse, PutGatewayLoggingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutGatewayLoggingRequest, output: PutGatewayLoggingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutOrganizationDohError = CloudflareOpError; /** Updates the DoH settings for your Zero Trust organization. */ export const putOrganizationDoh: API.OperationMethod< PutOrganizationDohRequest, PutOrganizationDohResponse, PutOrganizationDohError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutOrganizationDohRequest, output: PutOrganizationDohResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutRiskScoringBehaviourError = CloudflareOpError; /** Updates risk score behavior configurations, defining weights and thresholds for risk calculation. */ export const putRiskScoringBehaviour: API.OperationMethod< PutRiskScoringBehaviourRequest, PutRiskScoringBehaviourResponse, PutRiskScoringBehaviourError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutRiskScoringBehaviourRequest, output: PutRiskScoringBehaviourResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutTunnelCloudflaredConfigurationError = | TunnelNotFound | CloudflareOpError; /** Adds or updates the configuration for a remotely-managed tunnel. */ export const putTunnelCloudflaredConfiguration: API.OperationMethod< PutTunnelCloudflaredConfigurationRequest, PutTunnelCloudflaredConfigurationResponse, PutTunnelCloudflaredConfigurationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutTunnelCloudflaredConfigurationRequest, output: PutTunnelCloudflaredConfigurationResponse, errors: [TunnelNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutTunnelWarpConnectorConfigurationError = CloudflareOpError; /** Adds or updates the high-availability configuration for a WARP Connector tunnel. */ export const putTunnelWarpConnectorConfiguration: API.OperationMethod< PutTunnelWarpConnectorConfigurationRequest, PutTunnelWarpConnectorConfigurationResponse, PutTunnelWarpConnectorConfigurationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutTunnelWarpConnectorConfigurationRequest, output: PutTunnelWarpConnectorConfigurationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type PutTunnelWarpConnectorFailoverError = CloudflareOpError; /** Triggers a manual failover for a specific WARP Connector Tunnel, setting the specified client as the active connector. The tunnel must be configured for high availability (HA) and the client must be linked to the tunnel. */ export const putTunnelWarpConnectorFailover: API.OperationMethod< PutTunnelWarpConnectorFailoverRequest, PutTunnelWarpConnectorFailoverResponse, PutTunnelWarpConnectorFailoverError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: PutTunnelWarpConnectorFailoverRequest, output: PutTunnelWarpConnectorFailoverResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ReadAccessAiControlMcpPortalError = | McpPortalNotFound | Forbidden | CloudflareOpError; /** Read details of an MCP Portal */ export const readAccessAiControlMcpPortal: API.OperationMethod< ReadAccessAiControlMcpPortalRequest, ReadAccessAiControlMcpPortalResponse, ReadAccessAiControlMcpPortalError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ReadAccessAiControlMcpPortalRequest, output: ReadAccessAiControlMcpPortalResponse, errors: [ McpPortalNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ReadAccessAiControlMcpServerError = CloudflareOpError; /** Retrieves gateway configuration for MCP portals. */ export const readAccessAiControlMcpServer: API.OperationMethod< ReadAccessAiControlMcpServerRequest, ReadAccessAiControlMcpServerResponse, ReadAccessAiControlMcpServerError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ReadAccessAiControlMcpServerRequest, output: ReadAccessAiControlMcpServerResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type RefreshAccessServiceTokenError = CloudflareOpError; /** Refreshes the expiration of a service token. */ export const refreshAccessServiceToken: API.OperationMethod< RefreshAccessServiceTokenRequest, RefreshAccessServiceTokenResponse, RefreshAccessServiceTokenError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: RefreshAccessServiceTokenRequest, output: RefreshAccessServiceTokenResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ResetExpirationGatewayRuleError = CloudflareOpError; /** Resets the expiration of a Zero Trust Gateway Rule if its duration elapsed and it has a default duration. The Zero Trust Gateway Rule must have values for both `expiration.expires_at` and `expiration.duration`. */ export const resetExpirationGatewayRule: API.OperationMethod< ResetExpirationGatewayRuleRequest, ResetExpirationGatewayRuleResponse, ResetExpirationGatewayRuleError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ResetExpirationGatewayRuleRequest, output: ResetExpirationGatewayRuleResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ResetRiskScoringError = CloudflareOpError; /** Resets risk scores for specified users, clearing their accumulated risk history. */ export const resetRiskScoring: API.OperationMethod< ResetRiskScoringRequest, ResetRiskScoringResponse, ResetRiskScoringError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ResetRiskScoringRequest, output: ResetRiskScoringResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ResumeCasbIntegrationError = CloudflareOpError; /** Resumes a paused integration, restarting crawlers. */ export const resumeCasbIntegration: API.OperationMethod< ResumeCasbIntegrationRequest, ResumeCasbIntegrationResponse, ResumeCasbIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ResumeCasbIntegrationRequest, output: ResumeCasbIntegrationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type RevokeDeviceDevicesError = CloudflareOpError; /** Revokes all WARP registrations associated with the specified device. */ export const revokeDeviceDevices: API.OperationMethod< RevokeDeviceDevicesRequest, RevokeDeviceDevicesResponse, RevokeDeviceDevicesError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: RevokeDeviceDevicesRequest, output: RevokeDeviceDevicesResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type RevokeDeviceRegistrationError = CloudflareOpError; /** Revokes a list of WARP registrations. */ export const revokeDeviceRegistration: API.OperationMethod< RevokeDeviceRegistrationRequest, RevokeDeviceRegistrationResponse, RevokeDeviceRegistrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: RevokeDeviceRegistrationRequest, output: RevokeDeviceRegistrationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type RevokeTokensAccessApplicationForAccountError = CloudflareOpError; /** Revokes all tokens issued for an application. */ export const revokeTokensAccessApplicationForAccount: API.OperationMethod< RevokeTokensAccessApplicationForAccountRequest, RevokeTokensAccessApplicationResponse, RevokeTokensAccessApplicationForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: RevokeTokensAccessApplicationForAccountRequest, output: RevokeTokensAccessApplicationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type RevokeTokensAccessApplicationForZoneError = CloudflareOpError; /** Revokes all tokens issued for an application. */ export const revokeTokensAccessApplicationForZone: API.OperationMethod< RevokeTokensAccessApplicationForZoneRequest, RevokeTokensAccessApplicationResponse, RevokeTokensAccessApplicationForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: RevokeTokensAccessApplicationForZoneRequest, output: RevokeTokensAccessApplicationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type RevokeUsersOrganizationForAccountError = CloudflareOpError; /** Revokes a user's access across all applications. */ export const revokeUsersOrganizationForAccount: API.OperationMethod< RevokeUsersOrganizationForAccountRequest, RevokeUsersOrganizationResponse, RevokeUsersOrganizationForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: RevokeUsersOrganizationForAccountRequest, output: RevokeUsersOrganizationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type RevokeUsersOrganizationForZoneError = CloudflareOpError; /** Revokes a user's access across all applications. */ export const revokeUsersOrganizationForZone: API.OperationMethod< RevokeUsersOrganizationForZoneRequest, RevokeUsersOrganizationResponse, RevokeUsersOrganizationForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: RevokeUsersOrganizationForZoneRequest, output: RevokeUsersOrganizationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type RotateAccessKeyError = CloudflareOpError; /** Perfoms a key rotation for an account. */ export const rotateAccessKey: API.OperationMethod< RotateAccessKeyRequest, RotateAccessKeyResponse, RotateAccessKeyError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: RotateAccessKeyRequest, output: RotateAccessKeyResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type RotateAccessSamlCertificateError = CloudflareOpError; /** Rotates the SAML encryption certificates within the specified certificate set. This generates a new certificate and moves the current certificate to the previous slot. If a previous certificate exists, it will be deactivated and removed. This endpoint ensures zero-downtime rotation by maintaining both current and previous certificates during the transition period, allowing IdPs time to update their configurations. Automated rotation happens 30 days before a current certificate's expiration. */ export const rotateAccessSamlCertificate: API.OperationMethod< RotateAccessSamlCertificateRequest, RotateAccessSamlCertificateResponse, RotateAccessSamlCertificateError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: RotateAccessSamlCertificateRequest, output: RotateAccessSamlCertificateResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type RotateAccessServiceTokenError = CloudflareOpError; /** Generates a new Client Secret for a service token and revokes the old one. */ export const rotateAccessServiceToken: API.OperationMethod< RotateAccessServiceTokenRequest, RotateAccessServiceTokenResponse, RotateAccessServiceTokenError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: RotateAccessServiceTokenRequest, output: RotateAccessServiceTokenResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type RotateSeedGatewayAuditSshSettingError = CloudflareOpError; /** Rotate the SSH account seed that generates the host key identity when connecting through the Cloudflare SSH Proxy. */ export const rotateSeedGatewayAuditSshSetting: API.OperationMethod< RotateSeedGatewayAuditSshSettingRequest, RotateSeedGatewayAuditSshSettingResponse, RotateSeedGatewayAuditSshSettingError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: RotateSeedGatewayAuditSshSettingRequest, output: RotateSeedGatewayAuditSshSettingResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type SyncAccessAiControlMcpServerError = CloudflareOpError; /** Syncs an MCP server's capabilities and returns the updated server state, including any connection errors. */ export const syncAccessAiControlMcpServer: API.OperationMethod< SyncAccessAiControlMcpServerRequest, SyncAccessAiControlMcpServerResponse, SyncAccessAiControlMcpServerError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: SyncAccessAiControlMcpServerRequest, output: SyncAccessAiControlMcpServerResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type TestNetworkPathDexTracerouteError = CloudflareOpError; /** Get a breakdown of metrics by hop for individual traceroute test runs. */ export const testNetworkPathDexTraceroute: API.OperationMethod< TestNetworkPathDexTracerouteRequest, TestNetworkPathDexTracerouteResponse, TestNetworkPathDexTracerouteError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: TestNetworkPathDexTracerouteRequest, output: TestNetworkPathDexTracerouteResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type TestPercentilesDexTracerouteError = CloudflareOpError; /** Get percentiles for a traceroute test for a given time period between 1 hour and 7 days. */ export const testPercentilesDexTraceroute: API.OperationMethod< TestPercentilesDexTracerouteRequest, TestPercentilesDexTracerouteResponse, TestPercentilesDexTracerouteError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: TestPercentilesDexTracerouteRequest, output: TestPercentilesDexTracerouteResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UnrevokeDeviceRegistrationError = CloudflareOpError; /** Unrevokes a list of WARP registrations. */ export const unrevokeDeviceRegistration: API.OperationMethod< UnrevokeDeviceRegistrationRequest, UnrevokeDeviceRegistrationResponse, UnrevokeDeviceRegistrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UnrevokeDeviceRegistrationRequest, output: UnrevokeDeviceRegistrationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessAiControlMcpPortalError = | McpPortalNotFound | McpPortalHostnameInUse | Forbidden | CloudflareOpError; /** Updates an MCP portal configuration. */ export const updateAccessAiControlMcpPortal: API.OperationMethod< UpdateAccessAiControlMcpPortalRequest, UpdateAccessAiControlMcpPortalResponse, UpdateAccessAiControlMcpPortalError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessAiControlMcpPortalRequest, output: UpdateAccessAiControlMcpPortalResponse, errors: [ McpPortalNotFound, McpPortalHostnameInUse, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessAiControlMcpServerError = CloudflareOpError; /** Updates an MCP portal configuration. */ export const updateAccessAiControlMcpServer: API.OperationMethod< UpdateAccessAiControlMcpServerRequest, UpdateAccessAiControlMcpServerResponse, UpdateAccessAiControlMcpServerError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessAiControlMcpServerRequest, output: UpdateAccessAiControlMcpServerResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessApplicationForAccountError = | AccessReferenceNotFound | CloudflareOpError; /** Updates an Access application. */ export const updateAccessApplicationForAccount: API.OperationMethod< UpdateAccessApplicationForAccountRequest, UpdateAccessApplicationResponse, UpdateAccessApplicationForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessApplicationForAccountRequest, output: UpdateAccessApplicationResponse, errors: [AccessReferenceNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessApplicationForZoneError = | AccessReferenceNotFound | CloudflareOpError; /** Updates an Access application. */ export const updateAccessApplicationForZone: API.OperationMethod< UpdateAccessApplicationForZoneRequest, UpdateAccessApplicationResponse, UpdateAccessApplicationForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessApplicationForZoneRequest, output: UpdateAccessApplicationResponse, errors: [AccessReferenceNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessApplicationPolicyForAccountError = CloudflareOpError; /** Updates an Access policy specific to an application. To update a reusable policy, use the /account or zones/{account or zone_id}/policies/{uid} endpoint. */ export const updateAccessApplicationPolicyForAccount: API.OperationMethod< UpdateAccessApplicationPolicyForAccountRequest, UpdateAccessApplicationPolicyResponse, UpdateAccessApplicationPolicyForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessApplicationPolicyForAccountRequest, output: UpdateAccessApplicationPolicyResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessApplicationPolicyForZoneError = CloudflareOpError; /** Updates an Access policy specific to an application. To update a reusable policy, use the /account or zones/{account or zone_id}/policies/{uid} endpoint. */ export const updateAccessApplicationPolicyForZone: API.OperationMethod< UpdateAccessApplicationPolicyForZoneRequest, UpdateAccessApplicationPolicyResponse, UpdateAccessApplicationPolicyForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessApplicationPolicyForZoneRequest, output: UpdateAccessApplicationPolicyResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessBookmarkError = | AccessBookmarkNotFound | CloudflareOpError; /** Updates a configured Bookmark application. */ export const updateAccessBookmark: API.OperationMethod< UpdateAccessBookmarkRequest, UpdateAccessBookmarkResponse, UpdateAccessBookmarkError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessBookmarkRequest, output: UpdateAccessBookmarkResponse, errors: [AccessBookmarkNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessCertificateForAccountError = | AccessCertificateNotFound | CloudflareOpError; /** Updates a configured mTLS certificate. */ export const updateAccessCertificateForAccount: API.OperationMethod< UpdateAccessCertificateForAccountRequest, UpdateAccessCertificateResponse, UpdateAccessCertificateForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessCertificateForAccountRequest, output: UpdateAccessCertificateResponse, errors: [AccessCertificateNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessCertificateForZoneError = | AccessCertificateNotFound | CloudflareOpError; /** Updates a configured mTLS certificate. */ export const updateAccessCertificateForZone: API.OperationMethod< UpdateAccessCertificateForZoneRequest, UpdateAccessCertificateResponse, UpdateAccessCertificateForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessCertificateForZoneRequest, output: UpdateAccessCertificateResponse, errors: [AccessCertificateNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessCustomPageError = | AccessCustomPageNotFound | CloudflareOpError; /** Update a custom page */ export const updateAccessCustomPage: API.OperationMethod< UpdateAccessCustomPageRequest, UpdateAccessCustomPageResponse, UpdateAccessCustomPageError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessCustomPageRequest, output: UpdateAccessCustomPageResponse, errors: [AccessCustomPageNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessGroupForAccountError = CloudflareOpError; /** Updates a configured Access group. */ export const updateAccessGroupForAccount: API.OperationMethod< UpdateAccessGroupForAccountRequest, UpdateAccessGroupResponse, UpdateAccessGroupForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessGroupForAccountRequest, output: UpdateAccessGroupResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessGroupForZoneError = CloudflareOpError; /** Updates a configured Access group. */ export const updateAccessGroupForZone: API.OperationMethod< UpdateAccessGroupForZoneRequest, UpdateAccessGroupResponse, UpdateAccessGroupForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessGroupForZoneRequest, output: UpdateAccessGroupResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessInfrastructureTargetError = | TargetNotFound | Forbidden | CloudflareOpError; /** Update target */ export const updateAccessInfrastructureTarget: API.OperationMethod< UpdateAccessInfrastructureTargetRequest, UpdateAccessInfrastructureTargetResponse, UpdateAccessInfrastructureTargetError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessInfrastructureTargetRequest, output: UpdateAccessInfrastructureTargetResponse, errors: [TargetNotFound, Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessPolicyError = CloudflareOpError; /** Updates a Access reusable policy. */ export const updateAccessPolicy: API.OperationMethod< UpdateAccessPolicyRequest, UpdateAccessPolicyResponse, UpdateAccessPolicyError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessPolicyRequest, output: UpdateAccessPolicyResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessServiceTokenForAccountError = CloudflareOpError; /** Updates a configured service token. */ export const updateAccessServiceTokenForAccount: API.OperationMethod< UpdateAccessServiceTokenForAccountRequest, UpdateAccessServiceTokenResponse, UpdateAccessServiceTokenForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessServiceTokenForAccountRequest, output: UpdateAccessServiceTokenResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessServiceTokenForZoneError = CloudflareOpError; /** Updates a configured service token. */ export const updateAccessServiceTokenForZone: API.OperationMethod< UpdateAccessServiceTokenForZoneRequest, UpdateAccessServiceTokenResponse, UpdateAccessServiceTokenForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessServiceTokenForZoneRequest, output: UpdateAccessServiceTokenResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessTagError = AccessTagNotFound | CloudflareOpError; /** Update a tag */ export const updateAccessTag: API.OperationMethod< UpdateAccessTagRequest, UpdateAccessTagResponse, UpdateAccessTagError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessTagRequest, output: UpdateAccessTagResponse, errors: [AccessTagNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateAccessUserError = CloudflareOpError; /** Updates a specific user's name for an account. Requires the user's current email as confirmation (email cannot be changed). */ export const updateAccessUser: API.OperationMethod< UpdateAccessUserRequest, UpdateAccessUserResponse, UpdateAccessUserError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateAccessUserRequest, output: UpdateAccessUserResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateCasbIntegrationError = CloudflareOpError; /** Updates an integration's name, permissions, DLP profiles, use cases, or credentials. */ export const updateCasbIntegration: API.OperationMethod< UpdateCasbIntegrationRequest, UpdateCasbIntegrationResponse, UpdateCasbIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateCasbIntegrationRequest, output: UpdateCasbIntegrationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDeviceDexTestError = | DexTestNotFound | Forbidden | CloudflareOpError; /** Update a DEX test. */ export const updateDeviceDexTest: API.OperationMethod< UpdateDeviceDexTestRequest, UpdateDeviceDexTestResponse, UpdateDeviceDexTestError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDeviceDexTestRequest, output: UpdateDeviceDexTestResponse, errors: [DexTestNotFound, Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDeviceNetworkError = | DeviceNetworkNotFound | Forbidden | CloudflareOpError; /** Updates a configured device managed network. */ export const updateDeviceNetwork: API.OperationMethod< UpdateDeviceNetworkRequest, UpdateDeviceNetworkResponse, UpdateDeviceNetworkError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDeviceNetworkRequest, output: UpdateDeviceNetworkResponse, errors: [ DeviceNetworkNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDevicePostureError = | PostureRuleNotFound | Forbidden | CloudflareOpError; /** Updates a device posture rule. */ export const updateDevicePosture: API.OperationMethod< UpdateDevicePostureRequest, UpdateDevicePostureResponse, UpdateDevicePostureError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDevicePostureRequest, output: UpdateDevicePostureResponse, errors: [ PostureRuleNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDlpCustomPromptTopicError = CloudflareOpError; /** Updates a DLP custom prompt topic entry. */ export const updateDlpCustomPromptTopic: API.OperationMethod< UpdateDlpCustomPromptTopicRequest, UpdateDlpCustomPromptTopicResponse, UpdateDlpCustomPromptTopicError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDlpCustomPromptTopicRequest, output: UpdateDlpCustomPromptTopicResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDlpDataClassError = CloudflareOpError; /** Update the attributes of a single data class */ export const updateDlpDataClass: API.OperationMethod< UpdateDlpDataClassRequest, UpdateDlpDataClassResponse, UpdateDlpDataClassError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDlpDataClassRequest, output: UpdateDlpDataClassResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDlpDatasetError = CloudflareOpError; /** Updates the configuration of an existing DLP dataset, such as its name, description, or detection settings. */ export const updateDlpDataset: API.OperationMethod< UpdateDlpDatasetRequest, UpdateDlpDatasetResponse, UpdateDlpDatasetError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDlpDatasetRequest, output: UpdateDlpDatasetResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDlpDataTagCategoryError = CloudflareOpError; /** Update the attributes of a single data tag category. */ export const updateDlpDataTagCategory: API.OperationMethod< UpdateDlpDataTagCategoryRequest, UpdateDlpDataTagCategoryResponse, UpdateDlpDataTagCategoryError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDlpDataTagCategoryRequest, output: UpdateDlpDataTagCategoryResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDlpDataTagCategoryDataTagError = CloudflareOpError; /** Update the attributes of a single data tag. */ export const updateDlpDataTagCategoryDataTag: API.OperationMethod< UpdateDlpDataTagCategoryDataTagRequest, UpdateDlpDataTagCategoryDataTagResponse, UpdateDlpDataTagCategoryDataTagError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDlpDataTagCategoryDataTagRequest, output: UpdateDlpDataTagCategoryDataTagResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDlpEmailRuleError = CloudflareOpError; /** Update email scanner rule */ export const updateDlpEmailRule: API.OperationMethod< UpdateDlpEmailRuleRequest, UpdateDlpEmailRuleResponse, UpdateDlpEmailRuleError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDlpEmailRuleRequest, output: UpdateDlpEmailRuleResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDlpEntryError = CloudflareOpError; /** Updates a DLP entry. */ export const updateDlpEntry: API.OperationMethod< UpdateDlpEntryRequest, UpdateDlpEntryResponse, UpdateDlpEntryError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDlpEntryRequest, output: UpdateDlpEntryResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDlpEntryCustomError = | DlpEntryNotFound | Forbidden | CloudflareOpError; /** Updates a DLP custom entry. */ export const updateDlpEntryCustom: API.OperationMethod< UpdateDlpEntryCustomRequest, UpdateDlpEntryCustomResponse, UpdateDlpEntryCustomError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDlpEntryCustomRequest, output: UpdateDlpEntryCustomResponse, errors: [DlpEntryNotFound, Forbidden, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDlpEntryIntegrationError = CloudflareOpError; /** Updates a DLP entry. */ export const updateDlpEntryIntegration: API.OperationMethod< UpdateDlpEntryIntegrationRequest, UpdateDlpEntryIntegrationResponse, UpdateDlpEntryIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDlpEntryIntegrationRequest, output: UpdateDlpEntryIntegrationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDlpEntryPredefinedError = CloudflareOpError; /** Updates a DLP entry. */ export const updateDlpEntryPredefined: API.OperationMethod< UpdateDlpEntryPredefinedRequest, UpdateDlpEntryPredefinedResponse, UpdateDlpEntryPredefinedError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDlpEntryPredefinedRequest, output: UpdateDlpEntryPredefinedResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDlpProfileCustomError = | DlpProfileNotFound | Forbidden | CloudflareOpError; /** Updates a DLP custom profile. */ export const updateDlpProfileCustom: API.OperationMethod< UpdateDlpProfileCustomRequest, UpdateDlpProfileCustomResponse, UpdateDlpProfileCustomError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDlpProfileCustomRequest, output: UpdateDlpProfileCustomResponse, errors: [ DlpProfileNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDlpSensitivityGroupError = CloudflareOpError; /** Update the attributes of a single sensitivity group. */ export const updateDlpSensitivityGroup: API.OperationMethod< UpdateDlpSensitivityGroupRequest, UpdateDlpSensitivityGroupResponse, UpdateDlpSensitivityGroupError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDlpSensitivityGroupRequest, output: UpdateDlpSensitivityGroupResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateDlpSensitivityGroupLevelError = CloudflareOpError; /** Update the attributes of a single sensitivity level. */ export const updateDlpSensitivityGroupLevel: API.OperationMethod< UpdateDlpSensitivityGroupLevelRequest, UpdateDlpSensitivityGroupLevelResponse, UpdateDlpSensitivityGroupLevelError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateDlpSensitivityGroupLevelRequest, output: UpdateDlpSensitivityGroupLevelResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateGatewayListError = GatewayListNotFound | CloudflareOpError; /** Updates a configured Zero Trust list. Skips updating list items if not included in the payload. A non empty list items will overwrite the existing list. */ export const updateGatewayList: API.OperationMethod< UpdateGatewayListRequest, UpdateGatewayListResponse, UpdateGatewayListError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateGatewayListRequest, output: UpdateGatewayListResponse, errors: [GatewayListNotFound, CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateGatewayLocationError = | GatewayLocationNotFound | CannotDemoteDefaultGatewayLocation | CloudflareOpError; /** Update a configured Zero Trust Gateway location. */ export const updateGatewayLocation: API.OperationMethod< UpdateGatewayLocationRequest, UpdateGatewayLocationResponse, UpdateGatewayLocationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateGatewayLocationRequest, output: UpdateGatewayLocationResponse, errors: [ GatewayLocationNotFound, CannotDemoteDefaultGatewayLocation, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateGatewayPacfileError = CloudflareOpError; /** Update a configured Zero Trust Gateway PAC file. */ export const updateGatewayPacfile: API.OperationMethod< UpdateGatewayPacfileRequest, UpdateGatewayPacfileResponse, UpdateGatewayPacfileError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateGatewayPacfileRequest, output: UpdateGatewayPacfileResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateGatewayRuleError = CloudflareOpError; /** Update a configured Zero Trust Gateway rule. */ export const updateGatewayRule: API.OperationMethod< UpdateGatewayRuleRequest, UpdateGatewayRuleResponse, UpdateGatewayRuleError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateGatewayRuleRequest, output: UpdateGatewayRuleResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateIdentityProviderForAccountError = | AccessIdentityProviderNotFound | CloudflareOpError; /** Updates a configured identity provider. */ export const updateIdentityProviderForAccount: API.OperationMethod< UpdateIdentityProviderForAccountRequest, UpdateIdentityProviderResponse, UpdateIdentityProviderForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateIdentityProviderForAccountRequest, output: UpdateIdentityProviderResponse, errors: [ AccessIdentityProviderNotFound, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateIdentityProviderForZoneError = | AccessIdentityProviderNotFound | CloudflareOpError; /** Updates a configured identity provider. */ export const updateIdentityProviderForZone: API.OperationMethod< UpdateIdentityProviderForZoneRequest, UpdateIdentityProviderResponse, UpdateIdentityProviderForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateIdentityProviderForZoneRequest, output: UpdateIdentityProviderResponse, errors: [ AccessIdentityProviderNotFound, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateOrganizationForAccountError = CloudflareOpError; /** Updates the configuration for your Zero Trust organization. */ export const updateOrganizationForAccount: API.OperationMethod< UpdateOrganizationForAccountRequest, UpdateOrganizationResponse, UpdateOrganizationForAccountError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateOrganizationForAccountRequest, output: UpdateOrganizationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateOrganizationForZoneError = CloudflareOpError; /** Updates the configuration for your Zero Trust organization. */ export const updateOrganizationForZone: API.OperationMethod< UpdateOrganizationForZoneRequest, UpdateOrganizationResponse, UpdateOrganizationForZoneError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateOrganizationForZoneRequest, output: UpdateOrganizationResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type UpdateRiskScoringIntegrationError = | RiskScoringIntegrationNotFound | Forbidden | CloudflareOpError; /** Overwrite the reference_id, tenant_url, and active values with the ones provided. */ export const updateRiskScoringIntegration: API.OperationMethod< UpdateRiskScoringIntegrationRequest, UpdateRiskScoringIntegrationResponse, UpdateRiskScoringIntegrationError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: UpdateRiskScoringIntegrationRequest, output: UpdateRiskScoringIntegrationResponse, errors: [ RiskScoringIntegrationNotFound, Forbidden, CloudflareRateLimited, CloudflareError, ], protocol: CloudflareProtocol, retry: Retry.Retry, })); export type ValidateDlpPatternError = CloudflareOpError; /** Validates whether this pattern is a valid regular expression. Rejects it if the regular expression is too complex or can match an unbounded-length string. The regex will be rejected if it uses `*` or `+`. Bound the maximum number of characters that can be matched using a range, e.g. `{1,100}`. */ export const validateDlpPattern: API.OperationMethod< ValidateDlpPatternRequest, ValidateDlpPatternResponse, ValidateDlpPatternError, CloudflareOpContext > = /*@__PURE__*/ API.make(() => ({ input: ValidateDlpPatternRequest, output: ValidateDlpPatternResponse, errors: [CloudflareRateLimited, CloudflareError], protocol: CloudflareProtocol, retry: Retry.Retry, })); // Alias of createDlpEntry (same route, alternate export name upstream). export const createDlpEntryCustom = createDlpEntry; export type CreateDlpEntryCustomRequest = CreateDlpEntryRequest; export type CreateDlpEntryCustomResponse = CreateDlpEntryResponse; export type CreateDlpEntryCustomError = CreateDlpEntryError; // Alias of deleteDlpEntry (same route, alternate export name upstream). export const deleteDlpEntryCustom = deleteDlpEntry; export type DeleteDlpEntryCustomRequest = DeleteDlpEntryRequest; export type DeleteDlpEntryCustomResponse = DeleteDlpEntryResponse; export type DeleteDlpEntryCustomError = DeleteDlpEntryError; // Alias of getDlpEntry (same route, alternate export name upstream). export const getDlpEntryCustom = getDlpEntry; export type GetDlpEntryCustomRequest = GetDlpEntryRequest; export type GetDlpEntryCustomResponse = GetDlpEntryResponse; export type GetDlpEntryCustomError = GetDlpEntryError; // Alias of getDlpEntry (same route, alternate export name upstream). export const getDlpEntryIntegration = getDlpEntry; export type GetDlpEntryIntegrationRequest = GetDlpEntryRequest; export type GetDlpEntryIntegrationResponse = GetDlpEntryResponse; export type GetDlpEntryIntegrationError = GetDlpEntryError; // Alias of getDlpEntry (same route, alternate export name upstream). export const getDlpEntryPredefined = getDlpEntry; export type GetDlpEntryPredefinedRequest = GetDlpEntryRequest; export type GetDlpEntryPredefinedResponse = GetDlpEntryResponse; export type GetDlpEntryPredefinedError = GetDlpEntryError; // Alias of listDlpEntries (same route, alternate export name upstream). export const listDlpEntryCustoms = listDlpEntries; export type ListDlpEntryCustomsRequest = ListDlpEntriesRequest; export type ListDlpEntryCustomsResponse = ListDlpEntriesResponse; export type ListDlpEntryCustomsError = ListDlpEntriesError; // Alias of listDlpEntries (same route, alternate export name upstream). export const listDlpEntryIntegrations = listDlpEntries; export type ListDlpEntryIntegrationsRequest = ListDlpEntriesRequest; export type ListDlpEntryIntegrationsResponse = ListDlpEntriesResponse; export type ListDlpEntryIntegrationsError = ListDlpEntriesError; // Alias of listDlpEntries (same route, alternate export name upstream). export const listDlpEntryPredefineds = listDlpEntries; export type ListDlpEntryPredefinedsRequest = ListDlpEntriesRequest; export type ListDlpEntryPredefinedsResponse = ListDlpEntriesResponse; export type ListDlpEntryPredefinedsError = ListDlpEntriesError;